Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/b064fc40b355a10a7dff311d9d67e79bcee26f88.roa
File:                     b064fc40b355a10a7dff311d9d67e79bcee26f88.roa (raw, json)
Hash identifier:          1vRNNd9062G3/jc0tyJzFJECSS3KPM4nYCZ3aMfRpAk=
Subject key identifier:   58:34:2F:5D:54:85:76:27:22:8B:25:DF:07:1B:61:23:8E:24:9B:09
Certificate issuer:       /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial:       10F5E0
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/b064fc40b355a10a7dff311d9d67e79bcee26f88.roa
Signing time:             Mon 06 Sep 2021 23:25:53 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269804
IP address blocks:        45.167.124.0/24 maxlen: 24
                          45.167.125.0/24 maxlen: 24
                          45.167.126.0/24 maxlen: 24
                          2803:b5a0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111520 (0x10f5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b064fc40b355a10a7dff311d9d67e79bcee26f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:86:d0:69:f8:07:63:6f:1d:4c:83:6c:91:
                    a6:ab:6b:d7:d2:f2:25:54:19:b5:1a:40:0e:1a:e3:
                    d8:e2:15:66:bd:f7:ec:62:82:ef:3b:72:80:56:f0:
                    dc:5a:c7:77:54:92:86:cc:a3:3c:00:1f:bc:9e:1a:
                    f0:e5:40:4f:11:47:ee:4c:a3:da:ed:0d:51:34:9e:
                    79:fe:f2:93:27:17:ca:66:d9:6e:fc:a6:c9:ec:82:
                    1d:c7:1f:07:1a:15:1e:f9:21:6e:f1:13:3e:1a:57:
                    65:11:0d:78:4a:fd:d8:98:12:16:85:3c:26:a7:69:
                    cf:51:5a:79:03:67:7f:20:a5:71:7d:82:f0:9a:00:
                    8e:b2:3b:66:d7:c8:dc:f9:04:a5:8b:aa:08:80:66:
                    94:99:35:c0:be:58:8e:98:c5:db:81:51:53:dd:21:
                    b8:aa:18:80:95:02:f7:bd:60:75:e9:d2:93:a4:50:
                    3a:34:eb:e5:32:f5:92:f0:7b:6b:c7:19:cb:94:7b:
                    a9:25:71:12:71:53:7a:80:bf:d2:c2:7e:7d:f6:de:
                    ca:2f:69:a3:e8:30:f7:60:2b:b0:89:7c:4c:c7:e1:
                    5a:a2:5b:1e:58:83:57:e0:3d:f9:ff:3f:58:62:e7:
                    27:50:71:25:b2:00:81:20:cc:ed:ec:12:4c:43:f0:
                    fa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:2F:5D:54:85:76:27:22:8B:25:DF:07:1B:61:23:8E:24:9B:09
            X509v3 Authority Key Identifier:
                keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/b064fc40b355a10a7dff311d9d67e79bcee26f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.124.0-45.167.126.255
                IPv6:
                  2803:b5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:2f:fc:f5:8f:98:22:7e:01:f1:8f:14:69:58:2f:30:ca:
         75:89:7c:da:31:cd:f0:17:ed:9d:0a:28:a0:f6:ac:1e:2a:82:
         5b:fe:50:ce:6e:c1:90:72:93:55:7e:bb:df:5e:26:06:8f:48:
         09:a1:12:4a:ff:5e:9a:03:0a:e3:7a:08:55:16:55:92:9c:15:
         a8:cc:cb:06:0a:7a:39:6f:64:54:35:2c:d4:4c:96:58:83:5a:
         a6:e4:59:42:1b:16:c5:0c:ce:1b:22:2c:2e:7f:5b:f0:06:4c:
         78:87:92:d2:ff:53:d8:fd:3d:98:5a:b1:22:02:8e:41:bb:15:
         e4:9d:e7:0f:df:94:91:f5:85:af:7d:0e:36:0f:39:55:40:80:
         a0:7e:0d:30:7e:96:d8:31:73:23:93:6c:69:1c:54:23:4e:cc:
         c2:dd:f2:ad:74:d8:d7:e7:c3:ce:63:72:52:50:0b:dd:88:56:
         ed:f3:ba:20:00:d9:91:cb:40:ab:42:be:10:9a:63:82:13:a3:
         7b:14:c0:3e:b5:c4:52:2c:1a:75:79:63:98:38:e9:2e:e9:40:
         be:5b:99:1b:1a:06:5f:85:34:d1:ab:f8:91:07:bd:5d:e9:50:
         a0:b0:11:b0:c4:c5:c0:9a:18:3d:09:13:7a:89:f5:60:4c:e9:
         c0:e6:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org