Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa
File:                     f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa (raw, json)
Hash identifier:          wQ/1XN1WD+PtyI9JjWMJBhgQYAT6CyLI45+e5YCKUXk=
Subject key identifier:   6F:A4:4F:04:7C:7A:16:FA:CB:5E:88:D6:91:4E:3C:C4:74:E0:A2:B6
Certificate issuer:       /CN=b15724311c8f57527a6b499ef55d7b227a6142c3
Certificate serial:       136B39
Authority key identifier: 99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa
Signing time:             Tue 30 Nov 2021 02:08:07 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     264827
IP address blocks:        170.247.204.0/23 maxlen: 23
                          170.247.204.0/24 maxlen: 24
                          170.247.205.0/24 maxlen: 24
                          170.247.206.0/24 maxlen: 24
                          170.247.206.0/23 maxlen: 23
                          170.247.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272633 (0x136b39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15724311c8f57527a6b499ef55d7b227a6142c3
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:2c:f4:d1:1c:d8:18:7d:d8:6f:96:06:b1:
                    54:9d:2b:13:a9:0b:c5:11:e8:23:c3:18:62:13:1c:
                    97:c7:a9:fc:75:ad:68:27:70:72:af:b7:bb:ae:ca:
                    32:71:2e:7b:cc:c9:a7:43:b7:f5:8b:07:44:9d:c0:
                    eb:96:31:59:54:7a:e3:2a:6e:45:43:3a:f1:6e:d0:
                    33:48:98:cd:3d:5c:4b:f7:e2:14:90:bd:06:01:ec:
                    44:01:96:16:fa:1c:01:0d:ff:b8:6a:30:0d:ea:4d:
                    e2:eb:2c:f7:ca:50:4b:63:df:fa:98:ae:0d:fc:6c:
                    b5:c9:b0:ee:f1:5f:b5:c8:93:e0:27:db:d8:0f:f7:
                    29:53:8e:6a:6d:ed:fb:d5:c5:48:e5:00:7f:6b:f4:
                    ee:a3:eb:c5:18:7d:62:37:d1:5a:c7:32:60:1a:f8:
                    83:75:b4:a8:38:a1:68:2c:12:af:86:80:83:6c:70:
                    84:43:85:c4:de:b3:c3:81:f3:6e:28:81:0b:ba:00:
                    28:ec:54:2b:2c:28:5d:36:e6:79:be:3e:f6:44:97:
                    02:cc:66:87:74:0d:af:fc:69:83:e5:9e:d2:df:49:
                    2b:fd:19:7b:07:08:0f:a4:9f:9f:ae:8a:ba:76:a8:
                    b5:32:f4:e0:db:05:2a:2f:95:24:8f:c5:cb:89:ac:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:4F:04:7C:7A:16:FA:CB:5E:88:D6:91:4E:3C:C4:74:E0:A2:B6
            X509v3 Authority Key Identifier:
                keyid:99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/f2b3a0b8c9b4fc36f07cf4d8086c8728647e9339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:91:12:6f:72:41:b8:c0:ad:62:b5:b4:c4:c2:6c:87:ed:
         ea:8d:d5:49:08:b4:36:5a:17:fb:44:f6:77:4e:d5:72:6f:1d:
         ea:0f:7c:46:4f:c2:93:0e:5b:7e:db:96:cb:37:24:13:53:ec:
         b3:7c:58:ee:48:64:18:7c:cd:68:35:7e:da:94:46:81:7a:fb:
         21:22:1c:37:5b:09:76:4f:93:29:e0:57:e0:e6:71:0e:6f:fc:
         a7:a2:58:af:fe:0a:96:56:2b:87:ef:c8:fc:64:cd:38:25:f7:
         a2:89:03:2e:86:7a:94:c2:86:0d:79:ad:ae:11:77:8d:2f:37:
         de:c2:09:42:b1:22:c2:6e:4f:6f:ca:00:5b:0b:76:51:98:20:
         e2:db:a5:ef:95:1e:42:0f:0b:39:73:a0:d4:dd:ee:29:c7:8a:
         f9:51:cc:6c:e7:1a:a6:87:be:25:79:a7:4e:2d:d9:55:0f:36:
         7e:81:49:60:64:84:d0:d5:9b:de:eb:f4:9a:5b:47:a5:3c:a7:
         fa:68:fe:52:9e:33:be:7e:16:00:88:0f:39:5e:61:80:63:5b:
         60:f6:97:48:ad:c6:2f:81:a6:fd:50:f8:49:2f:47:66:23:02:
         c4:be:ee:87:fe:7b:28:90:da:09:79:40:6f:f7:36:c7:d7:7a:
         9a:e3:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org