Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/12fe2c8c460b916b4e599e3f2e5110bbef8f3e03.roa
File:                     12fe2c8c460b916b4e599e3f2e5110bbef8f3e03.roa (raw, json)
Hash identifier:          7rz0/7NWeeFtbYGLHnIrSieWsaXMxnUX9H6HkeZw1zU=
Subject key identifier:   6E:5B:AA:89:96:87:F0:E9:C5:41:15:95:1C:CA:5C:1C:32:EF:C1:B0
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B90EA
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/12fe2c8c460b916b4e599e3f2e5110bbef8f3e03.roa
Signing time:             Wed 24 Mar 2021 14:31:58 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     52442
IP address blocks:        170.210.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757994 (0xb90ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=12fe2c8c460b916b4e599e3f2e5110bbef8f3e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:4e:9a:30:34:96:c4:2a:3f:0b:7d:f8:1f:
                    ab:13:1c:e8:19:6c:87:f8:50:25:4a:72:93:36:0c:
                    73:6c:ae:8b:6d:6b:b2:2d:d4:02:32:5d:ff:64:8d:
                    47:89:f5:3c:40:80:09:da:89:93:07:b1:93:9f:ce:
                    be:49:b6:4a:2f:37:7c:90:e8:0d:a8:8f:37:b7:91:
                    97:e3:25:6f:37:a0:2b:e9:f2:0e:1e:17:f3:cb:2b:
                    2d:be:d9:6d:c7:50:95:91:c5:8e:93:f1:c6:83:d0:
                    c3:ee:2c:90:00:92:dd:4f:1c:ee:97:cb:b8:02:88:
                    98:9d:e6:a0:99:2f:36:73:8a:c4:98:1b:2a:37:11:
                    e0:ed:e4:a5:7e:0f:3c:4f:99:45:b3:4d:1e:91:05:
                    16:62:ee:65:69:09:88:66:d1:d9:3d:e7:fd:aa:22:
                    5a:9f:43:79:99:99:88:59:e0:d1:dc:ab:24:4c:28:
                    e3:44:84:89:37:b1:83:e5:34:2e:6e:56:8f:40:40:
                    ee:fa:66:75:84:92:94:0f:f8:c8:50:85:31:95:f4:
                    dd:3e:fe:23:a1:79:8d:13:c6:44:a5:dd:88:47:0c:
                    2e:89:8d:5d:73:f6:8e:1b:84:1e:6d:1c:70:11:9e:
                    f4:a8:c9:5a:98:f6:87:cc:63:0f:ef:2e:99:6b:36:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:AA:89:96:87:F0:E9:C5:41:15:95:1C:CA:5C:1C:32:EF:C1:B0
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/12fe2c8c460b916b4e599e3f2e5110bbef8f3e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:ee:10:52:e3:06:9a:78:53:25:54:b9:08:89:9a:d8:5a:
         ec:26:72:79:b0:22:53:97:6b:7d:1b:24:c6:e0:76:10:ad:a6:
         86:34:3b:57:7e:e2:d4:a9:d5:e0:97:6c:7b:81:27:7e:ed:a5:
         d3:35:5e:b7:b3:2a:69:85:96:1f:02:1e:b9:9d:61:e3:b0:d2:
         21:8a:6f:6a:f3:ab:a1:08:73:70:9b:52:d5:5a:13:f4:58:a3:
         11:d2:0f:37:5e:27:dd:f8:d2:f1:b1:03:9c:ab:78:e8:a4:69:
         f9:ef:eb:d6:1e:b8:6b:a4:df:06:2f:40:95:1b:a9:5b:68:bc:
         bd:50:88:be:30:11:cd:3b:11:cc:38:72:09:1f:df:ff:b2:23:
         1c:41:2f:e0:0b:8e:bc:f9:ec:8b:85:c5:b6:70:49:f7:41:20:
         08:8f:dd:f9:8e:81:12:2d:5f:d4:88:38:4d:f9:a6:16:44:af:
         10:43:d9:03:3a:fc:15:79:4c:ca:9a:cd:9e:15:fa:31:1b:ef:
         a8:25:3f:ba:9b:23:13:a5:4e:ae:9a:7e:56:75:50:9e:2d:7d:
         8e:74:08:9f:fe:3b:9c:59:06:5f:60:92:fb:50:2d:0c:65:fa:
         19:e7:2a:7c:df:39:f2:af:b2:af:79:19:09:95:c5:f9:c1:be:
         49:80:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org