Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/dc8d6928c8b18f7be88cffb2a10d382178a48a66.roa
File:                     dc8d6928c8b18f7be88cffb2a10d382178a48a66.roa (raw, json)
Hash identifier:          mN+Yg0XWuERcjUMOT27ja5oHPKMGLgGL5HJp3iV26Us=
Subject key identifier:   93:D0:6C:82:FE:24:AA:38:8B:8F:51:32:5D:8C:23:94:7F:80:B8:17
Certificate issuer:       /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial:       0DE6DD
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/dc8d6928c8b18f7be88cffb2a10d382178a48a66.roa
Signing time:             Thu 09 Dec 2021 17:57:14 +0000
ROA not before:           Thu 09 Dec 2021 03:00:00 +0000
ROA not after:            Fri 03 Jan 2025 03:00:00 +0000
asID:                     269924
IP address blocks:        207.191.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911069 (0xde6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
        Validity
            Not Before: Dec  9 03:00:00 2021 GMT
            Not After : Jan  3 03:00:00 2025 GMT
        Subject: CN=dc8d6928c8b18f7be88cffb2a10d382178a48a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:89:4a:da:a2:9e:58:e4:d2:7c:33:a4:4e:
                    f6:43:3a:c9:29:59:b5:d0:d3:5f:5a:2c:80:77:fe:
                    44:74:e2:ef:dc:96:8d:d1:98:25:ef:5e:5d:dc:3f:
                    7b:d6:bb:fd:b8:99:28:93:74:d9:28:76:11:33:64:
                    e4:44:4b:07:b4:6b:c2:3c:f5:d8:b8:8f:cd:af:74:
                    2a:03:fa:be:b9:6d:ed:a5:fd:5c:0d:18:9c:31:69:
                    72:61:1e:47:d0:4f:4e:1c:23:d3:d0:58:8f:5b:6f:
                    0e:cd:01:55:c9:2a:7a:56:c2:3f:c5:5d:6e:68:d7:
                    a4:1c:b9:95:f9:b5:03:70:9e:27:be:67:8f:3c:85:
                    f9:47:aa:58:93:e1:16:5a:fa:cc:ce:05:f7:0b:65:
                    8d:c5:28:e5:3c:8c:b4:38:b6:5b:89:ee:fb:8b:1c:
                    4d:bf:47:7f:c5:60:6c:e7:b2:a4:29:ab:80:7f:5e:
                    b5:49:dd:c0:c9:1c:a6:48:31:99:5f:39:45:5d:69:
                    77:18:97:ec:01:28:1c:02:c4:17:cd:26:d4:66:d5:
                    02:b8:b7:8b:46:8e:fa:76:00:0c:54:31:04:48:f1:
                    16:6c:d1:8b:21:cc:e3:2f:a3:cb:dd:fe:70:d2:e3:
                    40:90:df:9c:16:f1:0f:1f:50:73:89:d6:95:2b:a8:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:6C:82:FE:24:AA:38:8B:8F:51:32:5D:8C:23:94:7F:80:B8:17
            X509v3 Authority Key Identifier:
                keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/dc8d6928c8b18f7be88cffb2a10d382178a48a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:28:08:6a:15:41:3c:e7:02:94:d8:51:f4:de:36:e6:07:
         eb:26:e5:b9:57:84:61:38:22:1b:d6:9a:39:1d:a5:34:0c:eb:
         1b:55:77:24:b5:5d:84:bf:75:08:5e:49:da:74:e1:5d:75:8a:
         08:da:e3:f2:4d:04:92:63:7f:15:5c:24:59:2b:83:52:34:f7:
         47:bd:54:a7:53:0b:54:70:31:03:2d:59:44:88:0b:f0:5a:0c:
         6f:7f:2c:6a:e2:20:aa:e7:65:35:9f:2f:ab:0b:bb:28:d5:d8:
         be:b5:d9:04:8d:87:96:5a:1c:68:f7:27:b6:39:5f:63:f6:c5:
         37:f7:94:5b:f9:b4:d7:c3:9b:40:fb:b0:4f:5b:4d:2f:35:9e:
         7c:ee:49:10:39:34:45:7b:04:6f:2d:37:ab:25:37:8a:68:1f:
         63:5d:42:48:af:0a:a1:d0:fc:c8:80:73:79:9c:b7:68:03:3d:
         30:d4:fb:d2:5a:c3:f7:f0:6b:9a:91:f7:1a:2a:53:6a:df:22:
         62:dd:e2:b4:30:af:d9:3e:cc:08:a7:64:93:f5:3d:9c:e0:bb:
         5c:b2:0f:ca:76:a5:4e:3a:e3:1c:9b:51:ed:ac:c2:6a:2f:5a:
         89:41:da:b0:8b:6a:88:7a:29:5f:7f:07:43:1d:0b:5e:ce:7a:
         c5:40:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:28:23 2023 by rpki-client on console-ams.rpki-client.org