Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131332e302f32342d3234203d3e20323634383336.roa
File:                     3137302e38322e3131332e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          OuFrSqDHm7nS02LVQXjtpCHrGBqSJtCI0tnn0FEBpOg=
Subject key identifier:   15:5B:DF:44:05:F8:EC:C3:B4:CF:25:2D:C2:5F:22:98:D0:E3:90:A3
Certificate issuer:       /CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
Certificate serial:       2E92BABD0092DF36E6C35D21D96B51DA71747BF0
Authority key identifier: ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131332e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:19:31 +0000
ROA not before:           Tue 05 Mar 2024 18:14:31 +0000
ROA not after:            Tue 04 Mar 2025 18:19:31 +0000
asID:                     264836
IP address blocks:        170.82.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:92:ba:bd:00:92:df:36:e6:c3:5d:21:d9:6b:51:da:71:74:7b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
        Validity
            Not Before: Mar  5 18:14:31 2024 GMT
            Not After : Mar  4 18:19:31 2025 GMT
        Subject: CN=155BDF4405F8ECC3B4CF252DC25F2298D0E390A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:8c:ab:15:4d:14:21:52:56:86:1e:a0:85:
                    71:0c:9d:41:64:22:dc:68:1e:11:63:6c:ac:81:a8:
                    34:53:af:44:47:4f:6d:9b:89:4f:d8:7f:b7:53:67:
                    c5:70:76:6b:80:ab:1a:ee:3d:32:e1:bc:a2:27:50:
                    8f:ff:2d:4b:32:c0:5d:bd:6d:21:db:83:df:67:1f:
                    a9:c3:3d:c6:4f:48:c9:bc:98:86:2a:7f:b9:b3:fd:
                    72:15:5c:dc:d0:b0:01:17:dc:c1:1a:70:11:ef:54:
                    f0:01:11:10:9e:e1:24:e5:cf:12:28:6f:8c:83:08:
                    15:e2:bc:40:34:aa:01:44:8b:11:f2:31:89:b3:04:
                    13:95:17:72:af:98:5d:68:c3:da:c5:15:58:34:05:
                    44:b4:0d:3e:2d:51:d2:f9:87:7f:af:ee:fd:d4:ec:
                    07:dc:b2:ce:e0:fc:a0:bc:35:da:2c:64:dd:bb:94:
                    2b:c6:0a:0d:72:9e:cc:2a:94:3d:98:89:00:44:57:
                    0a:db:43:ea:0e:b1:1e:95:3b:e6:51:0c:6d:f0:c4:
                    33:1b:30:a7:0b:05:0a:1d:73:0e:82:6a:d2:8c:a3:
                    a4:66:83:93:14:a2:ea:45:83:1d:46:b1:cb:5d:9b:
                    fc:5b:44:e5:31:59:cc:5c:0e:c7:f5:db:46:1d:da:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:DF:44:05:F8:EC:C3:B4:CF:25:2D:C2:5F:22:98:D0:E3:90:A3
            X509v3 Authority Key Identifier:
                keyid:ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131332e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:77:5a:63:76:71:c7:17:ca:c0:fb:d2:73:2c:d5:d4:f6:c4:
         80:5d:e7:20:33:f9:ef:9d:0e:52:ae:16:e3:a2:1a:91:93:e1:
         b0:cd:00:cb:83:1b:1f:fd:34:b1:73:7d:54:3e:97:86:01:06:
         d6:d9:5e:3d:d4:47:29:dd:cf:4b:d5:8f:02:00:f0:f8:c0:a8:
         ef:e4:aa:7d:e5:7c:e3:6a:ee:3d:3e:f8:aa:2d:87:1a:2c:e8:
         3c:48:e1:69:10:ab:fa:3b:0a:db:3e:64:f2:8b:cd:b2:d0:b6:
         a6:fc:19:cf:02:b3:4f:70:6c:51:8e:42:0d:1d:e0:69:1e:80:
         b8:f8:18:d2:b6:fc:c6:e7:42:26:0c:e2:ce:7d:d6:bf:a4:a1:
         e9:a9:d7:dc:3d:d9:3e:9d:e5:ca:41:ad:6d:8c:ba:8c:74:40:
         3d:54:e3:e7:8b:b4:d9:6b:ea:9b:68:29:ee:90:8e:fb:4d:4c:
         a6:1b:2c:4f:21:16:ea:ca:cf:e6:85:b5:61:e7:c4:b1:35:06:
         fd:85:df:71:6e:a6:29:1b:11:80:39:4a:b0:8f:68:36:29:f5:
         df:1c:e3:ba:19:c1:90:51:bf:c3:1a:ff:1f:a4:8f:eb:87:61:
         05:26:6c:18:9a:02:12:07:ff:87:17:54:c2:5f:5c:85:37:af:
         72:85:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 06:12:37 2024 by rpki-client on console-ams.rpki-client.org