Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/27a057b6c27dfaebe4506ee62a5a8232e8f2ac8a.roa
File:                     27a057b6c27dfaebe4506ee62a5a8232e8f2ac8a.roa (raw, json)
Hash identifier:          sHDBo8A0CSv7ur9ykj0GZEA5ZumVSCjTJIgz53sXNVU=
Subject key identifier:   C5:EA:5C:7D:A7:DB:77:63:D4:4D:B4:13:05:1F:BB:7D:30:07:3D:B3
Certificate issuer:       /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial:       131976
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/27a057b6c27dfaebe4506ee62a5a8232e8f2ac8a.roa
Signing time:             Tue 09 Nov 2021 14:05:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271970
IP address blocks:        170.83.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251702 (0x131976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=27a057b6c27dfaebe4506ee62a5a8232e8f2ac8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:33:d1:08:be:76:5a:f7:20:66:47:50:5d:
                    b0:c7:7d:8f:30:ce:d7:b8:a7:79:b6:92:9d:3c:e6:
                    57:f2:fc:e2:2f:8d:d5:44:58:49:0e:ed:55:44:80:
                    a9:38:39:54:4b:19:56:5f:e0:98:12:22:c9:e3:55:
                    c8:81:98:5c:0d:67:e7:6f:e0:8c:af:49:44:9f:d6:
                    d1:6a:33:fc:a6:92:38:8a:49:3f:9b:bd:11:95:47:
                    b4:f2:ae:31:c4:8f:12:c2:46:af:3b:51:fb:77:08:
                    3d:97:87:0b:00:e7:55:d1:92:f9:55:a1:82:f3:cf:
                    bb:56:38:82:ab:83:e2:e6:3a:3e:c5:34:fd:6f:e4:
                    37:77:4f:ed:22:82:0e:ee:e3:06:19:45:85:25:55:
                    c8:8e:11:14:19:d5:6a:14:01:ef:11:ef:06:9b:26:
                    36:8a:85:4b:a4:63:33:2f:6b:0c:8e:57:bb:3a:4e:
                    4c:95:05:89:16:43:8b:9b:5f:c9:00:05:fc:fe:44:
                    b2:91:23:60:60:7e:f6:a4:3a:b6:69:49:bd:5f:ce:
                    1e:4a:68:c4:13:65:03:e5:2a:e5:4b:dc:db:8d:13:
                    f3:79:41:90:b2:a3:08:78:3d:ba:4d:df:9d:87:73:
                    fd:c3:6f:4c:92:4e:80:ff:8d:6d:6a:72:fc:79:4f:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:5C:7D:A7:DB:77:63:D4:4D:B4:13:05:1F:BB:7D:30:07:3D:B3
            X509v3 Authority Key Identifier:
                keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/27a057b6c27dfaebe4506ee62a5a8232e8f2ac8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:e0:89:3a:39:f9:07:60:0d:2f:64:35:6a:cd:f5:bf:fa:cf:
         57:50:29:64:68:8c:e0:f7:73:64:29:f5:d8:32:12:a2:04:09:
         a2:5e:21:83:79:05:e7:77:70:2c:67:88:e9:8b:cd:10:d8:28:
         52:3c:01:12:c4:22:c4:f0:e0:f1:8a:3a:fb:40:8a:2a:6c:f6:
         21:e5:18:f6:91:16:d9:18:b8:3f:cb:6d:82:c3:51:63:d9:98:
         73:b0:5f:ad:f4:43:f4:4c:b4:1a:62:59:eb:88:4d:90:20:4f:
         dc:43:38:6b:6b:40:aa:d9:9d:6b:38:45:7f:a6:50:54:6b:87:
         2d:1d:64:58:ae:87:00:1b:5a:3d:fa:ec:f1:58:74:67:84:62:
         50:67:a7:af:62:03:1e:d7:ca:59:f6:dc:89:c9:07:e7:88:4b:
         df:4d:4b:71:08:40:7e:a2:3d:2e:fa:c6:2c:0e:57:4d:9d:94:
         ba:9c:3c:05:48:21:c1:5a:b7:bf:45:c8:ab:85:8c:a9:97:40:
         36:f5:bb:4b:fc:5a:18:a2:c4:2d:c0:15:6c:91:15:be:48:d4:
         2e:43:19:39:e3:70:4c:bc:2d:45:42:c7:f0:ee:11:92:42:ba:
         a6:8b:9b:70:e7:ab:63:e7:32:9e:f2:e0:2c:2b:8a:33:1c:86:
         c8:d3:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org