Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/2146f19fe74de3f4880ceb9aab6277fbd61e3751.roa
File:                     2146f19fe74de3f4880ceb9aab6277fbd61e3751.roa (raw, json)
Hash identifier:          iYQvuvFYzAfxCsKqTXAEnB2XhBr4z0h2ZHvXZkG6/Bc=
Subject key identifier:   92:1B:E2:EA:87:EF:36:32:A3:AC:31:82:FE:BC:15:C2:40:CB:15:26
Certificate issuer:       /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial:       0DA7AF
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/2146f19fe74de3f4880ceb9aab6277fbd61e3751.roa
Signing time:             Wed 24 Mar 2021 14:42:15 +0000
ROA not before:           Wed 24 Mar 2021 14:42:15 +0000
ROA not after:            Tue 24 Mar 2026 14:42:15 +0000
asID:                     262234
IP address blocks:        170.245.56.0/22 maxlen: 24
                          179.49.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894895 (0xda7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
        Validity
            Not Before: Mar 24 14:42:15 2021 GMT
            Not After : Mar 24 14:42:15 2026 GMT
        Subject: CN=2146f19fe74de3f4880ceb9aab6277fbd61e3751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:27:1a:ed:7d:3a:bf:17:da:07:66:dd:4e:
                    06:7a:11:71:5e:49:75:33:25:ad:c1:1a:89:dd:8c:
                    ea:7c:eb:91:ed:b4:7e:81:61:7d:c0:4a:3d:a4:c4:
                    12:eb:3a:f0:90:9c:de:6a:ca:2b:67:a1:40:20:b1:
                    e1:93:50:be:54:70:0a:1b:e1:d7:5d:e8:7e:cf:f2:
                    9c:e4:52:84:dc:55:0a:d0:a8:a0:ec:2a:31:99:1e:
                    a7:2c:f1:f0:d4:ec:06:48:d9:e7:0d:e5:93:35:48:
                    f9:20:8e:ae:f7:c1:19:91:ff:42:1d:a0:bb:bc:1c:
                    7b:af:6d:af:27:de:1d:99:4d:4f:e0:de:eb:7b:f2:
                    ec:67:6f:2d:76:85:15:36:95:15:70:79:8c:70:12:
                    ea:b4:04:ee:0f:b8:36:42:15:39:2c:0d:75:0a:69:
                    08:40:a2:2c:d2:58:d8:96:fd:b7:f3:0c:6a:3d:ef:
                    c7:90:87:10:28:10:39:47:0d:42:22:76:3d:b8:3f:
                    69:d8:6e:5a:8d:53:c9:72:a8:e4:d5:d2:8e:01:6a:
                    b8:12:8b:bd:47:87:60:6e:f9:22:4b:9e:2d:f1:5b:
                    df:df:bd:cb:53:c2:57:d6:fc:b6:d4:75:c0:c2:4b:
                    86:17:41:33:04:63:b3:34:d4:9e:12:d5:98:00:56:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:E2:EA:87:EF:36:32:A3:AC:31:82:FE:BC:15:C2:40:CB:15:26
            X509v3 Authority Key Identifier:
                keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/2146f19fe74de3f4880ceb9aab6277fbd61e3751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.56.0/22
                  179.49.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:3c:6c:1c:9d:6c:6e:46:93:7c:98:ec:dd:1b:fc:09:62:
         86:e5:90:46:b2:f2:a8:3d:94:af:53:2a:e0:73:e5:23:b1:7b:
         27:43:c5:ac:e2:b8:67:92:c5:04:bd:5a:36:a2:ae:9b:00:ef:
         aa:41:85:fc:ba:93:03:45:67:5b:c6:6f:3f:40:70:9e:69:06:
         8c:36:74:05:e3:1e:da:1b:bf:6b:e9:b2:24:96:37:25:e2:20:
         00:1c:cd:bf:8e:07:8d:dc:5f:83:15:46:e0:38:54:d7:b8:98:
         99:f8:62:fb:5b:08:ed:de:ca:fe:cf:56:7b:3d:8a:60:bb:bf:
         b8:d0:11:86:59:60:13:e5:1f:c3:be:a9:ce:8c:56:35:b0:bc:
         94:04:52:19:47:c8:c7:ff:d6:eb:a5:3d:91:eb:d6:04:21:38:
         0f:50:a3:06:e3:ce:5c:a0:68:3b:e8:dd:50:08:0b:9a:1d:99:
         88:2f:f8:05:3b:ef:bc:5c:6f:9f:27:ce:7b:0f:97:ce:99:ad:
         9a:cf:b2:28:88:f1:ac:e6:20:66:82:fb:4e:65:b6:7d:3f:84:
         65:4d:ac:c5:22:28:d3:f0:c8:df:a9:cc:a6:4f:73:9e:bf:c2:
         c0:dc:f6:07:b6:f0:08:35:0b:04:6f:94:0b:df:75:c3:4a:1a:
         8f:69:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org