Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/99033f58316aeb5eaa8a3bec397ab0791a55ad8e.roa
File:                     99033f58316aeb5eaa8a3bec397ab0791a55ad8e.roa (raw, json)
Hash identifier:          ATrTQFiYOzkkZ15aGsHgAt49Ab7Q0pmnmOXBt1GwK+A=
Subject key identifier:   8B:99:F0:97:0F:96:E4:AD:C5:40:84:BF:46:F3:25:07:1A:04:AD:D9
Certificate issuer:       /CN=80d72f48d6b0182b3a2564057915f41342232c28
Certificate serial:       0DAB73
Authority key identifier: 02:06:C7:58:4B:2F:F2:14:F2:6C:75:8B:93:CA:E7:A2:BC:C6:BB:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80d72f48d6b0182b3a2564057915f41342232c28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/99033f58316aeb5eaa8a3bec397ab0791a55ad8e.roa
Signing time:             Wed 24 Mar 2021 14:29:48 +0000
ROA not before:           Wed 24 Mar 2021 14:29:48 +0000
ROA not after:            Tue 24 Mar 2026 14:29:48 +0000
asID:                     265653
IP address blocks:        170.246.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895859 (0xdab73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d72f48d6b0182b3a2564057915f41342232c28
        Validity
            Not Before: Mar 24 14:29:48 2021 GMT
            Not After : Mar 24 14:29:48 2026 GMT
        Subject: CN=99033f58316aeb5eaa8a3bec397ab0791a55ad8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:06:41:cf:97:a1:c8:68:40:37:96:72:8e:
                    88:ad:71:01:12:8f:e6:87:1c:e0:01:93:fe:a4:1b:
                    90:f0:56:2a:19:db:11:c6:b0:22:ed:9c:9b:34:7d:
                    ed:56:78:c8:49:59:80:ca:97:a6:ee:64:03:a3:d3:
                    e4:a2:be:67:7c:f0:1c:97:12:b1:b7:4a:b9:76:87:
                    b4:15:6c:95:b5:b2:bb:38:a9:fd:c5:28:0a:8c:c6:
                    22:c4:c9:86:a8:4f:88:49:e8:d7:a1:c3:ce:e9:f0:
                    7b:24:4e:2c:72:3a:f7:ae:3d:d8:de:5f:16:29:f7:
                    66:54:6b:68:88:e1:ab:38:3c:99:89:ad:04:c0:ab:
                    0b:80:8e:90:0a:cf:03:66:45:e2:ce:cc:f2:a7:ee:
                    7c:db:db:05:c6:1a:c2:12:7b:40:8b:52:e4:8c:a6:
                    0e:3c:6a:c2:6e:a8:6c:08:92:e4:4a:07:8d:33:40:
                    d4:73:7d:30:86:2f:fc:57:24:e7:91:82:4a:c2:47:
                    e5:c2:a8:10:5f:34:08:17:c6:c1:55:4a:bf:09:5d:
                    83:0d:54:13:5d:06:7c:e7:e1:a1:ca:71:88:56:f0:
                    8f:a0:b7:e6:c8:8e:7f:5a:a6:02:0f:9d:ce:6d:68:
                    9a:3d:73:3a:8c:5e:43:77:7c:22:96:cf:39:c0:ed:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:99:F0:97:0F:96:E4:AD:C5:40:84:BF:46:F3:25:07:1A:04:AD:D9
            X509v3 Authority Key Identifier:
                keyid:02:06:C7:58:4B:2F:F2:14:F2:6C:75:8B:93:CA:E7:A2:BC:C6:BB:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80d72f48d6b0182b3a2564057915f41342232c28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/99033f58316aeb5eaa8a3bec397ab0791a55ad8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eab253d8-2e99-472a-a137-413b15d42fd9/80d72f48d6b0182b3a2564057915f41342232c28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:33:5f:a8:dc:b3:44:9e:2b:9b:f0:3a:9e:1b:4b:40:71:32:
         54:38:e1:88:54:a2:76:80:7a:72:4d:a9:37:b5:b8:5d:8d:08:
         18:b9:78:f2:36:aa:e7:81:06:3f:c0:1d:36:06:3b:c6:9e:97:
         45:5c:9f:ae:06:15:32:b6:85:8f:f6:a6:79:c3:85:07:b9:9c:
         1d:72:50:aa:a4:4b:48:05:f8:ab:09:32:8d:18:b6:96:fa:ae:
         93:66:e0:3c:21:c9:b5:b3:da:0d:5f:a3:03:96:6c:a6:96:96:
         5b:a2:e8:d7:74:b8:2f:0c:74:32:1b:00:62:8b:bc:f8:ab:c5:
         be:3f:48:72:9f:98:35:59:b0:fd:77:ac:bc:e4:e9:48:f1:f7:
         f3:bb:8a:a6:5f:c9:71:f0:64:7d:c4:bf:6b:61:49:92:7c:4c:
         3a:85:77:a1:dc:d7:10:89:16:74:e0:e8:fe:c5:21:fc:ca:70:
         6b:38:c9:2f:32:e4:9d:6c:7f:6b:a7:f3:13:96:01:2f:c8:62:
         ab:2e:54:52:cf:9b:bf:d9:d3:b4:0c:3c:fd:4e:78:bb:51:30:
         3a:58:5d:e1:fe:25:d4:e2:27:5f:a5:c3:85:09:35:1b:13:a2:
         c4:63:82:f6:f8:fa:c4:9e:2c:84:e9:2f:8f:80:67:3e:3e:be:
         c4:b7:fa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org