Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/0172810468e544e6ab2720000bbaead520a1c86f.roa
File:                     0172810468e544e6ab2720000bbaead520a1c86f.roa (raw, json)
Hash identifier:          LYaN2WBn15UpqFVW6Eourq2lMES6hJFcfINmj3d20fw=
Subject key identifier:   E2:EE:09:FE:F5:7E:D4:C3:2F:D6:C5:43:A8:AC:81:BD:8C:3A:2D:D8
Certificate issuer:       /CN=b15724311c8f57527a6b499ef55d7b227a6142c3
Certificate serial:       25BA87
Authority key identifier: 99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/0172810468e544e6ab2720000bbaead520a1c86f.roa
Signing time:             Tue 28 Nov 2023 07:30:00 +0000
ROA not before:           Tue 28 Nov 2023 07:30:00 +0000
ROA not after:            Thu 27 Nov 2025 07:30:00 +0000
asID:                     264827
IP address blocks:        170.247.204.0/23 maxlen: 23
                          170.247.204.0/24 maxlen: 24
                          170.247.205.0/24 maxlen: 24
                          170.247.206.0/24 maxlen: 24
                          170.247.206.0/23 maxlen: 23
                          170.247.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472583 (0x25ba87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15724311c8f57527a6b499ef55d7b227a6142c3
        Validity
            Not Before: Nov 28 07:30:00 2023 GMT
            Not After : Nov 27 07:30:00 2025 GMT
        Subject: CN=0172810468e544e6ab2720000bbaead520a1c86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:c1:5c:d6:77:95:f7:f7:40:50:fa:5a:aa:
                    05:8c:ae:69:72:2c:6f:1a:9a:19:0e:f3:21:2c:3f:
                    4e:84:19:2c:84:37:ae:fa:13:56:03:2d:e6:0f:c4:
                    ce:2b:eb:cd:b0:bc:64:97:3c:10:a5:3e:5a:ec:14:
                    6a:36:6e:4e:83:c7:1f:57:1f:5e:e6:64:5e:27:40:
                    9a:5f:9d:41:cb:87:26:40:52:84:24:5c:54:a3:88:
                    af:4b:44:ae:a8:24:98:f9:10:6f:d5:3e:8f:04:3d:
                    6a:fa:47:68:ab:19:3d:be:24:46:63:80:19:a2:85:
                    8f:39:64:54:68:47:e4:19:36:23:6c:9f:01:7a:51:
                    b4:94:3a:c3:53:2c:8b:42:5b:a5:b8:9d:7c:7b:38:
                    9c:ed:74:e7:d2:55:55:47:5c:e2:27:69:dc:69:60:
                    63:73:b6:b4:ba:12:80:8e:92:73:7e:a1:15:5d:82:
                    fe:79:a8:06:b3:dc:80:0e:ec:a2:b3:d3:92:19:14:
                    3c:29:5d:a9:99:8c:50:4f:b0:d6:1d:da:32:86:b2:
                    d1:9d:32:7d:3b:f5:c0:39:05:70:c8:4e:c5:3d:34:
                    0a:46:60:1a:23:66:20:8a:8d:d0:d1:b7:0e:ae:17:
                    84:66:5a:99:ca:76:5b:13:d0:13:4a:52:8c:9b:1b:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:09:FE:F5:7E:D4:C3:2F:D6:C5:43:A8:AC:81:BD:8C:3A:2D:D8
            X509v3 Authority Key Identifier:
                keyid:99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/0172810468e544e6ab2720000bbaead520a1c86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:56:df:ae:7b:79:da:ef:d8:ee:38:bb:c2:a7:42:87:91:e7:
         63:80:9d:a6:99:74:a2:98:ff:ab:cf:a4:2f:c9:2e:a0:a0:15:
         3a:e6:81:46:78:f2:de:56:63:bd:ec:9d:36:d5:e1:98:f7:23:
         dd:d5:3d:24:5b:93:8d:95:ca:da:41:4b:1a:3b:96:a8:39:1e:
         7c:a1:ce:3a:08:06:2d:1a:bf:19:72:35:2f:65:aa:c6:5b:81:
         af:c3:c2:a9:6a:cd:19:9a:4d:87:42:21:33:c9:b4:99:40:78:
         38:c7:e3:77:b7:00:b1:68:c9:28:55:3f:17:98:65:41:00:29:
         73:18:2f:dd:b9:3a:15:44:d5:0f:e3:8f:f1:4f:99:15:0f:2d:
         b5:30:64:b0:87:76:a9:d8:c5:07:d8:61:20:3c:d1:09:ea:b0:
         f1:12:48:70:c9:66:7b:71:6e:36:d0:84:94:51:ca:27:0b:9d:
         08:1b:14:17:2f:64:a9:9b:18:ff:62:c9:29:7a:20:07:57:3d:
         bb:64:83:01:7e:2b:da:da:55:83:d2:e0:82:d7:4a:e2:c4:51:
         df:2c:56:f3:66:7d:64:14:95:fc:eb:17:1a:10:09:6a:92:e7:
         7c:bb:3d:b6:b3:64:9a:0a:37:b4:40:65:f1:dd:9c:ae:b5:f6:
         86:6c:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org