Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/170a9f37a8d9245954bbfd71b231e04809871fb8.roa
File:                     170a9f37a8d9245954bbfd71b231e04809871fb8.roa (raw, json)
Hash identifier:          CgNOljrs2J7Cz752L8ninGzOzXG1XUhDX1DkiP8i0Mg=
Subject key identifier:   22:7B:1D:ED:13:B6:89:6F:49:5D:81:85:3C:76:14:32:EC:6D:45:B4
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1B135F
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/170a9f37a8d9245954bbfd71b231e04809871fb8.roa
Signing time:             Fri 16 Sep 2022 15:06:03 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        168.228.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774431 (0x1b135f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=170a9f37a8d9245954bbfd71b231e04809871fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:08:c3:f5:79:0e:6c:ab:ca:e6:e8:58:a6:
                    c7:43:e1:f8:b4:0e:e5:03:67:09:55:89:51:b8:8e:
                    20:f5:90:7d:6f:1c:77:93:3c:6c:5c:74:5d:06:bd:
                    f4:b3:10:72:1b:86:bc:e9:a9:3a:ce:80:ab:cf:38:
                    a7:b3:0e:19:c8:f5:21:b1:cd:ba:c9:91:8d:e8:2d:
                    a4:69:51:00:0e:90:f3:b1:49:f7:93:5f:6f:4d:b8:
                    76:e8:2f:a5:d9:2a:fb:86:be:4a:8b:45:66:91:0d:
                    58:92:cb:2e:92:67:6d:5e:8f:56:d3:ae:02:de:89:
                    f0:6c:b7:6b:63:29:64:d3:2f:74:d5:7d:13:4b:4c:
                    b8:e4:aa:19:0d:d1:ab:a0:df:95:47:c0:34:72:4f:
                    bb:fb:9e:1c:82:e2:c0:db:45:b0:0e:9e:f8:c7:c1:
                    f7:f4:8d:50:f9:7b:e8:a6:88:34:55:67:46:c9:59:
                    f0:11:d4:0f:be:18:7d:c9:1c:33:e7:1b:c5:7e:17:
                    99:da:2f:76:18:02:1b:c1:26:e7:94:d8:35:b2:38:
                    d5:a7:fd:3c:60:1b:2b:b8:ea:70:d7:98:67:b5:ea:
                    d8:08:bc:8a:92:48:18:89:ba:22:a1:e9:d0:23:69:
                    74:18:c3:9b:7d:6d:21:c1:fc:5b:ea:36:4b:97:ec:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:1D:ED:13:B6:89:6F:49:5D:81:85:3C:76:14:32:EC:6D:45:B4
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/170a9f37a8d9245954bbfd71b231e04809871fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:06:c7:10:23:01:98:67:34:66:1a:5a:f9:18:95:aa:b8:dd:
         42:0c:9b:6a:18:6a:e4:59:68:c7:af:3d:87:b2:f4:1c:aa:2a:
         e4:80:c6:f6:a5:1b:e1:86:dc:72:8d:24:6d:45:68:01:9d:83:
         1b:db:5c:29:f6:9d:1f:45:2e:7c:e8:d5:14:96:99:56:e7:a5:
         7e:f0:10:f7:eb:6c:b0:c7:2b:34:ef:cf:bf:6b:c1:c2:f5:85:
         cf:80:fe:c5:d4:dc:f9:7d:4f:14:21:ba:3a:54:52:c7:b3:7f:
         7b:c5:da:f5:b0:09:4c:f2:78:6c:66:97:b0:d3:2d:c7:8b:5f:
         1a:42:1f:0a:ac:41:56:d5:7c:ec:1e:76:d8:bd:b4:78:07:58:
         c2:11:59:db:1a:24:ed:b8:47:28:a8:d7:bd:54:aa:82:19:5d:
         56:1a:d9:cd:35:be:2f:17:bc:cd:7b:04:c0:40:45:48:5e:f1:
         38:4f:78:e1:80:6f:39:6a:ec:d7:f1:6b:b9:a4:bc:26:e7:1e:
         68:8c:7a:d5:d9:ca:9d:99:04:57:4a:fa:79:9d:af:6f:f6:c5:
         81:be:57:20:f2:2e:7f:d6:31:f2:03:0b:10:77:e0:f9:57:f4:
         ce:bd:bc:04:bc:93:e2:8a:14:ed:a5:56:2c:2c:3b:4e:00:90:
         cd:06:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org