Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131322e302f32342d3234203d3e20323634383336.roa
File:                     3137302e38322e3131322e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          zDTVXcBWFtbLSp/pMQIVN/X9mZVjr8C04N2FgJGgbOo=
Subject key identifier:   A4:46:52:9D:60:20:AF:DA:41:42:22:31:45:B7:EF:8C:A1:DF:09:DE
Certificate issuer:       /CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
Certificate serial:       513A6B73C3DA9983A9942E2F6CF44023EC4C093F
Authority key identifier: ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131322e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:19:30 +0000
ROA not before:           Tue 05 Mar 2024 18:14:30 +0000
ROA not after:            Tue 04 Mar 2025 18:19:30 +0000
asID:                     264836
IP address blocks:        170.82.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3a:6b:73:c3:da:99:83:a9:94:2e:2f:6c:f4:40:23:ec:4c:09:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
        Validity
            Not Before: Mar  5 18:14:30 2024 GMT
            Not After : Mar  4 18:19:30 2025 GMT
        Subject: CN=A446529D6020AFDA4142223145B7EF8CA1DF09DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:60:cc:4d:fb:d8:1f:d6:38:e7:01:3a:4f:
                    a3:5e:a3:b5:ec:a8:53:b7:d0:74:33:65:13:b9:38:
                    6c:9d:07:e0:c2:2f:0e:ec:22:56:6c:a5:2a:02:92:
                    85:08:0c:61:d6:6b:d6:e4:c5:c1:28:dc:17:f3:cf:
                    af:19:33:18:eb:5f:cd:c5:f6:ba:d7:f7:21:4e:4f:
                    74:56:d0:99:9c:3e:e6:e9:41:4d:61:e6:a7:a3:d0:
                    70:1f:22:d9:ce:a2:6f:d5:2b:9c:75:da:39:0a:74:
                    d9:14:3d:1c:f2:3d:8b:93:6d:1a:23:7a:9c:50:a1:
                    25:93:10:09:f6:0c:8a:39:a8:a1:7b:27:44:cd:75:
                    58:25:5f:f6:71:39:33:d0:04:ff:71:2a:f2:32:b4:
                    66:ec:39:1b:05:3e:27:8f:c7:f0:5e:de:0a:28:47:
                    e4:00:38:9c:fa:3f:9f:fe:b2:13:10:da:3d:e1:6f:
                    13:ca:13:ef:be:52:2d:4a:b4:58:bd:f5:db:bd:f9:
                    88:e0:cf:0c:8b:65:65:20:49:2c:1b:8a:0e:d4:0b:
                    2f:d7:1d:72:d4:60:de:31:e0:72:dd:e6:61:b6:76:
                    e5:86:52:31:c2:23:42:94:0d:fa:25:f0:5c:cc:f3:
                    e0:b9:b0:07:dc:13:d3:82:e4:5b:ec:91:37:44:34:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:52:9D:60:20:AF:DA:41:42:22:31:45:B7:EF:8C:A1:DF:09:DE
            X509v3 Authority Key Identifier:
                keyid:ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131322e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:17:b7:60:70:4b:5e:48:77:83:7a:93:4c:68:00:c2:d8:
         d8:3e:3d:79:b9:a3:8b:b0:db:c3:97:71:c3:f4:b7:74:3f:4e:
         c9:bb:c5:87:43:39:af:71:07:2a:e8:c4:86:ec:47:98:c8:42:
         ef:32:49:6c:3c:86:22:6c:25:3e:92:af:a4:78:0e:73:1a:a4:
         ab:f1:bf:b7:07:5f:de:ca:a3:4e:1f:c0:6d:05:a2:33:8e:48:
         09:5c:5b:a8:74:88:0a:7c:03:0d:e8:83:ff:d8:d3:99:14:f7:
         46:46:ae:ec:ef:ab:97:43:f3:4a:5d:5c:7e:54:85:a5:e2:01:
         14:a2:39:c4:e0:3d:b9:c7:a7:e1:47:36:d1:b7:f9:38:a5:64:
         c2:f7:eb:33:2f:d4:e6:02:e4:80:7e:86:62:82:d6:bc:d8:5b:
         87:2d:56:49:17:90:c4:63:5d:8d:fc:c9:4b:c0:b9:4f:64:51:
         ba:e3:dd:14:69:bd:f3:a7:e6:12:df:9f:c3:bd:8e:1f:e6:a9:
         80:2b:92:a2:e8:1b:59:c1:3c:c2:3f:36:e3:68:d8:56:a5:ed:
         9f:75:12:68:d1:5b:08:2b:7f:8c:5b:4a:f9:71:e1:08:1e:e4:
         d1:8a:0d:f3:48:93:ee:61:aa:eb:3c:c4:17:2e:c0:9d:d8:dd:
         11:9b:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:55 2024 by rpki-client on console-fra.rpki-client.org