Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/a3d5f18cd8918409af42ecd556878b3fb570dc97.roa
File:                     a3d5f18cd8918409af42ecd556878b3fb570dc97.roa (raw, json)
Hash identifier:          T1FiKHnftCcTLTqnjOBmwIh7r1iMcOzE3EJxrMvgHF0=
Subject key identifier:   97:13:6E:8B:6C:4B:F4:8C:FA:38:45:38:3C:5B:57:0B:0C:E2:E4:5F
Certificate issuer:       /CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Certificate serial:       10237F
Authority key identifier: 9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/a3d5f18cd8918409af42ecd556878b3fb570dc97.roa
Signing time:             Thu 15 Jul 2021 00:48:43 +0000
ROA not before:           Wed 14 Jul 2021 03:00:00 +0000
ROA not after:            Fri 14 Jul 2023 03:00:00 +0000
asID:                     265629
IP address blocks:        170.239.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057663 (0x10237f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
        Validity
            Not Before: Jul 14 03:00:00 2021 GMT
            Not After : Jul 14 03:00:00 2023 GMT
        Subject: CN=a3d5f18cd8918409af42ecd556878b3fb570dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:03:91:75:80:53:b4:bf:45:5d:ce:a2:7d:
                    22:42:87:6a:a8:e6:28:1f:95:ed:54:66:5d:58:49:
                    75:2f:ff:20:e8:c0:e4:41:d9:42:d3:41:bc:0d:53:
                    3e:d5:5e:7c:c8:e6:8f:c1:6c:2f:90:6e:c0:64:3d:
                    41:d8:55:ef:b0:11:9a:ab:13:6a:c3:78:6e:d5:9f:
                    42:dd:24:3a:ce:10:c8:a4:a1:4a:b9:4c:0f:12:77:
                    68:c1:78:da:2a:f3:36:ee:1e:47:71:96:05:7d:96:
                    cc:4f:a5:3e:f9:b8:5b:d2:30:4b:0f:fd:ac:84:de:
                    3a:ab:d9:13:11:c5:20:8f:8b:1e:d5:84:50:1f:cd:
                    f6:d7:e0:c4:0e:21:39:fe:b0:ef:c9:e6:4c:e0:49:
                    63:ba:95:20:d9:32:8b:d3:25:e9:a8:0c:96:bf:7f:
                    06:11:48:bf:dc:5f:8f:9e:91:22:13:18:3d:ea:5e:
                    0d:3f:1e:ea:80:d6:92:f6:35:37:4a:fe:52:ac:b0:
                    b8:b0:23:cb:f9:b1:bf:d3:28:df:71:bc:5e:5b:76:
                    7f:d4:d2:8c:4b:f2:78:77:6e:d0:1d:c9:9c:ff:f4:
                    76:37:a8:95:f4:f2:d6:1a:b0:b6:5d:f5:a5:ad:d3:
                    de:49:74:9c:69:a0:18:81:c7:4d:08:05:91:28:15:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:13:6E:8B:6C:4B:F4:8C:FA:38:45:38:3C:5B:57:0B:0C:E2:E4:5F
            X509v3 Authority Key Identifier:
                keyid:9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/a3d5f18cd8918409af42ecd556878b3fb570dc97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:42:f5:32:ef:a9:22:7c:50:e3:df:9c:f6:39:5b:be:d8:d9:
         6d:1b:22:f4:2d:e9:3c:c3:bd:c1:80:63:a2:66:d0:34:17:dd:
         51:62:ba:93:39:5b:08:36:6c:7b:85:67:b3:3c:e8:ec:74:1e:
         c6:2f:5b:ce:21:40:1f:48:85:5c:e7:47:3f:69:ee:05:0d:f3:
         c5:00:56:85:0b:dd:c8:e9:33:58:3c:fe:3f:21:5a:ec:f2:39:
         76:61:96:28:36:7f:42:92:91:d1:00:18:86:b7:29:02:9b:42:
         74:10:81:04:50:7d:9d:72:82:4c:0d:5d:8b:e7:7c:49:5d:21:
         21:9b:04:49:54:88:1b:1d:10:c5:31:6a:a0:e0:0d:9b:c7:fa:
         a5:1b:d3:2a:0e:d8:45:16:b7:96:3b:1b:46:41:e7:57:82:f0:
         66:8a:13:3e:43:d7:17:39:ec:cf:45:32:77:3d:05:78:ab:7f:
         4a:2c:13:3a:97:49:2f:a5:41:64:bb:c5:d4:0a:5c:62:94:b4:
         57:3d:68:90:e9:16:86:40:37:15:7b:f5:c8:60:37:4a:2e:ac:
         4d:09:0a:85:c3:5f:99:6c:21:0f:ea:68:24:c9:3a:f8:25:91:
         10:d3:49:76:02:15:e2:c5:bf:48:4f:aa:aa:c7:80:3c:54:45:
         2e:93:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org