Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/c197d625467d21eb3f35a4079cb24c9a002ba847.roa
File:                     c197d625467d21eb3f35a4079cb24c9a002ba847.roa (raw, json)
Hash identifier:          3ksBZtUU58M+E9WEDfQYZOPaTPHM+PG4KqRBr8lof/M=
Subject key identifier:   28:F9:4E:A2:9F:7C:FF:A4:D2:F5:98:E3:D6:07:83:C1:24:87:32:59
Certificate issuer:       /CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
Certificate serial:       186CE0
Authority key identifier: 83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/c197d625467d21eb3f35a4079cb24c9a002ba847.roa
Signing time:             Thu 11 Jan 2024 18:32:11 +0000
ROA not before:           Thu 11 Jan 2024 18:32:08 +0000
ROA not after:            Thu 11 Jan 2029 18:32:08 +0000
asID:                     3257
IP address blocks:        170.231.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600736 (0x186ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
        Validity
            Not Before: Jan 11 18:32:08 2024 GMT
            Not After : Jan 11 18:32:08 2029 GMT
        Subject: CN=c197d625467d21eb3f35a4079cb24c9a002ba847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:9f:c4:4e:10:c9:fb:00:e1:3c:c9:d1:c3:
                    fb:3d:e8:20:2e:ca:b1:82:d6:16:7b:cf:95:b7:5f:
                    8b:19:00:e6:64:3f:cf:c7:f6:b8:29:e6:aa:75:bd:
                    5e:1e:9e:73:74:a1:7d:5b:d1:b0:91:a9:11:fb:7d:
                    85:5e:49:06:e1:6e:95:10:5a:63:95:dd:72:cd:e2:
                    fb:e2:53:fe:06:da:ae:4c:bf:30:d2:c4:ba:57:5a:
                    07:4b:bd:eb:ac:1b:4d:ea:76:8f:fa:66:d1:26:ba:
                    11:aa:54:70:81:e7:d9:ab:5b:05:2d:ff:6e:07:b2:
                    cc:b9:ca:dc:ec:0d:6d:89:cf:11:4a:6a:d4:8f:f0:
                    8f:36:56:1b:1f:b8:d8:4e:cd:c7:33:85:d2:17:12:
                    5d:cb:d8:13:7b:47:d6:4a:5b:53:e6:0f:14:98:bf:
                    9e:83:48:be:58:6c:df:ee:b5:32:a2:53:e1:10:ff:
                    14:37:56:39:f9:d5:d2:53:9d:f3:3c:82:a3:ed:6e:
                    b7:bc:e9:7d:ab:37:fe:02:62:f3:1c:13:69:fc:96:
                    2e:fb:fd:f4:2e:38:dc:cd:40:ab:fc:cf:ce:cb:52:
                    00:82:84:50:df:49:d8:b2:7a:70:5c:49:05:4f:b2:
                    32:00:89:df:13:35:ea:ae:f0:1b:e2:73:39:31:b9:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:4E:A2:9F:7C:FF:A4:D2:F5:98:E3:D6:07:83:C1:24:87:32:59
            X509v3 Authority Key Identifier:
                keyid:83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/c197d625467d21eb3f35a4079cb24c9a002ba847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:73:c8:76:ce:dc:fa:09:73:f5:6c:4d:24:0e:ec:b2:da:ba:
         05:24:20:e3:3f:1a:3b:14:f1:5c:8d:d5:4f:c2:59:f2:f0:2c:
         6f:09:98:8e:ed:bf:81:4a:39:6e:c0:37:45:38:6f:80:0e:26:
         8f:d4:10:9d:c4:b4:69:28:e3:22:27:3e:41:56:c4:f2:d7:02:
         db:73:b5:74:b5:b2:a0:4a:75:91:6b:16:14:51:3f:f8:92:d8:
         4a:e3:f7:ce:e7:af:28:bc:85:a4:88:46:a1:f2:97:f6:c0:ea:
         38:89:c0:71:79:32:bf:f9:de:02:a6:19:54:7d:03:78:8e:2d:
         d5:d9:30:20:15:9d:b8:7e:83:26:ff:47:c7:b1:ba:13:98:56:
         77:b6:23:a5:cd:2a:57:77:e0:30:8f:2b:c3:a4:95:45:c9:bd:
         8d:32:ca:9b:c0:c9:92:0b:ea:36:60:47:a9:50:3b:f1:42:51:
         a9:0d:d2:f2:db:50:27:27:8a:5e:7d:fc:7f:c9:8c:fa:73:d2:
         6a:a7:ff:65:48:f2:b1:8e:1b:4f:b1:8b:d6:24:d1:7a:13:ae:
         a7:1d:0d:00:b2:4c:1c:35:db:79:d5:e2:ff:cf:0a:95:d3:52:
         c0:ae:f0:89:68:46:72:bf:1c:5c:0c:bf:0d:44:46:bb:74:1d:
         6d:f1:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org