Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/88790cc0433262606f6412c51fefa5ab4fc6816e.roa
File:                     88790cc0433262606f6412c51fefa5ab4fc6816e.roa (raw, json)
Hash identifier:          +BLwibFkPQSdxxZaH9rWK9bNytfqW6fM/MR7wqK++yg=
Subject key identifier:   DA:EC:A5:8E:9A:20:02:E3:A5:FD:89:2D:ED:43:24:C1:32:67:48:B6
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B7753
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/88790cc0433262606f6412c51fefa5ab4fc6816e.roa
Signing time:             Wed 24 Mar 2021 14:31:57 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     27790
IP address blocks:        170.210.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751443 (0xb7753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=88790cc0433262606f6412c51fefa5ab4fc6816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:50:dd:cb:f8:5f:08:96:13:65:f3:30:a8:
                    37:f8:0d:e0:27:a6:0f:bc:f4:f7:a4:95:31:03:0f:
                    c4:02:18:ff:fa:4e:4e:46:83:8f:0a:b7:8c:8b:16:
                    37:7e:97:16:e5:4c:50:17:7f:8c:2c:d2:7c:f8:47:
                    ed:9e:63:42:87:8c:af:cb:37:bd:b8:67:4f:cc:80:
                    e8:41:77:a8:1d:bc:48:80:fb:96:4c:e5:d4:17:7f:
                    f6:33:06:1c:e9:fb:32:e9:c3:c1:5b:e2:1c:32:7e:
                    e7:82:cb:fd:d3:a8:06:8a:cf:b3:c6:50:f0:7e:c2:
                    aa:e5:1c:65:75:a2:df:6c:13:c8:9d:23:4c:c6:de:
                    f8:9d:38:d9:79:77:4b:b9:5e:a4:2f:86:9e:9d:bb:
                    5f:b5:d3:26:c0:7b:83:d2:f7:a0:27:fe:82:cf:d0:
                    cd:d5:3c:cf:01:37:94:5d:d7:01:02:33:62:13:e2:
                    f7:13:3f:48:01:69:ec:1f:93:b2:75:ca:77:e9:bb:
                    c8:e5:8a:01:d5:30:6d:c1:e5:ed:f6:22:b5:c2:0d:
                    64:2d:76:38:9e:54:56:81:0c:b6:ad:5c:b3:3e:52:
                    a5:00:01:63:5d:98:dc:c0:0e:38:b2:5d:d9:20:7d:
                    0e:79:76:d2:c1:89:15:40:8e:54:0b:19:1e:d7:d1:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:A5:8E:9A:20:02:E3:A5:FD:89:2D:ED:43:24:C1:32:67:48:B6
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/88790cc0433262606f6412c51fefa5ab4fc6816e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:a0:da:4c:1d:a2:9b:65:19:8a:53:f3:30:8f:af:86:2f:
         e7:29:77:94:34:a5:92:b9:de:fc:35:61:35:8a:d2:6a:97:b1:
         3a:97:f4:2c:24:8b:30:11:ac:e0:ad:44:58:6a:08:ea:70:04:
         16:fc:a1:77:d5:ad:d3:78:f4:3d:ef:4b:52:42:f2:75:1c:9c:
         00:55:88:00:2d:31:90:c9:d9:0d:52:20:ee:50:00:0c:c1:94:
         dd:32:6b:99:0b:31:9f:1b:49:d7:33:01:da:65:74:b8:b3:1c:
         8e:ef:e5:e2:94:15:8c:95:93:5a:04:de:e1:c9:c4:0c:5f:f4:
         a7:f7:37:9d:ba:ef:54:11:2a:2a:f8:b2:56:ab:49:55:28:f2:
         3e:81:f7:ca:1d:f3:e3:4a:01:56:ec:04:64:5c:58:4f:b8:e1:
         53:05:8e:3a:16:81:14:89:fc:d6:5c:d9:06:18:c8:f9:36:f1:
         23:88:ec:0b:a2:bf:63:67:04:be:c5:00:ac:d8:5f:70:9c:ca:
         3a:2d:66:89:68:89:c4:26:26:a8:5b:a3:8e:b5:f6:81:79:d6:
         70:58:41:95:49:57:90:da:6f:61:ee:d7:ea:1e:c8:3d:a1:c4:
         1e:73:a4:f1:8c:13:2b:ad:d1:44:05:79:1e:39:aa:5f:83:11:
         05:6f:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org