Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/48ab4d7f33678c40d695912c22c83574849f112f.roa
File:                     48ab4d7f33678c40d695912c22c83574849f112f.roa (raw, json)
Hash identifier:          Pm0U4XxuGSIcUDitRvrL+ozkqCQqncw2RkN1i8WTVrY=
Subject key identifier:   42:C5:6B:05:98:5E:6C:DB:B1:7F:23:9B:3A:12:84:4B:F6:55:86:55
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F5454
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/48ab4d7f33678c40d695912c22c83574849f112f.roa
Signing time:             Wed 26 Apr 2023 17:25:23 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     52314
IP address blocks:        170.210.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053204 (0x1f5454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=48ab4d7f33678c40d695912c22c83574849f112f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:8d:01:ff:57:89:af:af:90:6b:e9:a2:3e:
                    53:04:08:54:fc:cc:02:f3:9b:3b:5d:2c:9c:a3:27:
                    b8:b9:13:71:93:5d:f0:71:82:52:e4:41:8a:42:65:
                    27:58:38:d4:b6:c3:8b:ba:37:b7:b8:47:d0:95:53:
                    e7:25:29:0a:8c:69:9e:cd:d7:21:14:f9:83:48:bc:
                    5f:9d:a0:32:87:67:94:10:d1:f8:de:a4:78:a9:ab:
                    75:0d:ea:ae:2a:04:83:0b:1b:5f:2c:fa:e3:95:fd:
                    58:a1:b2:29:2c:c2:fa:9f:4b:8e:98:1f:d2:66:e2:
                    56:68:3e:e5:bf:68:3b:0c:ae:bc:70:83:28:27:0f:
                    81:50:dd:06:ab:50:bd:00:39:04:4a:d1:18:af:5d:
                    d3:2e:e4:83:38:e7:3c:c5:12:56:d8:aa:23:49:11:
                    51:10:3c:b7:d3:57:ef:91:bb:26:01:df:aa:f9:2e:
                    03:a6:fc:69:7f:ad:55:d6:ce:a5:f9:13:b5:56:5a:
                    ca:24:8f:83:a9:be:89:da:40:e9:55:8c:a2:2b:19:
                    d8:ef:36:1c:74:1f:0f:4d:9e:78:6d:4b:b9:09:25:
                    40:27:3b:bf:af:ba:10:4d:00:2d:f7:ab:6c:84:a1:
                    e8:6b:32:20:74:99:61:3d:20:9d:2e:d4:10:ed:99:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:6B:05:98:5E:6C:DB:B1:7F:23:9B:3A:12:84:4B:F6:55:86:55
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/48ab4d7f33678c40d695912c22c83574849f112f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:a1:fc:d7:a9:ee:59:2b:6b:c2:78:c5:5b:10:99:06:d4:
         28:0a:00:ef:93:c1:30:6e:ce:be:e2:1e:13:fb:52:23:b0:49:
         66:05:a1:d6:53:b6:11:f6:47:6f:ac:f7:a2:eb:65:75:92:05:
         ca:c6:6c:f6:81:bd:35:f8:aa:d0:7c:fe:9e:60:27:2a:bc:53:
         58:b7:ed:9e:bb:95:f3:ff:4c:67:af:98:89:7b:09:0e:98:3a:
         1e:66:6c:38:4f:8a:bd:7c:94:d3:40:b6:04:d5:2c:ff:fd:04:
         13:0f:78:b7:ff:e2:f0:bf:29:c6:60:47:91:4b:21:f2:8c:04:
         7a:f1:95:cd:99:e2:61:bd:5a:17:64:65:2c:89:ff:c6:a1:65:
         1a:74:29:37:79:7d:79:e5:1a:d9:62:74:f0:90:e2:11:44:f4:
         6f:89:d5:24:a1:d6:6f:d5:12:a7:63:8d:a4:5a:6f:4b:a4:89:
         01:08:a0:f5:36:e3:d3:2e:05:98:ab:e5:0a:ad:02:41:af:a7:
         85:b1:bf:63:b9:d8:4d:52:c2:94:dd:6a:85:07:a4:a6:70:ed:
         47:5d:2f:07:0d:b4:58:64:0b:5d:8c:98:1c:ca:e0:87:0c:a8:
         3b:ea:32:7c:01:a5:25:22:97:ec:b2:ee:32:41:b4:08:23:6d:
         fc:43:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org