Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/3137302e38342e3230382e302f32322d3234203d3e2037303034.roa
File:                     3137302e38342e3230382e302f32322d3234203d3e2037303034.roa (raw, json)
Hash identifier:          TYEVvHDaCx8SGXnzXM4V8bQuQLuRm15VIwanLIo9AYQ=
Subject key identifier:   A6:44:B9:BD:F5:0E:9E:3C:88:FA:F9:F0:0A:1D:4E:A0:F5:AA:3F:5B
Certificate issuer:       /CN=C85208E92C6DEC6EEB00944C4AB78F0624FA32E4
Certificate serial:       3EE905BA1CC3D8FDF2FEF3675F51939D1C0CA75D
Authority key identifier: C8:52:08:E9:2C:6D:EC:6E:EB:00:94:4C:4A:B7:8F:06:24:FA:32:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C85208E92C6DEC6EEB00944C4AB78F0624FA32E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/3137302e38342e3230382e302f32322d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:43:27 +0000
ROA not before:           Tue 05 Mar 2024 17:38:27 +0000
ROA not after:            Tue 04 Mar 2025 17:43:27 +0000
asID:                     7004
IP address blocks:        170.84.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e9:05:ba:1c:c3:d8:fd:f2:fe:f3:67:5f:51:93:9d:1c:0c:a7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C85208E92C6DEC6EEB00944C4AB78F0624FA32E4
        Validity
            Not Before: Mar  5 17:38:27 2024 GMT
            Not After : Mar  4 17:43:27 2025 GMT
        Subject: CN=A644B9BDF50E9E3C88FAF9F00A1D4EA0F5AA3F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:2e:ff:c4:a3:76:85:46:a9:b5:f5:cc:c4:
                    96:4b:7f:3f:19:d4:d1:1e:19:ce:af:c9:eb:b9:c9:
                    c1:11:ee:f5:19:f1:cb:a0:df:9c:dc:e9:7f:f0:21:
                    c8:07:79:c1:90:f7:55:b7:2a:1d:12:ad:64:57:58:
                    52:05:92:34:61:68:0f:fb:e8:6f:55:19:6c:41:6c:
                    3d:b6:e2:9d:08:ff:ea:5b:c2:a0:f3:a2:e7:99:6e:
                    9d:42:f2:0c:3a:56:57:de:69:bb:50:bb:20:09:02:
                    7d:b0:c7:42:39:0e:fd:08:9c:74:e1:14:26:d0:0c:
                    60:1b:b7:eb:65:f0:68:c9:35:20:63:5c:c0:3b:d4:
                    2a:29:9d:dc:f6:d1:d0:67:6f:f8:12:69:73:68:b3:
                    ad:ae:ca:a8:e4:0b:88:1b:d8:6c:ad:13:f0:f2:00:
                    69:cc:10:e4:d7:64:83:10:2b:88:c4:11:22:70:1d:
                    f1:ec:7b:5a:29:c5:a1:c1:ec:f7:3e:70:ad:43:c0:
                    0f:e4:c1:67:85:b9:ce:de:5e:33:6f:03:1b:77:33:
                    c8:53:69:59:04:ef:83:5b:22:99:6d:e3:b2:c2:0d:
                    90:3e:53:08:10:a8:78:91:c7:5d:25:67:c0:1d:f3:
                    20:88:36:3a:69:c0:13:ea:f7:ca:20:76:ff:f1:d5:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:44:B9:BD:F5:0E:9E:3C:88:FA:F9:F0:0A:1D:4E:A0:F5:AA:3F:5B
            X509v3 Authority Key Identifier:
                keyid:C8:52:08:E9:2C:6D:EC:6E:EB:00:94:4C:4A:B7:8F:06:24:FA:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/C85208E92C6DEC6EEB00944C4AB78F0624FA32E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C85208E92C6DEC6EEB00944C4AB78F0624FA32E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/3137302e38342e3230382e302f32322d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:08:06:19:34:4b:07:2b:92:92:e1:0f:24:8a:91:9c:b0:
         62:c2:68:7d:fc:f4:80:ac:66:28:42:fc:ea:93:58:bc:fc:42:
         85:3f:22:fa:a0:44:b5:58:d2:88:1c:f5:6c:db:b6:e0:da:3b:
         af:2a:c5:ec:69:9a:58:a2:c1:05:9d:ac:a0:eb:14:0a:16:4d:
         a2:44:b4:d3:56:63:b9:96:12:1e:12:1a:cc:07:ad:3a:7b:7a:
         a4:98:38:7e:08:f7:28:a6:76:b3:f2:fe:ad:7a:3d:8a:33:8f:
         0c:06:58:45:27:77:fc:26:c3:48:2f:9e:34:c8:5e:bb:18:b2:
         6c:4b:e5:ba:e8:2e:ad:32:69:25:c8:8d:de:c9:a3:7d:aa:6d:
         b4:d3:1d:6e:a4:ff:fc:90:50:0e:38:1b:38:42:97:73:da:6c:
         71:8f:93:3c:62:60:ee:6e:46:71:cf:0f:62:c1:5c:11:dc:06:
         11:3b:69:08:ca:ef:fc:37:d2:3e:1f:9e:6a:ee:2b:98:6a:6c:
         5b:e2:cb:3f:13:08:16:02:99:94:0d:8d:73:82:1b:fb:c2:d8:
         eb:f7:be:c9:22:17:51:21:ee:da:9f:ad:a2:07:15:c7:1a:09:
         4c:53:e2:30:ae:4d:29:f6:da:12:73:87:38:9f:7b:22:11:6f:
         fb:43:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org