Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/02169f477d17b01d4a8acf0495b4cea953167283.roa
File:                     02169f477d17b01d4a8acf0495b4cea953167283.roa (raw, json)
Hash identifier:          W5JiFq5ulqjdOAFvor+/JTHuKpEN7DSY5NuIVmYPjHo=
Subject key identifier:   60:70:95:0A:4A:84:22:FE:17:68:4F:AC:2B:94:B1:80:E6:DC:3D:8D
Certificate issuer:       /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial:       26A7E7
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/02169f477d17b01d4a8acf0495b4cea953167283.roa
Signing time:             Tue 26 Dec 2023 02:40:49 +0000
ROA not before:           Tue 26 Dec 2023 02:40:48 +0000
ROA not after:            Fri 26 Dec 2025 02:40:48 +0000
asID:                     264740
IP address blocks:        170.239.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533351 (0x26a7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Validity
            Not Before: Dec 26 02:40:48 2023 GMT
            Not After : Dec 26 02:40:48 2025 GMT
        Subject: CN=02169f477d17b01d4a8acf0495b4cea953167283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:24:3e:3b:92:ed:f5:96:28:ba:f2:46:c4:
                    6d:b2:9f:7d:4d:7d:59:20:bb:c0:3c:d3:e1:cc:5d:
                    ea:37:f9:6b:bc:57:f6:6d:f1:86:d8:61:e7:db:0b:
                    45:bc:eb:bf:10:80:3d:22:e6:0b:43:7f:89:7b:11:
                    6b:9d:e9:3c:05:53:e5:5c:1e:cb:59:88:4c:40:dc:
                    7d:6e:20:a7:f2:bc:f8:6c:e4:76:ca:e6:2a:3b:10:
                    4e:65:5d:87:03:b8:45:23:28:ab:0d:01:56:ec:6a:
                    c1:b1:1e:d9:01:17:62:76:3d:91:51:48:a2:d1:12:
                    4e:b4:a3:9b:8a:f5:b4:c9:62:18:2b:44:ec:84:4d:
                    7d:15:6c:22:8b:11:fb:f7:bf:af:61:a0:33:50:ad:
                    6a:c5:61:6b:be:79:ab:ee:03:f2:e8:6b:3a:e4:dd:
                    5e:32:e9:42:d1:56:e7:c7:b3:1f:2e:40:bb:d0:ce:
                    e2:82:af:1a:ea:05:72:01:56:73:51:37:e7:93:81:
                    01:91:99:de:c9:b3:aa:70:46:b8:85:35:18:6e:30:
                    4e:fa:61:f9:62:6c:c0:fd:61:8f:10:dc:56:3d:59:
                    e7:a7:66:17:90:64:4d:e5:47:0f:9f:45:30:02:0e:
                    88:49:5f:12:c1:99:bb:21:cf:4f:f6:55:a3:fa:79:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:95:0A:4A:84:22:FE:17:68:4F:AC:2B:94:B1:80:E6:DC:3D:8D
            X509v3 Authority Key Identifier:
                keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/02169f477d17b01d4a8acf0495b4cea953167283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:59:1e:5a:56:66:75:18:62:4d:c2:d8:20:d0:12:06:41:92:
         62:c0:cc:62:7d:9a:f8:64:61:9d:f1:70:b6:17:3f:e5:ab:e6:
         49:15:3a:05:d7:ea:62:26:0d:6c:0d:4f:54:0a:54:2b:0a:45:
         66:48:df:7e:23:34:ca:8f:fa:9a:53:cb:f8:4c:2d:3b:f3:6b:
         8a:5c:5b:43:af:ce:a5:97:1e:bf:78:cb:28:4f:b5:39:12:4f:
         41:43:49:50:a3:46:d2:f3:18:fd:cc:12:46:31:b2:4d:c3:da:
         a6:21:27:ce:a6:e4:ca:87:68:1c:80:02:bf:02:ce:70:18:8f:
         2b:87:0f:33:87:d1:a5:f1:33:da:b0:55:43:b8:3e:4d:20:07:
         fd:85:2e:aa:6a:9d:9b:95:93:5f:32:21:18:3c:ef:af:4b:44:
         c2:45:73:a2:d2:3f:b5:2d:e8:71:f8:09:11:e3:4e:b1:05:45:
         f0:8e:42:ec:e8:86:e0:bb:b8:be:85:5c:62:3f:d2:58:d9:e1:
         fa:00:d0:29:5c:4f:d7:15:e7:db:be:a0:d7:bd:cf:6c:8c:32:
         ad:4b:f7:2f:97:b7:09:f8:0d:19:b9:ae:41:a9:9b:24:91:c0:
         b8:a4:5f:e3:c2:3e:93:0e:44:7b:31:3d:a6:8a:73:42:cf:ba:
         a3:3a:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org