Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/5c268997161837614a258ff54e54aa14a0f3c9d9.roa
File:                     5c268997161837614a258ff54e54aa14a0f3c9d9.roa (raw, json)
Hash identifier:          e4uaFXQAuz4S8v3iCGjs4UtcZ+iT2lUvXZTgozIca1k=
Subject key identifier:   19:17:A6:23:0C:E4:5D:67:F4:6C:B7:C4:16:ED:D0:3B:B6:66:27:F5
Certificate issuer:       /CN=4f53fcfde23625867afb2a1134998b78d084d178
Certificate serial:       0D8CFB
Authority key identifier: 30:64:58:57:D8:52:31:DA:3F:40:12:99:3F:66:02:A4:76:40:23:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f53fcfde23625867afb2a1134998b78d084d178.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/5c268997161837614a258ff54e54aa14a0f3c9d9.roa
Signing time:             Wed 24 Mar 2021 14:32:54 +0000
ROA not before:           Wed 24 Mar 2021 14:32:54 +0000
ROA not after:            Tue 24 Mar 2026 14:32:54 +0000
asID:                     27839
IP address blocks:        170.247.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888059 (0xd8cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f53fcfde23625867afb2a1134998b78d084d178
        Validity
            Not Before: Mar 24 14:32:54 2021 GMT
            Not After : Mar 24 14:32:54 2026 GMT
        Subject: CN=5c268997161837614a258ff54e54aa14a0f3c9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:d1:cf:98:9f:7c:49:cb:06:21:f6:e3:3d:
                    9f:7b:49:92:e4:3d:21:36:7a:a3:73:07:21:f5:e3:
                    cd:82:d7:20:cc:71:6c:3c:72:31:6d:90:66:ed:fc:
                    a4:70:40:e2:54:ef:33:dd:bc:38:25:b1:e0:b8:5a:
                    2c:7c:f9:80:33:94:50:18:bc:b4:d9:91:c1:d9:46:
                    71:e8:c3:c4:01:6b:66:76:4a:d6:5b:e9:cf:38:f6:
                    cf:bb:3e:35:1e:38:b5:6e:02:e9:68:33:e7:72:0d:
                    48:e4:c8:a5:88:3a:11:7a:86:f1:65:2a:f1:cd:f2:
                    74:ee:4e:5b:38:50:8e:00:69:d1:d3:b7:5b:61:1c:
                    88:04:ba:af:54:d4:eb:b1:cc:a6:cc:eb:11:9a:f3:
                    dc:5c:dc:33:55:2d:f3:41:cb:6b:4e:7b:99:3f:93:
                    db:81:f8:0a:1c:36:01:cf:37:0c:79:3a:b6:0e:31:
                    f6:ca:bf:a2:06:41:b6:6c:c2:a1:80:4a:8d:28:87:
                    3e:1e:31:f9:25:80:19:19:f8:53:03:55:4d:c6:8f:
                    46:d6:9b:58:2b:53:2e:fc:07:72:71:56:a1:59:83:
                    1c:fa:ac:0a:83:fc:00:d0:70:11:48:d9:65:aa:2e:
                    77:0d:82:7f:60:66:dc:51:ad:59:9c:6b:7c:47:cb:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:A6:23:0C:E4:5D:67:F4:6C:B7:C4:16:ED:D0:3B:B6:66:27:F5
            X509v3 Authority Key Identifier:
                keyid:30:64:58:57:D8:52:31:DA:3F:40:12:99:3F:66:02:A4:76:40:23:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f53fcfde23625867afb2a1134998b78d084d178.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/5c268997161837614a258ff54e54aa14a0f3c9d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/4f53fcfde23625867afb2a1134998b78d084d178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:91:30:0f:2e:de:58:5d:3f:10:0f:0b:75:3e:2f:f5:69:e7:
         e1:b3:05:b9:c8:b6:ff:92:c8:9f:c0:fb:91:c1:94:0c:68:cf:
         33:06:28:45:fd:3c:b0:06:51:8b:20:5c:1b:e9:60:0b:3a:49:
         1a:a2:a6:a1:e2:ab:e0:83:62:54:c4:9b:d2:9a:66:c4:cf:bc:
         4f:58:c1:98:ac:0d:b7:1c:00:50:4e:70:80:42:28:11:5f:d5:
         2d:93:d2:85:e0:ce:58:9e:80:91:9e:70:54:87:e9:0b:6c:c5:
         5f:de:52:13:5f:9e:6d:29:3d:5d:b1:75:f9:0b:a2:3b:4e:ad:
         78:33:cc:96:15:49:e0:c1:89:13:6c:29:98:1b:da:0b:08:10:
         2c:7b:f2:f7:53:ea:97:69:41:8f:3b:1f:16:56:3f:16:df:63:
         43:78:dd:10:dc:93:b0:2d:bc:f7:8e:d7:d2:80:29:15:8c:0e:
         ed:a2:8b:51:0b:28:63:2c:54:da:b5:68:b7:b8:3a:cb:74:cd:
         71:83:94:a2:15:16:2b:26:f6:95:95:48:29:09:1a:df:5c:de:
         1e:43:47:d8:9c:38:52:1d:21:bf:c0:30:53:20:31:36:23:4c:
         24:59:5e:8f:7d:01:8f:1a:be:d7:c8:d5:a6:60:65:e8:52:f1:
         65:74:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org