Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6db0fd24b77af9c8d3ef4434e3d1ab8b89073775.roa
File:                     6db0fd24b77af9c8d3ef4434e3d1ab8b89073775.roa (raw, json)
Hash identifier:          XpVzSrqN0DvSLBG3sgPsNo1X7/aEIL0dkq+n/iMgLCQ=
Subject key identifier:   54:49:60:A9:EE:FF:29:8B:89:DA:12:7D:13:FD:D2:6C:43:67:62:87
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F4396
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6db0fd24b77af9c8d3ef4434e3d1ab8b89073775.roa
Signing time:             Wed 26 Apr 2023 17:24:55 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     270033
IP address blocks:        170.210.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048918 (0x1f4396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=6db0fd24b77af9c8d3ef4434e3d1ab8b89073775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:1b:9f:e7:49:36:b7:64:e2:d7:12:d2:fd:
                    70:8b:5d:a8:89:e2:9b:05:b7:7a:23:00:c6:1a:4c:
                    3e:01:e4:9b:cd:8d:28:1f:45:af:eb:46:5f:4b:81:
                    e3:80:0f:38:0a:0e:3b:49:eb:7b:bd:9a:0e:9c:f0:
                    fb:ac:eb:84:61:72:4f:1c:38:44:ab:7b:67:50:7d:
                    69:94:a5:d0:c5:2a:a4:c9:1a:24:2b:1e:7a:c5:41:
                    2e:79:6f:da:11:fe:79:ee:ca:a5:89:84:60:e3:ce:
                    97:8c:05:5b:69:37:1d:b9:15:94:dd:06:87:b2:3d:
                    1c:db:ae:4c:17:de:e8:7e:66:8d:21:09:cc:93:e3:
                    d2:6a:bb:1a:72:95:57:b3:d8:3e:7e:24:00:4f:f7:
                    9d:3a:72:be:3d:a3:74:9a:23:23:56:27:fd:27:30:
                    b6:58:ce:22:97:fe:6d:0b:e5:af:ea:3b:84:b3:b8:
                    63:7b:91:5b:b2:e5:4d:cc:91:e6:48:42:5d:11:bf:
                    d7:82:6d:f5:c9:1b:ea:67:a9:63:b7:f7:9c:aa:8a:
                    3d:64:2c:18:9e:86:fc:71:cd:a8:a3:6d:b6:02:b2:
                    e5:98:6e:c8:3b:b5:d3:d7:8a:ca:16:dd:0e:8b:f2:
                    35:f3:d6:d2:1a:b6:18:09:4f:85:38:83:ed:59:a6:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:60:A9:EE:FF:29:8B:89:DA:12:7D:13:FD:D2:6C:43:67:62:87
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6db0fd24b77af9c8d3ef4434e3d1ab8b89073775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f8:1c:35:de:f2:3b:af:fe:70:01:3e:9b:ab:16:83:00:19:
         4f:b4:8f:8f:ca:5f:ad:05:85:62:18:20:e5:1a:17:74:15:73:
         4b:e0:a8:45:44:53:6e:fa:9c:d8:3e:12:e3:39:61:f4:ed:47:
         f0:bd:f5:28:fa:38:d6:e1:f7:fc:d9:f1:ac:b8:d9:00:e2:52:
         65:36:89:61:07:32:1e:74:1b:c3:5f:ae:5f:0a:1b:0b:7b:0a:
         54:e1:d0:5b:52:b3:fb:0c:f7:36:da:02:dd:e8:da:d9:30:64:
         f6:68:03:51:3a:7e:3a:ab:fb:4a:d1:1b:47:3e:f7:bd:f1:0c:
         7f:c7:dd:13:13:ab:ba:ab:b5:fe:25:39:b9:fd:c8:39:d8:23:
         27:f7:a9:05:0b:87:fd:1a:da:20:c1:19:e1:f1:98:ae:d1:3e:
         e7:a8:f8:0f:2c:2b:24:7b:c6:b2:3e:a4:1a:ec:75:e9:71:16:
         5d:89:d6:09:98:70:28:b0:91:65:e7:99:09:9b:28:37:1f:56:
         7b:ff:54:14:df:42:73:90:5f:bd:29:21:51:e6:98:2d:67:28:
         9e:f9:3e:d1:b4:53:4d:63:45:85:82:9a:79:79:f8:f7:7f:11:
         ef:09:67:eb:32:05:89:62:9a:be:1b:46:9f:e0:e8:34:9b:5a:
         b5:ee:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org