Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131342e302f32342d3234203d3e20323634383336.roa
File:                     3137302e38322e3131342e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          OQ4ZneSSYNbgIi6Hkh+CCeNgYx8B2IA6iekIV0O5RiY=
Subject key identifier:   59:0B:E6:08:1C:CE:BA:D7:10:45:95:FC:DF:55:57:B2:6A:9E:F7:1E
Certificate issuer:       /CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
Certificate serial:       72FAA6688EC864D84D848937E0E38CB76A051C9D
Authority key identifier: ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131342e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:19:31 +0000
ROA not before:           Tue 05 Mar 2024 18:14:31 +0000
ROA not after:            Tue 04 Mar 2025 18:19:31 +0000
asID:                     264836
IP address blocks:        170.82.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fa:a6:68:8e:c8:64:d8:4d:84:89:37:e0:e3:8c:b7:6a:05:1c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
        Validity
            Not Before: Mar  5 18:14:31 2024 GMT
            Not After : Mar  4 18:19:31 2025 GMT
        Subject: CN=590BE6081CCEBAD7104595FCDF5557B26A9EF71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:0b:43:b0:2f:2f:bd:fb:c0:9d:e1:00:9a:
                    14:a5:47:27:3f:66:55:44:24:79:ae:4a:ee:ac:fb:
                    52:17:99:b0:da:f0:cf:65:0d:c7:9f:11:5e:48:3e:
                    55:37:0f:95:f5:0f:8a:16:d7:a0:44:c0:90:f4:de:
                    05:05:78:b8:90:74:65:7e:9e:3c:f4:ca:14:95:26:
                    2e:d8:dc:de:6a:d9:c0:3b:5f:ce:0f:6e:c4:86:d3:
                    9b:4e:27:12:0a:12:83:1c:d8:02:55:e7:9e:49:d4:
                    d0:41:e5:34:0a:3c:12:5b:59:6d:f1:79:17:7b:77:
                    32:dc:e4:c9:f6:12:f9:35:28:87:f0:55:ff:2f:c8:
                    64:4b:f1:c0:7c:ef:51:23:10:2a:d0:7e:89:13:76:
                    16:93:b3:da:27:64:36:13:1f:cb:ac:d5:c0:93:ca:
                    c5:78:cf:a3:96:5f:23:de:09:4f:04:fe:bd:4d:23:
                    d2:21:3c:92:90:96:22:76:de:ee:f2:aa:af:17:e8:
                    ec:14:16:42:c3:a5:4a:23:1c:f6:d6:5e:5c:9a:ba:
                    95:8e:cd:71:8a:d0:81:71:b2:18:66:ef:56:82:4e:
                    bb:bc:0f:76:54:b0:55:b8:81:a7:cb:76:2f:89:8b:
                    d8:e2:4c:ea:d9:9a:eb:45:d8:0c:c4:d6:cf:cd:ea:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:E6:08:1C:CE:BA:D7:10:45:95:FC:DF:55:57:B2:6A:9E:F7:1E
            X509v3 Authority Key Identifier:
                keyid:ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/3137302e38322e3131342e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:9d:f0:c7:38:d9:39:0e:e8:01:d2:47:e8:1f:ae:95:a4:
         01:48:34:2c:6c:d5:51:c8:80:ba:77:cf:a5:63:77:99:7f:06:
         ac:52:27:ee:62:7d:32:85:76:e4:92:ab:1e:9d:80:ac:50:94:
         0f:86:73:ed:f7:8a:e9:18:55:f0:fb:4e:04:1a:7a:fe:9e:dc:
         3d:0a:c2:2c:53:3e:de:f5:f8:fb:3c:f8:62:69:e6:cc:30:d2:
         ed:ad:ae:4e:20:10:06:22:c1:d8:28:83:27:99:8a:5d:5b:d7:
         29:07:a9:9b:8a:3f:ff:1e:13:4c:b2:6e:10:b0:01:0c:f3:29:
         09:c4:d4:73:86:c6:b9:94:b1:34:09:ec:1c:c2:9d:0c:8a:98:
         4a:98:a0:d7:53:3b:83:cf:14:21:6c:9b:bb:a2:8c:eb:9e:a4:
         68:88:9d:5d:67:53:9e:a8:e2:a0:6a:b2:d4:f2:bf:d3:07:a8:
         3b:83:fd:33:24:98:06:9a:b0:20:3d:54:34:74:19:6e:ac:bd:
         5a:a3:0a:ea:f6:15:f2:ec:59:5f:e7:57:68:da:d5:8e:e8:c7:
         9d:45:3e:6e:21:f4:17:3d:a0:e1:fa:f6:56:48:fa:6c:73:38:
         a2:71:c9:c6:65:d2:c8:70:f9:fb:b4:5f:0e:07:ab:cc:4e:cc:
         62:a6:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:55 2024 by rpki-client on console-fra.rpki-client.org