Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/d81fce10984b439acad6e762efe8e68b51a0765c.roa
File:                     d81fce10984b439acad6e762efe8e68b51a0765c.roa (raw, json)
Hash identifier:          UTXhQ78LujfDbuLauvuhVocgSmg44uSdsVIHqSIbisA=
Subject key identifier:   02:44:7C:02:7C:8E:91:14:E2:11:ED:70:8C:B7:71:EB:E2:4D:C7:C9
Certificate issuer:       /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial:       125D91
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/d81fce10984b439acad6e762efe8e68b51a0765c.roa
Signing time:             Tue 28 Sep 2021 18:33:26 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     264740
IP address blocks:        170.239.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203601 (0x125d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=d81fce10984b439acad6e762efe8e68b51a0765c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:1e:72:d9:95:ba:db:c9:b2:51:a6:77:54:
                    08:c0:89:f1:ba:9e:2b:3b:95:d3:8c:7e:e0:d1:00:
                    08:57:81:de:74:03:fe:2a:98:0f:b9:77:fc:d2:6a:
                    eb:dc:43:b1:4c:dd:ac:38:97:62:25:4a:bd:5b:a3:
                    e6:2b:a7:ec:70:86:51:34:56:45:0a:a2:a2:02:16:
                    6e:c0:28:e4:ad:4c:2d:cc:64:38:a5:e6:3a:14:29:
                    a3:fe:b2:70:9e:96:23:01:e2:15:1b:d2:ec:9e:d9:
                    db:58:f8:d9:2c:bb:b8:78:91:4b:f7:79:2e:bb:0b:
                    f1:39:31:c2:bc:c5:9d:f4:69:11:0d:0d:46:69:57:
                    10:22:81:fc:3a:71:30:43:74:74:be:d9:f1:ed:2b:
                    a3:7e:4d:41:4b:4e:d2:12:b8:ec:52:05:c3:c9:50:
                    1e:2b:d1:c0:94:6f:1b:24:f1:96:90:18:04:18:8d:
                    77:87:33:12:5f:0b:90:ff:5b:ba:d5:df:03:52:d7:
                    f9:40:b6:19:cb:bd:d5:21:4b:ea:1f:2a:a5:ed:92:
                    61:13:98:db:30:f7:74:4b:47:31:77:91:be:dc:5e:
                    3c:a8:bf:40:fc:24:21:e8:b1:fd:4d:04:12:4e:7f:
                    64:3a:4b:18:34:ea:73:4d:33:2f:52:94:4c:88:18:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:7C:02:7C:8E:91:14:E2:11:ED:70:8C:B7:71:EB:E2:4D:C7:C9
            X509v3 Authority Key Identifier:
                keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/d81fce10984b439acad6e762efe8e68b51a0765c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:68:5c:92:5f:1b:ce:23:4b:f5:9c:9e:9e:bf:66:76:2c:c6:
         25:b0:6f:66:f1:43:bf:99:7d:c9:84:65:5c:f8:e8:65:06:af:
         d4:42:61:4a:62:60:7d:c7:19:92:42:03:7f:52:7b:63:39:da:
         23:1b:9b:47:7f:b3:4a:8e:70:5e:40:65:9f:8e:9a:5d:76:af:
         38:61:6e:b6:e3:d5:01:f5:bc:91:9d:37:91:ba:0e:4e:5c:9a:
         f5:ee:20:0d:6d:33:52:ce:c5:ff:99:fa:cb:30:83:82:d1:3a:
         3e:ec:e8:32:bb:2b:99:e3:2b:8f:c6:06:1c:63:ce:ac:98:16:
         18:d6:b1:bb:1b:91:0c:bc:ba:ae:70:b1:4f:4b:d0:51:01:6a:
         94:ae:73:15:c4:41:1c:c4:26:db:19:3a:8a:38:26:ce:ca:f0:
         3a:e6:9b:3b:bb:ad:6b:1a:b0:90:91:b3:54:0c:b4:18:54:01:
         99:3e:8a:62:fb:ab:fc:6e:de:73:e0:c6:85:56:9c:40:df:4c:
         a8:a6:44:d9:d4:a7:ed:32:f6:2a:86:31:db:4c:ea:20:e2:45:
         00:57:90:63:f9:5e:f5:36:0f:a9:57:ac:1c:ac:8a:4e:5a:e8:
         21:41:c5:58:d6:9a:91:37:33:93:ac:df:27:36:a6:54:73:26:
         d2:3a:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org