Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/421cf151eb57876d5be15145a8cb3c85db6035c8.roa
File:                     421cf151eb57876d5be15145a8cb3c85db6035c8.roa (raw, json)
Hash identifier:          TxPjsgvQnN4bBqQUzPRz9NkJ3BUpkVtNMPNV7ljmQAM=
Subject key identifier:   C9:B1:E8:46:34:3D:AF:BC:3D:C9:F0:E3:18:CD:18:91:91:9B:2C:AD
Certificate issuer:       /CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed
Certificate serial:       0DBDA5
Authority key identifier: 3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/421cf151eb57876d5be15145a8cb3c85db6035c8.roa
Signing time:             Wed 24 Mar 2021 14:32:02 +0000
ROA not before:           Wed 24 Mar 2021 14:32:02 +0000
ROA not after:            Tue 24 Mar 2026 14:32:02 +0000
asID:                     265646
IP address blocks:        170.247.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900517 (0xdbda5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed
        Validity
            Not Before: Mar 24 14:32:02 2021 GMT
            Not After : Mar 24 14:32:02 2026 GMT
        Subject: CN=421cf151eb57876d5be15145a8cb3c85db6035c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:e8:b2:5a:5f:12:0d:93:40:9e:f7:e4:9e:
                    02:98:38:fb:4e:61:0e:72:98:c7:4c:ce:fc:f2:2a:
                    ca:d0:6a:55:ef:0e:5b:d1:4c:25:c0:f8:21:87:73:
                    54:16:b7:f1:ed:e6:3d:d1:2c:03:9f:fd:e7:05:78:
                    70:45:7f:f2:dc:ec:60:8e:ad:bb:ec:ca:c6:98:c8:
                    0a:03:cd:ba:78:ff:c9:21:bc:9d:f7:bd:22:ca:2a:
                    2d:d9:2d:7f:08:51:37:92:0d:24:6d:72:b7:64:fb:
                    33:fd:75:65:66:0f:bc:b1:2f:9c:b8:8d:63:4d:0d:
                    58:88:1f:a7:a8:f9:ac:84:e2:fc:63:76:6d:67:80:
                    21:3d:4b:41:6e:88:31:d2:eb:ea:ea:02:5f:30:74:
                    9d:6c:91:8c:f7:4b:42:7a:fa:69:6c:29:cf:9d:23:
                    66:6b:75:ef:ea:ff:8d:4b:70:89:2d:95:bf:c5:21:
                    83:01:0c:87:00:ab:df:da:6c:51:76:44:c1:86:25:
                    27:a1:03:ee:9c:01:08:67:e5:ef:21:49:df:b5:c2:
                    ab:06:cd:17:41:c5:a0:de:b7:c6:94:ab:53:38:81:
                    9f:67:7d:76:36:45:00:ba:b7:4c:9a:28:d0:6b:e8:
                    01:4c:81:76:a4:7f:06:99:86:7a:ff:ce:2b:57:09:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:E8:46:34:3D:AF:BC:3D:C9:F0:E3:18:CD:18:91:91:9B:2C:AD
            X509v3 Authority Key Identifier:
                keyid:3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/421cf151eb57876d5be15145a8cb3c85db6035c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:84:07:d3:2c:6b:d1:7d:d9:fa:76:63:04:32:80:3a:1c:
         36:d7:4d:8d:84:5a:e1:39:51:65:1b:d6:66:18:b3:6f:31:d5:
         3a:b2:d9:7b:a1:dd:17:4e:57:41:2b:fa:a0:f7:2a:8c:b5:30:
         97:1e:8a:d8:cf:77:e5:dd:17:9f:92:ee:80:97:88:a2:5f:1c:
         a2:69:2c:dd:7b:c8:ee:02:81:b8:28:33:be:37:19:8f:c9:ea:
         e8:a1:6d:bf:d3:f4:05:aa:a9:3f:ad:29:83:5a:c4:2a:24:87:
         45:fd:55:35:b7:e9:cf:e0:60:be:9a:81:42:ab:c8:e7:00:ac:
         05:3b:39:4c:ac:58:82:c8:ad:f2:0e:2a:10:a8:6c:4e:68:29:
         8b:e3:d5:37:67:04:9c:c8:70:aa:db:e6:e7:55:75:ea:9f:12:
         1f:d4:11:2a:e6:d5:e0:cc:40:bd:3b:94:26:9f:55:b9:6d:e6:
         7a:fd:9c:d8:a7:92:3d:cf:89:72:14:a8:e8:2c:4b:12:05:b7:
         18:27:46:82:77:2d:ab:dc:bd:29:0a:ee:13:dc:62:a6:7c:88:
         62:1e:2c:67:c5:0d:27:38:d8:9a:9e:e4:ea:25:e1:b7:e5:83:
         ed:71:f1:53:2a:1e:b4:c9:73:ca:cb:87:5f:cd:d3:44:fd:cd:
         fa:13:20:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org