Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/924a8dba37e4377ec03f495e77b799ddc35fcdf9.roa
File:                     924a8dba37e4377ec03f495e77b799ddc35fcdf9.roa (raw, json)
Hash identifier:          Vgnd5bz7Ancxyx+hLNR11wRwGAalQA/o3d1XHd/P8FM=
Subject key identifier:   2C:A8:CF:DC:53:67:4B:14:32:37:7A:BC:2D:73:DE:F7:4A:16:F1:F2
Certificate issuer:       /CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
Certificate serial:       1B7B66
Authority key identifier: 5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/924a8dba37e4377ec03f495e77b799ddc35fcdf9.roa
Signing time:             Tue 27 Sep 2022 11:34:40 +0000
ROA not before:           Wed 24 Mar 2021 14:31:06 +0000
ROA not after:            Tue 24 Mar 2026 14:31:06 +0000
asID:                     265659
IP address blocks:        170.247.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801062 (0x1b7b66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
        Validity
            Not Before: Mar 24 14:31:06 2021 GMT
            Not After : Mar 24 14:31:06 2026 GMT
        Subject: CN=924a8dba37e4377ec03f495e77b799ddc35fcdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:cc:10:46:d1:f5:a5:62:13:e7:fe:84:13:
                    23:10:8a:75:e2:ad:df:a5:18:ce:2f:40:5f:24:31:
                    d2:76:91:32:2e:e7:65:0a:59:0f:33:c2:7d:cb:f9:
                    71:c0:b6:d5:f6:fe:70:b3:e5:7a:60:ee:26:b9:d5:
                    4d:0d:75:dd:5a:b7:74:67:c5:24:45:9c:fd:04:a7:
                    4a:50:0b:eb:d1:1a:77:7f:30:1c:7e:67:6a:88:26:
                    f7:55:f5:f8:8b:ee:2e:30:f7:15:11:42:07:40:73:
                    67:9b:45:03:a8:45:ea:c4:ba:bb:47:99:33:1c:dd:
                    e8:9b:1d:b2:56:2e:e8:76:13:e6:e4:c4:94:9c:a7:
                    be:f4:da:0c:2d:11:f1:bc:f3:5f:78:1d:00:5b:37:
                    7c:b5:43:25:72:d5:01:89:cd:de:26:e5:3e:23:11:
                    7c:d8:f4:37:9a:cd:24:69:19:14:57:1a:7f:7a:7f:
                    65:07:9a:72:6a:52:e3:c1:e5:4c:d5:54:57:90:18:
                    10:2d:a9:d5:f5:e9:86:0f:57:0c:e2:7f:67:ab:a9:
                    63:8e:08:14:7e:b9:33:28:ff:9e:6e:40:07:d0:3e:
                    6c:78:c0:af:4c:0c:ec:8d:a9:9b:95:c9:e2:8a:66:
                    b7:9c:3e:a2:45:bd:6f:e9:56:9e:2a:1e:e6:e7:95:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:CF:DC:53:67:4B:14:32:37:7A:BC:2D:73:DE:F7:4A:16:F1:F2
            X509v3 Authority Key Identifier:
                keyid:5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/924a8dba37e4377ec03f495e77b799ddc35fcdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:98:d5:c8:e9:96:9f:27:40:7e:8b:4b:a2:e8:4a:ac:5b:
         03:78:ae:f5:98:79:76:46:9c:36:21:78:b7:49:22:af:d0:e5:
         1a:93:36:f0:87:ac:47:3e:16:c0:e5:88:49:e8:ae:95:ba:e6:
         5a:9f:70:87:e6:38:b3:2c:43:4a:c4:8b:19:69:5e:f8:86:26:
         4c:72:3c:24:29:d1:65:6e:9e:f9:b4:7d:00:70:81:f0:2b:21:
         c0:49:fb:70:de:ac:92:ff:73:2c:19:32:6e:34:6b:08:0f:7c:
         b8:a0:fd:88:a0:ed:eb:fd:9c:aa:9b:3e:d0:44:f0:c7:2f:25:
         69:58:2a:ef:49:a0:c5:24:59:c4:2e:ad:26:ec:13:04:7e:56:
         c2:8a:08:ce:87:fc:61:45:2f:2c:08:5c:1e:02:2d:e3:58:2d:
         b2:57:22:bb:42:79:7c:1a:e7:7e:8e:6c:75:c5:7f:e2:01:a6:
         d5:48:ee:bf:08:3a:dd:e3:e2:fa:25:ab:1c:24:9f:26:3b:c9:
         68:02:f7:d9:4e:c1:82:ed:1f:1a:e4:66:5f:90:c1:e6:1a:7a:
         28:ab:bd:9b:f7:28:21:5e:a1:6e:42:ad:27:83:e9:e0:f9:f3:
         25:01:00:86:3f:c1:06:f8:bb:3b:b0:83:ce:c5:29:b8:48:c5:
         d0:cb:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org