Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/d2d750ea8f9f840ad672f82e6c52dcd1899518a7.roa
File:                     d2d750ea8f9f840ad672f82e6c52dcd1899518a7.roa (raw, json)
Hash identifier:          JNYkkJwnkNmcCio4519WqsnG4l3L/7AIXh5nc6X7Kb0=
Subject key identifier:   2A:04:46:29:FA:96:F9:F0:32:40:D1:63:B0:58:26:5C:0D:DE:A0:B7
Certificate issuer:       /CN=76545a659787ef675b6f53cc99f874699199cb6d
Certificate serial:       74DA
Authority key identifier: 39:C6:74:D7:F6:77:47:97:EF:A5:24:A5:CD:13:EA:0B:0E:9C:19:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76545a659787ef675b6f53cc99f874699199cb6d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/d2d750ea8f9f840ad672f82e6c52dcd1899518a7.roa
Signing time:             Fri 28 Apr 2023 16:31:13 +0000
ROA not before:           Thu 27 Apr 2023 16:31:13 +0000
ROA not after:            Mon 28 Apr 2025 16:31:13 +0000
asID:                     52372
IP address blocks:        170.254.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29914 (0x74da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76545a659787ef675b6f53cc99f874699199cb6d
        Validity
            Not Before: Apr 27 16:31:13 2023 GMT
            Not After : Apr 28 16:31:13 2025 GMT
        Subject: CN=d2d750ea8f9f840ad672f82e6c52dcd1899518a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:47:02:0e:11:03:e1:74:74:4b:82:55:12:
                    93:bb:58:75:73:f2:47:e0:f5:88:d1:89:ae:53:bb:
                    44:3c:64:fa:5e:fc:3c:c1:c2:fe:74:a4:c8:87:4e:
                    52:a0:7e:52:e5:7f:55:4c:a8:7b:00:c6:2b:18:58:
                    4b:72:0d:a3:82:92:c1:55:a4:4e:8e:7a:dc:f5:5a:
                    64:aa:7f:38:22:59:2d:be:8e:b0:76:8e:38:5b:5e:
                    c3:b9:7b:cd:27:52:b6:86:fd:60:7a:ba:61:07:22:
                    5f:53:5b:03:57:e5:90:c2:2f:ea:1e:bc:b9:c2:83:
                    b2:1a:27:8b:54:12:fb:ae:65:c2:2d:90:3f:7d:16:
                    72:51:0a:d3:f0:f8:44:26:b5:c5:9f:6e:aa:34:bb:
                    85:01:b1:66:9e:a6:ac:98:28:64:7e:ee:86:20:99:
                    b3:70:72:ea:04:5a:9a:ff:d9:8e:6d:4b:f4:ac:fe:
                    1e:77:7c:c9:85:1d:5b:32:a5:61:1c:7a:ee:ce:bb:
                    d2:08:8a:46:0f:d5:1c:a2:7a:31:45:2c:39:15:ff:
                    56:49:d2:3d:e6:61:c9:b6:0c:12:53:18:41:f0:80:
                    f0:39:26:a6:28:38:a3:15:72:bb:77:9b:b2:28:2b:
                    59:79:a8:7a:c5:9e:ee:0f:ca:85:eb:6b:39:f5:46:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:04:46:29:FA:96:F9:F0:32:40:D1:63:B0:58:26:5C:0D:DE:A0:B7
            X509v3 Authority Key Identifier:
                keyid:39:C6:74:D7:F6:77:47:97:EF:A5:24:A5:CD:13:EA:0B:0E:9C:19:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76545a659787ef675b6f53cc99f874699199cb6d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/d2d750ea8f9f840ad672f82e6c52dcd1899518a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e8a9feb-35e3-46dc-89bc-e27abb36c982/76545a659787ef675b6f53cc99f874699199cb6d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:73:58:b5:8b:de:ba:08:83:a7:47:17:f6:5a:da:e0:c6:19:
         ec:51:1b:d7:f5:72:6d:63:fd:1e:d6:23:74:72:cb:6d:f5:d9:
         89:5c:80:0a:6c:fb:fb:9a:95:6c:80:7e:d1:44:fc:03:bb:65:
         fa:f2:4b:6a:28:6f:39:84:94:61:55:e6:75:40:26:00:02:ab:
         4b:31:a6:ef:cc:88:0c:fb:0a:76:59:3c:a9:11:74:6a:62:6c:
         e3:a9:dd:cb:d3:7c:6e:90:37:93:38:50:ec:af:65:d8:e6:fb:
         f6:33:37:c7:ba:46:0d:5d:1d:71:9f:f3:27:48:3e:45:43:64:
         92:ee:ba:81:11:30:b7:46:1b:0f:f3:19:f8:89:43:78:4a:d7:
         db:68:8a:dc:50:87:c0:ec:86:ee:cc:f7:50:8a:a2:e1:63:17:
         31:f9:27:20:56:8d:1d:8b:5e:ab:d9:bc:9a:60:34:96:8e:34:
         1c:2e:46:60:5c:9f:25:06:5d:80:da:29:8f:e7:b1:c2:1e:8d:
         35:d6:43:f1:96:32:f9:4c:a7:43:46:4a:9f:0b:77:fc:46:b1:
         13:30:c7:1d:fe:e0:4f:0c:a8:1c:f5:4e:76:4a:d4:50:5d:f7:
         c6:00:37:96:03:e7:c9:21:88:b5:db:fa:ae:a3:da:e9:3a:81:
         6a:fa:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org