Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/478ae3993cb00c1bbb89fcb03862ffa052c83eb5.roa
File:                     478ae3993cb00c1bbb89fcb03862ffa052c83eb5.roa (raw, json)
Hash identifier:          YvBXi0WQ3/w99+Md+vds11DTox5DQhyrQvUZByacvjw=
Subject key identifier:   A4:49:9D:B6:D3:72:10:EC:CD:98:D5:0C:54:01:D3:6D:3E:F7:FF:C6
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       185BAA
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/478ae3993cb00c1bbb89fcb03862ffa052c83eb5.roa
Signing time:             Wed 15 Jun 2022 19:03:24 +0000
ROA not before:           Wed 15 Jun 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     264819
IP address blocks:        170.80.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596330 (0x185baa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Jun 15 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=478ae3993cb00c1bbb89fcb03862ffa052c83eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:73:9c:11:ac:7f:49:4e:d6:7a:13:b2:33:
                    0e:e2:fa:ef:ed:93:5e:5b:61:ab:44:42:e1:99:a3:
                    78:5b:b6:ba:e0:40:60:99:01:13:29:e8:2d:af:3b:
                    64:6f:35:f0:33:dc:a1:10:fe:42:96:56:d6:f1:69:
                    6d:77:51:ef:df:3f:1a:f9:b4:0a:4b:6f:6d:f0:91:
                    54:7f:5e:6c:6a:dc:32:ac:a7:7e:7c:af:ca:dc:81:
                    2a:47:14:f6:69:fc:51:7e:a1:e8:8f:8a:25:7f:3b:
                    57:81:f7:6d:52:ce:88:f7:fd:61:91:96:da:e0:9d:
                    14:15:20:4f:c9:8b:13:b3:6a:b1:1c:50:fd:97:aa:
                    9b:ce:f5:90:04:c9:f9:a5:2a:0a:e6:a8:4a:b2:89:
                    a9:a5:ea:30:3c:74:c3:8c:6c:e7:03:26:62:11:0f:
                    17:0f:ee:3e:ad:dc:d2:9a:de:62:7a:30:cd:47:ba:
                    c2:37:e2:df:cc:53:9e:56:c5:23:4a:b7:ef:1e:7d:
                    4a:b8:9f:97:c7:de:38:6b:69:b9:fe:66:a8:89:40:
                    b1:5a:a1:5e:9b:5e:be:8b:ae:fe:7c:d3:74:8d:50:
                    8e:09:cc:d2:7a:63:7a:df:80:1e:c9:83:70:99:d5:
                    0b:ec:f7:25:5f:da:06:56:e4:60:5f:dc:71:77:11:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:9D:B6:D3:72:10:EC:CD:98:D5:0C:54:01:D3:6D:3E:F7:FF:C6
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/478ae3993cb00c1bbb89fcb03862ffa052c83eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:09:4f:95:cd:69:bf:48:2f:9c:4f:8f:46:05:2d:d8:b5:10:
         23:06:7c:9c:82:a7:22:8f:3d:49:1b:f5:67:fd:44:98:c2:c3:
         2e:21:51:35:6e:49:bb:d0:94:15:da:ba:66:ab:fe:00:0e:1a:
         87:ac:2c:62:ce:17:74:b7:9d:8e:a3:f3:29:31:fe:1e:c9:9c:
         4e:55:3b:f1:9e:1d:35:f7:63:a0:6a:16:0f:b4:8a:5b:83:87:
         e9:1e:87:81:f8:97:9a:e6:fc:8e:db:c1:0a:fa:b0:cb:eb:32:
         ff:47:91:0a:be:bf:20:61:8f:99:47:e9:a3:ee:b4:4c:8e:ad:
         a3:d1:53:09:59:0a:6b:32:9f:9b:ea:1a:a8:54:f2:a7:67:73:
         87:44:1a:ab:e2:75:91:99:67:90:77:53:da:3d:a5:e1:38:da:
         5a:cd:aa:25:33:c8:c3:2a:ba:96:de:82:e1:d0:e7:be:77:18:
         09:f2:3b:64:4e:60:4f:e0:d1:22:3a:ad:0a:90:32:97:8c:2e:
         d9:62:75:50:6d:19:4a:6a:f9:ec:92:e0:30:6e:5c:64:5d:00:
         c6:14:05:4a:37:9a:43:b6:ab:b7:7b:7d:9d:00:7d:9f:ca:65:
         f2:6a:41:ee:73:5e:67:ec:5b:37:da:45:c6:af:36:bc:62:7f:
         b1:aa:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org