Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa
File:                     d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa (raw, json)
Hash identifier:          5kEKWaYXl6OLKE6SvlhpZXk5HrRuvaLiAAyvi3NrgOc=
Subject key identifier:   56:12:4F:28:57:2E:94:C4:1D:9F:1C:46:42:4F:FB:95:82:AD:06:08
Certificate issuer:       /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial:       1276A9
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa
Signing time:             Thu 23 Dec 2021 14:14:11 +0000
ROA not before:           Thu 23 Dec 2021 03:00:00 +0000
ROA not after:            Sat 23 Dec 2023 03:00:00 +0000
asID:                     263684
IP address blocks:        170.244.56.0/22 maxlen: 24
                          200.115.25.0/24 maxlen: 24
                          200.115.26.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210025 (0x1276a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
        Validity
            Not Before: Dec 23 03:00:00 2021 GMT
            Not After : Dec 23 03:00:00 2023 GMT
        Subject: CN=d18c7f173368e4cb3ae392f83580bf3bf92abc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:b1:52:c6:99:d9:1f:f6:dd:56:8c:61:ea:
                    7e:6c:10:f1:11:63:6e:a3:62:4e:fd:38:7e:64:03:
                    63:73:69:7e:a3:b2:c5:95:dd:71:59:0c:e3:a9:1b:
                    05:67:19:c2:6f:b3:a8:60:ef:5c:2a:41:46:16:3f:
                    db:93:7c:7b:93:95:ed:e0:d9:13:86:3b:92:06:d0:
                    da:a2:c8:25:06:bd:46:ba:7e:6f:f4:32:aa:af:68:
                    df:b8:5a:b5:a7:32:8a:7e:81:3f:41:62:42:11:3c:
                    7d:4a:08:2e:85:a2:cb:e6:69:bd:98:83:ac:0c:cb:
                    a7:a2:63:7d:41:a1:38:56:e7:3f:70:8a:a3:c0:7a:
                    66:d9:3f:d3:45:18:49:20:e1:a7:8d:4a:0d:6a:83:
                    66:f2:cd:27:d4:0a:41:23:3a:87:d6:3b:78:6b:65:
                    5e:66:7b:54:14:d5:40:8e:f8:06:45:13:bb:3f:f4:
                    fa:e8:02:db:e5:ce:1a:85:9a:38:50:d4:91:35:9e:
                    d1:c1:ac:a8:5a:d3:b3:60:35:36:8c:f1:80:5a:9a:
                    c0:d4:c1:96:19:d4:1a:5d:70:bb:4c:57:76:fe:13:
                    79:16:04:e6:b4:85:6f:ee:e8:b9:37:ed:b4:a4:dd:
                    b5:75:16:e9:f6:ae:39:3f:d6:85:d0:8d:a8:74:c5:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:12:4F:28:57:2E:94:C4:1D:9F:1C:46:42:4F:FB:95:82:AD:06:08
            X509v3 Authority Key Identifier:
                keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.56.0/22
                  200.115.25.0-200.115.27.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:4c:f8:fa:ee:d3:67:7f:e4:86:9b:b2:8f:6d:33:82:5e:
         1d:a0:dd:e7:3d:67:08:55:5a:a3:35:14:45:5e:89:36:55:57:
         0e:9b:9c:0c:e1:6b:3f:bb:21:25:40:25:53:d5:4a:90:34:97:
         63:7c:12:71:91:5a:de:b0:3d:52:68:d3:ce:00:37:80:b0:f5:
         9f:c1:f1:89:1b:9f:5f:ea:3e:12:4b:d8:54:31:8d:7b:10:27:
         43:b5:bd:e0:97:63:27:cd:8c:d8:b4:46:96:0c:50:e1:f8:c2:
         60:49:a6:24:d3:99:b0:79:ca:89:c8:9c:f5:c8:e6:0f:f0:0d:
         a0:56:7e:63:f1:46:97:c6:e8:a5:4c:d0:c8:4e:93:69:b6:d2:
         59:3a:f5:05:cb:e6:ea:92:c5:36:6f:87:c2:31:a4:6e:e6:ee:
         b2:3d:a8:32:58:cd:fc:d3:35:d5:bf:c3:39:6c:2c:6e:dd:a2:
         42:cd:95:e4:88:fc:42:18:5c:e0:97:0a:7a:f1:b1:41:1d:fc:
         0f:1c:59:6a:5f:68:bf:a6:4b:35:f0:83:a4:c1:a0:74:77:8c:
         ad:a1:07:f4:92:7a:43:d8:98:c7:72:7e:62:98:2a:12:c9:56:
         30:e7:72:33:8e:6c:65:c4:10:c3:c1:ff:bd:d7:64:97:e6:ad:
         d0:83:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org