Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/39a109cd30b84864ec60fe1fa15da2ba656dd48f.roa
File:                     39a109cd30b84864ec60fe1fa15da2ba656dd48f.roa (raw, json)
Hash identifier:          eHTbjvpI0BPwIlKzEYd0VX1InDb9fdMigWGW7IzkX5c=
Subject key identifier:   D8:EC:C5:2D:B3:31:F4:D7:6F:62:5A:B8:E5:87:8E:64:55:E3:D2:B0
Certificate issuer:       /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial:       0C9F65
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/39a109cd30b84864ec60fe1fa15da2ba656dd48f.roa
Signing time:             Wed 24 Mar 2021 14:36:14 +0000
ROA not before:           Wed 24 Mar 2021 14:36:14 +0000
ROA not after:            Tue 24 Mar 2026 14:36:14 +0000
asID:                     10753
IP address blocks:        45.167.124.0/24 maxlen: 24
                          45.167.125.0/24 maxlen: 24
                          45.167.126.0/24 maxlen: 24
                          2803:b5a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827237 (0xc9f65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
        Validity
            Not Before: Mar 24 14:36:14 2021 GMT
            Not After : Mar 24 14:36:14 2026 GMT
        Subject: CN=39a109cd30b84864ec60fe1fa15da2ba656dd48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:58:1b:ad:6c:6b:0b:ff:a5:21:20:61:20:
                    08:d7:05:e1:75:ab:93:bd:49:f6:b5:c4:28:30:99:
                    76:93:64:42:b4:1a:19:a5:44:dd:7d:ac:a4:1c:e9:
                    ff:4c:76:20:59:f4:ac:d8:52:05:7e:b5:59:a0:9c:
                    05:2f:20:25:ee:46:4e:67:2b:ae:cf:11:76:1c:a1:
                    ce:36:9c:bc:08:01:21:02:8f:52:83:2f:da:00:b2:
                    4e:4a:21:79:37:53:5c:62:d9:48:55:7e:6f:c4:00:
                    fa:b9:8a:78:6d:0f:73:4b:2e:9f:a6:76:7a:9c:0b:
                    c3:c0:16:dc:24:0c:bb:d0:38:51:f5:7a:77:01:74:
                    ad:48:ce:4e:97:71:82:fb:de:a9:0d:a8:65:45:df:
                    0a:59:27:5b:4d:bd:dd:e8:fc:74:b6:e6:f4:33:bc:
                    84:f3:ac:c5:23:f4:8e:f3:34:78:e1:e1:7c:a4:20:
                    bd:8e:f5:86:f8:99:d5:6b:26:c0:3c:d3:b1:e5:7b:
                    f5:13:c6:54:87:05:13:41:c0:f7:e8:1d:73:22:78:
                    51:29:5d:d1:b0:57:cd:05:6a:87:ce:c3:af:6a:07:
                    f4:fe:62:e0:d0:f5:f1:18:38:fd:18:ac:9c:ae:42:
                    87:f9:0a:25:57:2b:53:ba:84:ae:19:40:ff:ab:2e:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:C5:2D:B3:31:F4:D7:6F:62:5A:B8:E5:87:8E:64:55:E3:D2:B0
            X509v3 Authority Key Identifier:
                keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/39a109cd30b84864ec60fe1fa15da2ba656dd48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.124.0-45.167.126.255
                IPv6:
                  2803:b5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:e0:b7:cf:a4:a0:d1:95:f3:2c:03:bf:3e:af:48:61:87:b7:
         02:29:a4:3d:b5:ea:43:78:59:c6:b4:97:3d:10:f4:1e:a8:62:
         f8:37:39:4d:fe:b8:a7:2e:6e:bf:7d:d7:33:de:55:a8:e1:02:
         8a:29:c8:2b:be:ae:6b:8e:9c:9f:68:0c:b7:62:82:5f:65:66:
         ec:33:e9:20:47:92:de:5e:43:87:0b:d2:04:66:bc:ba:57:e6:
         8a:d5:3a:87:f9:1f:22:4d:64:e3:60:a6:79:5c:f8:1d:99:f7:
         f0:2a:ea:93:de:3a:7c:3b:a3:e1:e0:36:0e:3a:63:dc:0a:7d:
         17:a2:a8:30:70:34:8c:68:cd:13:a0:71:97:a0:8a:5b:ec:fb:
         ba:25:6e:0a:39:6d:da:be:05:27:51:c9:f9:22:62:79:cd:ba:
         4d:08:12:ed:72:27:af:6c:15:72:10:56:2a:66:1d:76:0f:31:
         67:3d:01:18:5f:88:1d:60:8b:72:46:b8:71:5a:ca:de:92:c0:
         ce:bd:82:0a:59:70:dc:e4:a4:d6:af:51:13:2d:e7:d4:c0:ff:
         cf:f8:7a:ac:ed:94:8f:de:21:4c:f2:71:5c:c9:83:11:51:f5:
         6a:d2:6a:a6:45:d8:ea:55:9a:90:4c:c9:db:7f:14:c2:0d:c8:
         74:3b:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org