Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/fb1dd954f145171789b35ebf8de9398ed407ad72.roa
File:                     fb1dd954f145171789b35ebf8de9398ed407ad72.roa (raw, json)
Hash identifier:          kNPcvaJ3HWJ+ZPE+EPd8jzK1+ePj/XAyM+EIaN5l5r4=
Subject key identifier:   BC:DD:63:AF:13:B8:CA:FE:4E:55:C5:2A:79:11:F8:8B:FE:10:3D:91
Certificate issuer:       /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial:       0383B0
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/fb1dd954f145171789b35ebf8de9398ed407ad72.roa
Signing time:             Mon 04 Oct 2021 20:27:32 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     397044
IP address blocks:        170.231.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230320 (0x383b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=fb1dd954f145171789b35ebf8de9398ed407ad72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:bd:15:89:83:68:41:c6:05:6a:0a:a1:a3:
                    52:a4:8a:93:ce:07:fd:ff:ca:24:15:62:79:3e:27:
                    d2:6b:72:d1:a1:05:1b:86:0b:58:fd:0b:7a:26:2b:
                    10:57:dd:9f:4d:1b:e5:8c:75:55:8e:d6:34:ef:49:
                    f3:7e:4f:02:f7:38:ee:58:fc:57:b5:94:4e:af:ef:
                    99:d9:2b:f6:da:6e:00:b5:0c:90:88:39:bf:36:9b:
                    40:e5:54:5f:c8:64:92:d3:9f:44:73:fa:45:64:1d:
                    7c:04:6a:66:f0:7c:0c:4b:af:66:ae:b0:bc:bc:c7:
                    0f:98:6d:65:69:fc:2f:5a:52:fa:90:2a:9f:1b:cd:
                    09:ea:79:e8:36:dc:18:39:d5:ae:ea:d8:04:a7:18:
                    77:80:24:f6:d6:86:33:52:18:e3:e0:e5:39:99:3d:
                    77:d5:aa:34:6c:11:a1:b8:bb:c1:9b:7d:e8:01:8e:
                    b7:bb:57:29:09:d0:43:7e:80:1e:fb:cd:c5:15:cc:
                    2f:a2:c7:97:c1:29:5a:57:b1:93:bf:8e:6e:c3:68:
                    fa:ab:0c:70:79:02:a4:ac:f9:c2:45:6b:b3:18:47:
                    ae:dc:7b:0a:58:60:ad:ce:c0:85:49:30:14:29:28:
                    fb:da:40:fd:c2:f4:fc:2d:36:69:d1:47:45:c3:7d:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:63:AF:13:B8:CA:FE:4E:55:C5:2A:79:11:F8:8B:FE:10:3D:91
            X509v3 Authority Key Identifier:
                keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/fb1dd954f145171789b35ebf8de9398ed407ad72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:06:a8:66:ff:e5:bb:0e:f2:fc:50:c0:a4:71:1c:31:e5:46:
         b8:15:20:b6:79:68:cc:42:84:ab:63:c2:81:cd:b3:f9:63:9c:
         77:e4:39:7f:a0:01:cb:cd:f2:76:c4:5b:09:3a:b0:e6:4a:39:
         66:8b:93:04:b6:11:c3:a3:a0:af:cf:f6:b4:95:9e:2f:25:e3:
         de:ae:5a:2b:3c:ea:3e:e9:82:95:4f:15:f4:ab:b8:26:a4:2e:
         9a:4f:35:83:af:70:7e:8c:b3:73:c4:e7:20:65:44:93:a9:59:
         4f:d0:45:9d:48:a6:09:bb:a0:f5:67:93:14:e7:45:d2:ac:93:
         f1:3d:81:00:4b:ed:27:c6:71:ec:e2:d5:52:87:9b:4f:72:47:
         67:15:fa:0f:97:0a:83:f9:4c:a8:ba:d2:87:02:a6:7c:17:67:
         9c:2b:07:64:dd:09:ae:bc:94:09:e8:ca:a8:2f:91:7b:fe:30:
         f1:c6:e4:66:31:16:5e:c5:0b:92:6a:70:58:3e:64:ab:e1:db:
         02:bd:82:95:ed:43:f3:c0:ba:a7:4f:bd:c5:60:cd:14:e7:7d:
         66:f7:c3:a2:86:ff:b7:9d:39:94:ff:33:be:51:a4:84:37:ba:
         6e:4d:4e:ba:1d:42:8f:d0:b0:30:0f:20:b2:00:c7:6a:73:57:
         4d:0c:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org