Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/e692cb64eff9cf8561feb1fa4df2fde2d4b7ea46.roa
File:                     e692cb64eff9cf8561feb1fa4df2fde2d4b7ea46.roa (raw, json)
Hash identifier:          xkg7MLZcMaOrNd0hXmKpw9u+egU6EdoA9GufS88clVg=
Subject key identifier:   21:9E:9D:FC:D3:E2:13:5A:2C:72:AC:89:01:89:C7:F9:0A:84:0B:DD
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       13DED1
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/e692cb64eff9cf8561feb1fa4df2fde2d4b7ea46.roa
Signing time:             Sun 12 Dec 2021 04:40:13 +0000
ROA not before:           Sat 11 Dec 2021 03:00:00 +0000
ROA not after:            Mon 11 Dec 2023 03:00:00 +0000
asID:                     266776
IP address blocks:        170.78.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302225 (0x13ded1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Dec 11 03:00:00 2021 GMT
            Not After : Dec 11 03:00:00 2023 GMT
        Subject: CN=e692cb64eff9cf8561feb1fa4df2fde2d4b7ea46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:4d:f9:bb:aa:c9:c6:69:c8:af:dc:b3:f6:
                    c3:4a:91:b8:85:cc:62:32:4b:e0:16:55:7d:61:de:
                    de:0b:fb:95:21:e4:4a:87:55:bb:93:b5:9c:70:48:
                    26:f2:15:ca:37:4e:e1:e6:06:b3:f0:0d:89:47:5a:
                    b6:68:62:bd:50:1a:ef:68:fa:95:40:31:05:54:c1:
                    b3:62:7b:2c:b2:e0:55:91:c6:3c:71:b3:56:26:58:
                    c9:4f:45:45:d5:91:a0:c1:33:e4:a1:64:df:04:76:
                    4c:7e:70:f5:d1:9a:08:95:9d:b3:ce:87:4b:43:84:
                    3b:62:7a:67:9b:ba:3a:6d:7d:e8:5e:a6:29:de:b8:
                    10:54:b6:02:ac:ec:5a:76:5e:47:d8:40:25:ad:57:
                    28:74:83:78:17:af:32:5a:79:7d:a0:d3:b0:a6:2a:
                    ff:b1:0b:7a:13:73:25:fc:83:87:ee:b8:bd:8c:aa:
                    cd:53:df:ab:5f:63:3e:e0:f7:b4:db:c9:c8:23:48:
                    a3:49:79:81:75:c9:d2:2b:c1:44:7c:82:6d:62:2a:
                    50:f4:7f:a7:f5:b1:bc:af:92:d6:2f:95:5a:82:54:
                    e0:6a:43:b6:0c:dc:73:57:e4:16:29:24:7e:9f:a5:
                    44:dd:5d:70:21:df:0d:fb:cb:7a:55:67:12:85:58:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:9D:FC:D3:E2:13:5A:2C:72:AC:89:01:89:C7:F9:0A:84:0B:DD
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/e692cb64eff9cf8561feb1fa4df2fde2d4b7ea46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:af:2f:e4:c5:97:27:aa:ec:8b:bf:15:75:8d:1a:a7:a0:ed:
         7a:40:df:f6:b7:e0:c8:77:04:2d:d8:c5:ce:71:63:85:69:e5:
         45:80:83:f8:b3:d7:6c:31:6d:d0:4b:b0:c3:a9:be:02:d5:ae:
         af:1d:ea:92:cc:43:47:2d:c3:3b:32:bb:61:a2:e2:2d:a4:b0:
         fa:fa:91:f2:ac:70:f8:43:26:18:ab:0a:bb:e6:de:2c:bf:17:
         bb:c4:c4:b0:6e:0b:1c:46:56:c2:b1:0b:b1:c3:f8:3a:14:1b:
         69:c7:b5:70:d7:87:7d:7f:ae:77:ca:9c:3f:1c:cb:6d:8d:6b:
         03:50:4b:1c:db:78:88:23:6a:6d:d6:33:4e:47:89:f1:be:98:
         4e:da:80:40:9f:8e:7d:c1:af:03:04:2a:a1:1b:a8:6c:6b:a1:
         39:9d:e0:66:49:9d:e6:26:05:28:9b:81:3c:e0:16:b7:8a:25:
         cb:ed:a2:3d:d8:56:f1:36:60:4b:d9:e6:34:81:ff:7e:c3:92:
         41:5d:c4:53:c5:f0:ce:33:29:1c:43:86:45:ba:26:75:7a:8c:
         e0:da:3d:de:4c:39:23:86:dd:63:0b:c9:b4:3e:a4:22:98:fb:
         a9:b2:b8:2b:e2:12:01:b4:37:0d:33:eb:97:a5:ba:83:83:30:
         db:e3:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org