Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/0a14808cb07d570bea40fc672b071349ee8abf28.roa
File:                     0a14808cb07d570bea40fc672b071349ee8abf28.roa (raw, json)
Hash identifier:          y5lNOiuVFOt+C3LtueXV5bRyTiN4DOiPw3gpgc+0PlE=
Subject key identifier:   C6:F1:2F:C7:5D:D8:E2:DE:C5:3B:B7:46:C8:E6:A2:84:51:80:CC:12
Certificate issuer:       /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial:       0D76D3
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/0a14808cb07d570bea40fc672b071349ee8abf28.roa
Signing time:             Wed 24 Mar 2021 14:39:59 +0000
ROA not before:           Wed 24 Mar 2021 14:39:56 +0000
ROA not after:            Tue 24 Mar 2026 14:39:56 +0000
asID:                     264851
IP address blocks:        170.83.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882387 (0xd76d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
        Validity
            Not Before: Mar 24 14:39:56 2021 GMT
            Not After : Mar 24 14:39:56 2026 GMT
        Subject: CN=0a14808cb07d570bea40fc672b071349ee8abf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:38:64:08:8b:ae:39:a7:f6:35:25:a9:3a:
                    b2:47:4c:14:d3:d2:fd:17:0b:e0:cd:f1:8b:9d:8a:
                    4d:17:23:73:cc:98:47:49:17:98:a7:9f:70:44:2e:
                    0a:98:84:a0:1f:16:af:0c:5a:63:60:06:57:52:60:
                    a6:81:1f:36:59:71:96:c3:36:32:f8:56:73:5e:72:
                    ea:76:f6:58:29:43:e0:4f:4a:61:59:ed:e9:a3:e8:
                    e9:ad:a8:06:a3:38:d4:d2:90:31:0a:44:83:e5:09:
                    0b:41:4d:88:33:8f:04:56:d4:07:f9:b7:88:5e:8b:
                    8d:c4:f4:f9:d5:11:d8:91:58:58:79:34:2d:5a:c5:
                    37:8f:36:37:53:e5:a8:67:dd:1d:9d:a0:b4:b5:b8:
                    d6:e6:2f:8d:90:8f:4f:7e:ad:6d:8f:c4:b0:22:dc:
                    45:4c:52:5f:27:ba:ee:5f:66:ea:d8:56:6e:f7:57:
                    03:67:db:26:44:d2:56:81:e5:82:e4:24:df:9e:f8:
                    65:e2:e7:76:64:a3:3d:10:77:95:4a:2b:9e:03:9b:
                    1e:85:bd:d0:b2:d2:12:55:b6:13:59:72:7f:23:a8:
                    77:20:8f:54:ab:39:ce:2c:ed:ec:10:dc:06:67:ec:
                    ed:02:e7:3b:3c:f7:48:ab:8e:64:ee:fe:8c:1f:96:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:2F:C7:5D:D8:E2:DE:C5:3B:B7:46:C8:E6:A2:84:51:80:CC:12
            X509v3 Authority Key Identifier:
                keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/0a14808cb07d570bea40fc672b071349ee8abf28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:7e:f5:a1:f7:f8:e2:bf:38:05:e6:1c:86:ed:24:bd:b2:
         aa:d8:ca:a9:95:db:43:8b:e6:15:9c:22:1e:64:7c:f9:c3:ae:
         9a:60:72:78:d2:91:3d:b8:1c:89:b4:08:d1:fb:9d:d1:71:32:
         31:f6:00:e1:88:b4:32:b2:4a:a2:a7:38:82:11:d0:4c:8d:7f:
         96:84:a3:a1:7c:6b:cb:dc:46:36:a8:1a:80:f5:0d:6e:93:6c:
         b3:c6:f8:ac:ac:c8:bc:8d:09:df:e0:36:07:ad:3c:f9:59:c5:
         ac:06:05:8a:44:a1:68:af:27:71:72:5c:48:a0:90:2e:cd:2d:
         58:af:bf:9f:56:72:37:ba:3f:21:6d:a4:0a:28:ea:4d:d4:c6:
         1f:99:bb:a7:62:f7:d1:69:90:a5:fb:7c:2b:9e:04:1a:7c:f5:
         fc:43:61:7a:f8:5d:32:16:3f:57:28:2b:57:3e:db:11:a3:00:
         f4:3f:88:32:b3:4f:8f:bf:ec:d7:68:ca:e1:04:d7:8b:99:b2:
         ea:d8:24:bd:35:72:90:e3:99:74:96:e8:79:68:9a:bb:6d:94:
         bd:64:9c:71:7e:1c:84:9a:b1:42:a2:57:9c:b8:c8:64:f7:f0:
         b8:a5:a7:ed:5a:94:3e:f2:59:0f:21:57:ea:7a:b9:ae:5b:7b:
         2f:af:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org