Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/c4eca440be4718ef48b8f86c34c8b9069debd9d7.roa
File:                     c4eca440be4718ef48b8f86c34c8b9069debd9d7.roa (raw, json)
Hash identifier:          lDPmIBnKDzlcWKNs5Tu6CFP85arosw7kjquMk/UTjGo=
Subject key identifier:   C3:3B:66:C1:3F:17:34:28:DD:9D:3A:CD:3C:57:07:F7:48:AE:08:90
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       258F48
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/c4eca440be4718ef48b8f86c34c8b9069debd9d7.roa
Signing time:             Sun 10 Dec 2023 07:30:03 +0000
ROA not before:           Sun 10 Dec 2023 07:30:02 +0000
ROA not after:            Tue 09 Dec 2025 07:30:02 +0000
asID:                     266776
IP address blocks:        170.78.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461512 (0x258f48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Dec 10 07:30:02 2023 GMT
            Not After : Dec  9 07:30:02 2025 GMT
        Subject: CN=c4eca440be4718ef48b8f86c34c8b9069debd9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:fc:9e:b5:c0:b9:af:2f:83:30:5a:b6:a7:
                    58:d6:4e:17:26:90:0a:7c:bf:b3:1e:ea:ee:82:f5:
                    29:79:ed:bc:75:a6:72:9d:e2:e5:f9:05:07:96:ca:
                    c1:29:2c:10:8e:09:4d:88:ee:34:80:81:13:45:a8:
                    62:94:37:48:5b:72:75:14:45:5d:ed:2e:e4:52:d5:
                    fa:03:6b:d9:a6:a8:b8:53:6f:ee:96:54:a4:12:7d:
                    81:20:42:94:c9:6c:c8:2f:8d:c9:48:c9:8f:b1:b2:
                    b9:77:27:35:c3:a3:02:35:a7:31:a3:5e:6c:78:97:
                    b9:1c:58:14:eb:2c:f1:f2:45:33:31:6c:63:96:a6:
                    86:61:7c:e8:6e:d9:71:f3:7c:7a:11:ef:12:ed:5b:
                    eb:a1:c8:00:ef:0e:78:b8:ba:9e:8f:6d:3e:74:4f:
                    91:32:b2:af:4b:18:9b:3d:74:e0:f4:00:79:af:0c:
                    20:7c:07:2e:1f:79:c1:d2:3f:b5:53:fd:e8:e4:93:
                    e5:ec:18:c7:7f:67:c8:8d:cc:e7:9b:d4:4f:88:d4:
                    50:07:09:52:9e:5b:0f:56:68:bf:28:66:2c:7a:a7:
                    c1:9e:d5:a1:94:a2:4f:1a:ac:80:90:87:03:cb:6b:
                    f7:43:50:4e:3b:d4:22:10:02:4c:93:40:11:d6:3d:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:66:C1:3F:17:34:28:DD:9D:3A:CD:3C:57:07:F7:48:AE:08:90
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/c4eca440be4718ef48b8f86c34c8b9069debd9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2e:8a:cf:ad:f4:47:c9:95:99:54:fa:6c:99:19:0b:8d:3d:
         57:70:06:d4:52:22:67:d5:86:3d:ab:5f:85:58:d0:23:c7:88:
         18:de:46:14:e4:0b:a8:62:a8:97:e2:90:81:fa:d1:cf:be:7d:
         db:46:75:78:98:44:ee:3c:77:a6:79:06:40:15:71:ab:87:ab:
         7a:4a:68:f9:84:92:32:15:b9:76:6e:2a:41:29:43:38:56:77:
         2f:bb:d2:00:43:a9:8b:5b:1a:85:c9:95:f1:e2:b2:7a:60:67:
         a7:ef:3c:6f:28:3c:3b:77:15:26:1a:20:7c:ad:1c:be:13:5a:
         c0:26:df:e9:66:d4:88:29:1a:e4:d6:b0:aa:01:13:a6:ad:eb:
         cd:f1:1d:1c:07:8e:86:4e:14:23:ad:a2:8e:f4:c1:3f:e6:0e:
         f0:01:d4:e2:8e:6a:62:c2:29:c0:21:5d:11:52:f6:a4:76:c3:
         62:82:9d:5e:f6:df:cb:50:26:9d:7f:70:c7:b5:7f:99:d9:cb:
         8c:d3:42:c0:c7:e8:24:70:cf:4d:01:c7:49:be:41:97:98:da:
         c9:c2:7d:c0:6c:13:c9:66:af:83:f6:a1:44:ba:5b:16:24:8f:
         dd:fe:f7:03:e4:b2:fb:2c:db:da:f4:da:e8:08:d3:df:8b:eb:
         51:a7:6d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org