Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/2f2b277d84032f53958a07710ede48c0d42ff86d.roa
File:                     2f2b277d84032f53958a07710ede48c0d42ff86d.roa (raw, json)
Hash identifier:          KP56i3Zz5WmraS5NRPijM4xXNgdxbdT8OWAyYdA37XM=
Subject key identifier:   E7:70:BC:6D:EF:E0:A5:CE:78:F1:9D:AA:D7:B4:7A:27:0D:44:82:32
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       0DB66E
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/2f2b277d84032f53958a07710ede48c0d42ff86d.roa
Signing time:             Wed 24 Mar 2021 22:51:34 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264660
IP address blocks:        170.247.212.0/23 maxlen: 23
                          170.247.212.0/24 maxlen: 24
                          170.247.213.0/24 maxlen: 24
                          170.247.214.0/23 maxlen: 23
                          170.247.214.0/24 maxlen: 24
                          170.247.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898670 (0xdb66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=2f2b277d84032f53958a07710ede48c0d42ff86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:4d:ea:62:74:d0:ad:59:a1:87:a5:93:fe:
                    23:26:39:b0:2e:e3:10:f7:c7:6f:2d:75:be:e5:26:
                    3e:a0:e4:6a:c5:97:28:5f:50:2b:93:6b:90:ed:61:
                    40:8a:2f:87:af:50:a6:9f:99:66:6a:88:62:8c:3c:
                    60:1c:9d:16:5d:d1:28:cf:d5:08:6d:ad:48:7b:68:
                    04:a3:a8:5c:a0:90:0a:ef:e7:a8:26:64:ba:e1:29:
                    a0:02:fa:31:c2:1f:da:b5:ff:f5:4a:ea:b0:e8:8c:
                    d8:28:61:84:ad:aa:69:58:a9:47:dc:41:97:dc:3b:
                    e0:c1:a5:4a:a7:72:76:b8:93:ca:d3:1d:2a:a2:d0:
                    a0:a3:10:d1:14:63:db:a5:c7:1b:7b:c4:07:c2:41:
                    c8:95:e3:b0:55:d6:f5:9c:5d:ba:bc:f2:67:ba:60:
                    45:fe:74:ba:b5:ad:e8:9f:5f:07:88:18:d0:b4:09:
                    8c:a4:35:90:8d:3a:cd:92:e5:e5:68:2b:3a:32:07:
                    c2:6b:2e:b1:99:4c:f6:8e:4b:ea:59:6e:1b:45:4c:
                    31:cc:d3:d4:5a:4b:c7:d6:9b:7b:be:bf:63:cf:4a:
                    9f:39:54:64:af:a6:82:0e:b4:e9:24:48:c5:e0:54:
                    56:10:7b:8b:6b:28:0b:42:e8:3c:22:6a:8f:22:e3:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:70:BC:6D:EF:E0:A5:CE:78:F1:9D:AA:D7:B4:7A:27:0D:44:82:32
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/2f2b277d84032f53958a07710ede48c0d42ff86d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:45:f5:7d:ae:7d:c6:24:93:77:af:ee:09:52:08:a2:b5:65:
         76:22:73:4a:b2:4d:df:c5:4a:d4:c0:1d:44:0e:08:90:87:07:
         02:1c:40:ce:de:dc:77:d3:12:06:ae:a6:5f:87:6d:0b:e4:fa:
         23:9e:da:29:21:3d:cb:4c:7b:b5:eb:0a:e3:04:dc:0a:79:27:
         02:b8:56:9d:8a:f8:a5:42:ab:4b:fa:90:bc:47:39:06:71:b7:
         ae:bc:0b:5a:06:4b:a9:df:80:58:9a:8b:05:80:8c:f6:f3:5b:
         b0:9a:0c:d5:16:bb:b3:16:93:2d:fe:9a:a1:22:ae:7a:12:48:
         d1:28:ab:c2:6c:ce:8a:68:b7:fd:0f:14:c6:23:d1:1b:54:47:
         1e:84:30:3d:c4:93:b3:3c:8d:c2:e0:cb:7d:a1:28:15:c1:34:
         8a:85:7c:ad:04:89:20:21:86:36:c0:da:56:f6:03:e9:4d:65:
         45:d4:9e:86:04:27:e3:56:8e:3d:b8:5b:2a:83:f2:1e:45:86:
         56:3f:67:f3:e2:e2:4f:2e:6a:d2:83:ce:1b:ce:84:a9:31:40:
         53:49:e6:7c:53:5c:0e:17:f0:02:7a:2b:64:b1:2a:1a:38:a5:
         9c:a4:f4:eb:13:ba:13:9e:d2:39:dd:d1:b4:ab:bb:25:a7:fc:
         a5:58:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org