Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/044f871ce4468303115b8c3faed7b6ceadb2ccde.roa
File:                     044f871ce4468303115b8c3faed7b6ceadb2ccde.roa (raw, json)
Hash identifier:          SnJUNOEs0jyObHcg1FOV2Cqyiih2zj4dYhYvddKKMxc=
Subject key identifier:   B8:95:F8:68:C5:E9:D2:4D:D8:E8:B3:8C:C2:01:BE:30:0B:66:EE:4C
Certificate issuer:       /CN=aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb
Certificate serial:       0329
Authority key identifier: C8:AA:E9:59:79:A7:28:3E:E0:6D:96:FC:87:B6:54:5D:9C:B6:BC:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/044f871ce4468303115b8c3faed7b6ceadb2ccde.roa
Signing time:             Thu 05 May 2022 22:05:46 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Sun 05 May 2024 03:00:00 +0000
asID:                     262589
IP address blocks:        170.238.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2024 GMT
        Subject: CN=044f871ce4468303115b8c3faed7b6ceadb2ccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:48:fb:24:d9:05:85:43:85:bc:e5:31:de:
                    bb:0b:ab:2b:0e:40:94:5c:84:d9:ed:3d:cf:86:6f:
                    59:2b:13:a1:a6:46:c0:d1:ac:e1:1b:65:3a:31:e3:
                    92:8d:3f:77:44:44:e8:a5:52:21:e8:a2:82:8e:bd:
                    dc:e8:b8:c8:0a:97:2e:71:e3:a2:80:57:ed:3c:da:
                    17:1f:b7:0a:b3:e8:e4:a2:5e:01:78:49:8a:85:98:
                    28:ef:69:43:9a:6e:26:c5:fa:c7:b2:c4:28:c8:9b:
                    72:1a:21:fb:f4:20:cc:83:4c:79:ef:5b:be:6a:bf:
                    77:ab:a8:b4:37:0d:96:c5:03:21:43:11:a0:c2:31:
                    29:24:1e:08:96:1b:1b:07:fa:d8:03:75:ad:db:ef:
                    ea:07:4e:9f:f5:3a:23:b7:09:96:73:91:08:55:72:
                    69:1e:55:97:08:45:71:75:de:0d:95:7c:be:3c:14:
                    4e:16:25:d6:07:4c:d6:2a:7f:e9:e8:e2:bd:2f:70:
                    6b:e4:cc:04:f1:39:73:39:37:99:6d:7f:09:af:2e:
                    80:34:c7:78:cb:1a:9a:56:6d:d0:6c:0e:59:19:ac:
                    6c:0f:ff:d5:51:09:15:1f:c2:24:71:a7:82:22:cf:
                    21:10:00:af:eb:d9:a1:ef:57:82:4f:57:54:6f:46:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:95:F8:68:C5:E9:D2:4D:D8:E8:B3:8C:C2:01:BE:30:0B:66:EE:4C
            X509v3 Authority Key Identifier:
                keyid:C8:AA:E9:59:79:A7:28:3E:E0:6D:96:FC:87:B6:54:5D:9C:B6:BC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/044f871ce4468303115b8c3faed7b6ceadb2ccde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:27:5e:60:42:9c:10:a5:b4:c1:d3:da:0d:c6:87:a7:75:
         e6:b7:a8:24:90:0f:98:af:64:43:5d:7c:f7:ed:51:63:08:dd:
         15:b2:a5:e6:1f:e8:13:d3:14:3c:2c:aa:05:bf:0c:68:2e:95:
         ff:3b:95:e3:e4:9d:d4:c4:74:f1:22:6d:94:b5:43:a8:1d:ec:
         ad:f1:97:de:60:71:e5:fc:c0:57:1d:32:a8:a2:f9:d0:c2:a8:
         2f:f0:de:55:3b:cf:ab:cd:92:16:74:53:4d:00:aa:a6:23:58:
         86:f6:e5:4a:00:e0:18:10:72:ce:f2:07:df:8d:9b:46:88:04:
         48:fb:1f:63:40:90:f2:76:54:2a:cd:8f:4f:fe:2e:1d:08:eb:
         11:ed:07:34:d0:c9:70:1f:89:0f:be:9b:a1:2f:b0:2b:e6:14:
         28:a7:d2:a6:97:46:df:4d:b4:05:de:36:61:3b:0d:16:a7:40:
         42:fb:e4:81:99:7c:00:1c:60:22:02:30:fc:09:df:cd:3d:bc:
         c9:d4:6d:b4:db:3c:3a:73:d3:ec:2a:b1:99:91:7f:de:c6:6a:
         50:b0:f2:27:43:0e:e8:05:66:1a:71:d5:bc:b7:bb:4e:4a:06:
         3a:d0:f0:0c:ed:e5:a1:17:c9:87:1e:2e:0d:3c:24:fe:df:a9:
         f4:1f:a0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org