Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/d99f22ff334f02c9df353ba5fdbca51a4e7a4c5f.roa
File:                     d99f22ff334f02c9df353ba5fdbca51a4e7a4c5f.roa (raw, json)
Hash identifier:          mV/DRgK0b1I/T+Q96OWZPUN3arVHFJGxVvGxr8XgK20=
Subject key identifier:   CC:0C:50:59:8A:D5:C8:AA:97:2B:DB:F4:70:2A:93:2E:51:F3:29:75
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F2A92
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/d99f22ff334f02c9df353ba5fdbca51a4e7a4c5f.roa
Signing time:             Wed 26 Apr 2023 17:24:46 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     28107
IP address blocks:        170.210.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042514 (0x1f2a92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=d99f22ff334f02c9df353ba5fdbca51a4e7a4c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:7c:c3:b4:af:41:37:1d:36:f0:6c:c2:ec:
                    ea:3a:49:46:38:1f:30:35:27:90:bc:ea:0d:c4:ff:
                    87:b0:12:c8:bc:91:d5:e8:e3:fd:d1:c7:c6:a0:af:
                    e5:1d:78:b9:b1:a5:aa:5a:8a:bb:dd:f2:aa:f6:79:
                    a5:15:42:a3:77:14:f0:0b:fd:5a:6d:81:ee:a5:1d:
                    64:60:a9:14:55:60:c5:81:fc:16:ff:01:76:46:36:
                    fc:b5:44:02:e9:2e:bf:21:e0:86:2e:4b:9a:14:54:
                    aa:b4:64:6a:30:1c:ff:49:1f:21:d9:6b:a5:ab:d3:
                    0f:31:6d:b8:bf:75:b0:68:5a:d5:c7:57:58:bb:c0:
                    1a:11:ec:5b:da:45:32:cf:4b:a0:6a:7a:fa:df:52:
                    b5:57:1c:a2:e6:d0:e0:8c:3e:d3:db:08:a3:73:80:
                    73:18:35:e2:1d:36:7e:f5:0c:99:e3:9c:27:e4:46:
                    d4:79:bf:b5:af:5a:26:b3:e7:ec:07:6f:0c:85:a9:
                    d3:86:31:65:bc:ef:29:76:df:c9:c6:a8:1c:77:66:
                    d3:10:fd:37:78:84:c5:42:f8:1c:0c:af:b4:97:1a:
                    dd:25:dc:de:29:a8:0a:62:64:9b:5d:3f:50:22:35:
                    01:da:80:88:fc:93:28:aa:02:c5:8a:5c:13:8e:16:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:50:59:8A:D5:C8:AA:97:2B:DB:F4:70:2A:93:2E:51:F3:29:75
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/d99f22ff334f02c9df353ba5fdbca51a4e7a4c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:3c:48:6a:69:25:a5:d5:2f:6c:a0:9f:0a:dc:d3:1e:c0:62:
         88:94:a2:26:c0:bb:bf:03:97:3d:e8:df:4f:f0:bb:d7:7e:a4:
         ed:9f:96:e2:6b:4a:f1:b4:fb:a3:3b:83:3e:a9:22:82:85:ae:
         34:79:3e:73:93:6c:52:87:f9:44:18:86:01:d3:5d:5e:9f:c6:
         b1:89:c2:bc:9c:14:7b:5b:3d:62:32:5b:e7:be:de:e2:47:bd:
         ec:b8:4c:58:64:f7:20:c6:f9:04:05:6e:00:e3:93:d3:f1:6e:
         49:7f:b2:cf:9a:7c:b0:e9:b6:54:6a:b3:28:80:13:53:ee:6d:
         9a:c1:de:0a:5f:62:df:bd:7b:7d:86:58:df:7e:ce:c6:7c:01:
         1a:9f:e4:86:8f:da:0d:67:13:89:b6:bf:3e:a0:53:f8:f6:dc:
         32:ac:3b:31:13:e6:c6:24:6d:57:5f:95:0a:32:92:c4:d4:0b:
         88:7f:22:84:90:02:aa:2a:6e:a5:2e:cd:c0:ef:df:c6:f6:19:
         38:c9:bc:a4:86:42:50:24:0b:79:53:45:b2:74:7d:2c:09:e7:
         ce:6c:4a:1c:d6:0f:a0:93:a0:25:93:be:0a:b5:73:4a:e9:d9:
         5f:8b:55:bb:12:7e:c5:50:8c:32:43:0a:6a:63:a8:35:a5:9a:
         ea:65:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org