Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/d8c4b22102ffeed7f8f6bcc579c5355691af7d31.roa
File:                     d8c4b22102ffeed7f8f6bcc579c5355691af7d31.roa (raw, json)
Hash identifier:          5SoaBgAdUj7CsTxySjqDEzWkwEJk+1byOB7+0eKvUR4=
Subject key identifier:   05:50:A4:27:E1:FD:C5:34:5D:E5:51:47:62:7B:66:5E:52:95:C4:CA
Certificate issuer:       /CN=e934f8b9376c3ced6bba33fde47f9cfccf71bcba
Certificate serial:       2047A1
Authority key identifier: 89:1C:E7:82:B9:19:54:D0:79:49:36:89:F9:3F:D4:98:0D:9D:E7:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e934f8b9376c3ced6bba33fde47f9cfccf71bcba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/d8c4b22102ffeed7f8f6bcc579c5355691af7d31.roa
Signing time:             Fri 14 Jul 2023 11:10:30 +0000
ROA not before:           Thu 13 Jul 2023 11:10:30 +0000
ROA not after:            Mon 14 Jul 2025 11:10:30 +0000
asID:                     269803
IP address blocks:        170.81.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115489 (0x2047a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e934f8b9376c3ced6bba33fde47f9cfccf71bcba
        Validity
            Not Before: Jul 13 11:10:30 2023 GMT
            Not After : Jul 14 11:10:30 2025 GMT
        Subject: CN=d8c4b22102ffeed7f8f6bcc579c5355691af7d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:b6:b5:7b:36:ea:e6:94:f7:c7:df:5d:f2:
                    00:a0:b3:8a:57:db:81:0f:bd:2a:7a:dc:02:fd:2f:
                    38:a5:63:71:38:14:fc:39:ca:ab:02:36:23:8f:e5:
                    ac:85:37:ae:1d:aa:5f:1f:bf:e7:76:ea:26:5d:d4:
                    93:11:db:16:89:98:e1:8f:e9:ad:6f:f4:02:3f:cf:
                    9f:53:f3:96:62:80:fe:1c:8f:12:88:69:21:48:da:
                    6b:84:c8:be:80:67:79:63:c6:21:e1:14:f4:a6:8b:
                    0c:fe:77:a1:e2:3a:d6:06:ed:85:78:1d:a9:b7:fa:
                    ee:fb:37:8d:74:4b:37:2c:6b:09:56:1d:af:ec:a5:
                    6e:34:0d:a5:5e:fd:b5:6e:23:bd:41:8b:c7:cf:92:
                    28:d9:26:53:81:cd:cb:cf:61:64:2b:cc:10:f4:b4:
                    e5:4c:30:91:05:aa:6f:60:98:a1:78:7e:38:26:7d:
                    c2:36:74:fd:39:38:4c:49:33:c5:a5:aa:62:71:63:
                    ea:2a:ad:a8:c8:5f:61:0d:8e:4b:a3:8b:20:a3:5e:
                    16:18:9c:9f:9a:b3:b1:ed:0e:bb:cd:b7:12:02:8f:
                    a8:87:a2:9e:be:44:f8:a7:ec:a8:11:aa:26:23:f6:
                    be:25:5b:5e:01:38:42:09:ff:47:4d:a3:f1:b9:b9:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:A4:27:E1:FD:C5:34:5D:E5:51:47:62:7B:66:5E:52:95:C4:CA
            X509v3 Authority Key Identifier:
                keyid:89:1C:E7:82:B9:19:54:D0:79:49:36:89:F9:3F:D4:98:0D:9D:E7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e934f8b9376c3ced6bba33fde47f9cfccf71bcba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/d8c4b22102ffeed7f8f6bcc579c5355691af7d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97c852b5-2afc-4aa0-9a99-e57f4de6e522/e934f8b9376c3ced6bba33fde47f9cfccf71bcba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:99:97:60:f1:2c:a4:68:af:0d:84:5b:69:d5:ee:42:45:
         63:e4:a7:90:44:04:a0:70:e9:00:9f:5e:39:73:dd:ad:d8:4a:
         81:83:92:df:fd:6d:ec:d8:ee:25:f0:7a:6b:b7:d7:bc:dd:92:
         2d:12:a3:1c:eb:05:88:0c:93:67:62:cf:0f:d3:b9:bf:71:a2:
         fb:7f:cc:09:e2:56:24:b5:48:6e:13:fa:16:32:aa:8b:6e:66:
         fa:ea:44:4d:03:67:1a:45:05:a0:c5:52:5e:e7:fb:04:a8:24:
         fe:43:dd:86:d5:c6:c1:6d:40:b1:15:52:d2:bc:62:09:e3:ef:
         a2:2c:2d:f5:1b:f5:cd:28:79:11:05:c3:b5:38:29:59:e7:5a:
         5f:a7:ff:d8:1d:e1:c6:1c:41:00:bc:b0:6f:82:ad:ae:8f:f7:
         16:cc:c3:81:bb:6b:df:01:80:89:89:14:79:b0:3a:ae:ea:b4:
         4e:09:4b:2f:ec:33:78:1b:4d:a7:88:e5:0c:ec:e6:65:f7:09:
         20:6c:36:48:e3:79:70:ab:7a:a9:3a:1f:5b:f2:6f:f0:4d:9a:
         8e:e2:55:e9:87:99:a0:b7:1a:63:89:c1:a2:20:cc:6c:f5:7f:
         99:73:30:4c:f4:db:37:58:c9:3c:d0:e3:24:a7:42:47:2b:92:
         e2:00:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org