Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/323be80e989d71a1e5bf295f715c6022f221e616.roa
File:                     323be80e989d71a1e5bf295f715c6022f221e616.roa (raw, json)
Hash identifier:          0HREoPnA0lKJO+6jf3XwJYGmLKq016WrFjckJw5OCQk=
Subject key identifier:   82:ED:21:DB:2F:71:5B:92:1F:39:52:48:80:65:2E:37:B4:96:E0:6F
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       1709C4
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/323be80e989d71a1e5bf295f715c6022f221e616.roa
Signing time:             Thu 28 Apr 2022 19:20:53 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Tue 28 Apr 2026 03:00:00 +0000
asID:                     264819
IP address blocks:        170.80.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509828 (0x1709c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2026 GMT
        Subject: CN=323be80e989d71a1e5bf295f715c6022f221e616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:ae:44:81:2f:61:b6:f7:4b:38:af:ce:70:
                    0d:00:39:42:f0:e5:83:fc:7d:a2:de:8a:bd:69:7a:
                    c6:4e:36:c8:09:f6:25:e9:bd:b6:e9:c1:80:96:e1:
                    12:f8:96:5f:b8:0b:ae:86:c1:33:ab:cb:1e:04:f3:
                    3a:ba:a8:71:ea:77:63:fb:c2:92:e8:bd:e4:3a:57:
                    1c:40:62:08:ee:2d:17:df:28:3e:c6:99:a7:b9:56:
                    ec:c3:c7:0d:4c:65:86:f6:3d:c9:41:66:88:b5:33:
                    89:9a:c6:c3:6d:c6:e5:f8:86:0e:f0:26:c2:89:16:
                    50:94:07:94:1d:08:fa:5c:90:d6:79:48:5f:7b:61:
                    34:31:08:e3:df:2d:8e:5d:7a:08:69:e7:3a:db:e9:
                    bb:d6:a1:74:1d:2b:89:e1:44:87:6e:a6:a5:25:0a:
                    4c:db:12:b5:b6:a0:ae:9e:75:28:3f:d8:7f:ba:9c:
                    18:3d:33:f5:cf:ef:f4:69:38:10:0e:dc:3f:02:cd:
                    f7:c0:1b:0f:34:89:0b:6a:e6:72:b0:32:a9:fc:13:
                    77:6d:eb:e1:61:15:1e:e5:11:bc:c2:cd:5a:08:09:
                    84:f8:61:9a:a5:9b:f2:db:ce:c0:51:ed:02:a2:42:
                    d3:a3:80:f8:9c:83:04:b9:f7:33:4a:5f:cb:a1:bb:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:21:DB:2F:71:5B:92:1F:39:52:48:80:65:2E:37:B4:96:E0:6F
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/323be80e989d71a1e5bf295f715c6022f221e616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:7a:ef:f6:4c:57:71:21:e6:57:89:ea:e5:64:38:1f:15:
         8c:a7:2a:6a:3b:5e:82:29:1f:ac:59:73:ad:b4:d3:28:98:cd:
         06:72:2e:e0:9f:54:7b:47:74:32:89:7a:25:5c:b4:52:ae:00:
         ef:e3:59:93:f1:93:ad:e8:b5:08:37:f5:26:dc:9e:33:36:0a:
         20:a6:5c:fc:a1:03:34:0b:39:6c:61:a8:b9:19:dd:99:1e:46:
         fe:1f:78:f7:5e:13:19:b1:97:98:89:2f:47:54:8d:27:17:b7:
         a6:1b:06:4d:1e:6d:02:4c:84:0b:32:a0:05:c3:44:51:a1:0c:
         b0:de:41:60:d0:3f:d4:67:63:cf:41:b9:18:29:5c:5b:59:83:
         f4:80:38:03:62:e0:08:c7:33:31:13:d7:b5:38:be:f9:3e:4a:
         75:48:53:00:85:d2:4a:34:ab:34:d5:7e:6c:0b:64:f1:77:56:
         d1:95:c5:0d:86:77:69:c1:8e:e9:b7:77:03:2f:b4:e4:33:39:
         b4:b8:14:d2:be:d5:25:fb:f0:06:36:41:d2:ba:e5:e2:b0:e1:
         a0:cb:1e:58:7a:65:a0:bd:22:7e:13:d5:c2:e9:8b:4d:d2:74:
         56:b1:08:ae:62:d4:9b:d5:5c:d0:e7:55:0e:de:33:1d:73:5d:
         68:89:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org