Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/7e6ed64a3d40eca2faf47148a6e07f03a83c4244.roa
File:                     7e6ed64a3d40eca2faf47148a6e07f03a83c4244.roa (raw, json)
Hash identifier:          zevJugorPjUB+9O8qk9SsTIU/dytKy8wwihWGnjnuc0=
Subject key identifier:   F0:5B:27:3A:C2:0C:E6:69:75:76:97:3A:59:E7:5D:8A:D9:5B:3F:12
Certificate issuer:       /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial:       26BE45
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/7e6ed64a3d40eca2faf47148a6e07f03a83c4244.roa
Signing time:             Wed 27 Dec 2023 16:37:49 +0000
ROA not before:           Wed 27 Dec 2023 16:37:49 +0000
ROA not after:            Sat 27 Dec 2025 16:37:49 +0000
asID:                     264740
IP address blocks:        170.239.180.0/22 maxlen: 22
                          170.239.180.0/24 maxlen: 24
                          170.239.181.0/24 maxlen: 24
                          170.239.182.0/24 maxlen: 24
                          170.239.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539077 (0x26be45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Validity
            Not Before: Dec 27 16:37:49 2023 GMT
            Not After : Dec 27 16:37:49 2025 GMT
        Subject: CN=7e6ed64a3d40eca2faf47148a6e07f03a83c4244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:3f:af:0c:aa:0b:55:14:d9:d0:ea:de:3a:
                    76:f1:e1:6d:1c:5e:06:b4:de:b8:2b:fc:7d:13:71:
                    f6:a6:55:54:39:2b:19:80:9d:00:f0:0e:e4:56:8c:
                    51:36:41:c8:b2:a8:f1:b9:1e:f7:1c:7c:f0:d2:1d:
                    f3:c7:62:d4:92:b3:1e:55:fd:86:54:c4:da:75:7a:
                    c8:70:39:05:74:d9:1f:52:55:97:b3:0e:4a:1c:a2:
                    41:2e:11:3d:70:40:23:41:86:3a:01:4a:6f:24:6a:
                    23:ee:0d:77:8b:82:f0:b0:61:ab:56:99:30:40:ab:
                    fe:f2:ce:01:8e:f6:cd:dc:cf:0d:b0:f1:56:96:27:
                    67:a7:10:b4:ed:9f:a7:a1:6d:8c:3a:49:28:e4:75:
                    a4:22:8f:d4:20:ef:23:be:3e:c0:db:80:40:68:72:
                    a0:1b:64:d9:aa:94:39:f8:fe:87:31:f0:7c:81:f9:
                    41:72:3f:c4:50:2d:5b:23:fe:10:8d:da:8d:c1:34:
                    17:b2:3d:a3:54:7d:e2:42:4b:7a:55:33:91:1e:48:
                    9d:7d:e2:8e:ba:70:26:19:b9:25:ae:4a:b6:6e:36:
                    fb:c7:49:ca:52:71:d9:46:7e:e3:a6:72:9c:57:08:
                    dd:c5:0c:95:bc:46:50:d1:b3:6c:08:9c:a5:1b:f1:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:27:3A:C2:0C:E6:69:75:76:97:3A:59:E7:5D:8A:D9:5B:3F:12
            X509v3 Authority Key Identifier:
                keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/7e6ed64a3d40eca2faf47148a6e07f03a83c4244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:2f:96:93:43:8e:be:6f:41:de:fe:f7:4f:e7:62:30:4f:
         58:c3:06:35:27:14:5d:0b:d3:a6:99:5d:b3:36:af:1f:77:58:
         a5:41:04:49:22:ae:02:02:a1:d4:1a:c7:0c:9c:75:79:0c:5f:
         aa:e6:2f:a7:09:1f:75:64:c4:1c:8b:38:24:1c:04:c3:15:5b:
         27:f3:2b:04:c1:57:b4:5b:dc:41:39:b9:8b:2e:40:1f:96:67:
         83:52:0e:9a:6a:ba:5f:95:b4:9a:19:91:b5:a6:d3:0c:36:04:
         9b:a2:46:4d:e0:81:70:4b:29:75:1d:3b:e3:b7:87:ed:9c:61:
         9b:91:4a:a1:9a:e6:fd:e0:10:80:2e:6c:22:ff:e3:ca:cd:81:
         12:f2:7d:e3:b7:8b:3e:a3:02:6c:c5:d2:23:24:d7:2b:98:14:
         d0:94:88:7e:01:af:1f:ec:44:d6:ee:fb:9c:d2:45:ed:5d:56:
         b4:25:9d:bb:95:66:33:aa:f4:d1:87:96:cd:67:c6:02:26:10:
         5b:4f:7a:09:5c:5a:f3:7d:6d:91:43:c8:09:8d:e9:91:e2:7b:
         ee:2e:4b:7d:76:ba:8e:7d:a5:b5:12:66:21:8e:b6:14:60:af:
         91:74:43:59:fa:ca:78:1e:3c:48:8f:a0:e2:88:c1:ea:40:0a:
         b4:86:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org