Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/bbe77ab616e0f2c5de4b8b026a532779aaace5f6.roa
File:                     bbe77ab616e0f2c5de4b8b026a532779aaace5f6.roa (raw, json)
Hash identifier:          4QwLfTZrZ8INglt7+eDy7qgTgH5IZxS7QiusEY1oqBg=
Subject key identifier:   C8:A6:14:7C:04:FC:B5:6B:D1:7C:DA:54:DF:9E:F4:75:D6:AC:65:58
Certificate issuer:       /CN=664b556b2476504fc3632f03883c37447d34bf39
Certificate serial:       0321
Authority key identifier: 5B:08:A7:2D:9D:2A:98:87:3F:F2:59:96:A0:70:0E:36:C1:E4:6D:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/664b556b2476504fc3632f03883c37447d34bf39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/bbe77ab616e0f2c5de4b8b026a532779aaace5f6.roa
Signing time:             Mon 03 May 2021 20:55:16 +0000
ROA not before:           Mon 03 May 2021 03:00:00 +0000
ROA not after:            Wed 03 May 2023 03:00:00 +0000
asID:                     271801
IP address blocks:        45.68.0.0/22 maxlen: 24
                          2801:11:a800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664b556b2476504fc3632f03883c37447d34bf39
        Validity
            Not Before: May  3 03:00:00 2021 GMT
            Not After : May  3 03:00:00 2023 GMT
        Subject: CN=bbe77ab616e0f2c5de4b8b026a532779aaace5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:44:09:ef:bf:f5:b3:5e:bf:5d:1c:dc:c5:
                    9b:cc:8c:3b:07:02:75:aa:f3:53:b8:1e:05:13:44:
                    b6:85:73:55:78:4f:9a:00:10:46:d1:2e:b3:ee:b8:
                    fb:c1:9e:69:7e:47:a6:88:3e:43:33:aa:43:83:fd:
                    e2:34:3d:64:df:5f:af:16:cc:c2:14:52:e2:51:5a:
                    29:0e:79:b5:bc:f0:34:ad:4f:7e:19:86:eb:0a:75:
                    e2:1e:db:cb:94:b0:59:c4:b1:3b:1e:b8:fa:59:f1:
                    5c:13:92:27:b8:76:8a:df:b4:16:06:23:58:31:88:
                    df:a1:ef:42:a0:99:0a:23:f2:ea:2c:14:a9:19:9a:
                    e5:cd:96:c0:d1:b4:52:ce:0d:1a:f3:fa:57:36:64:
                    12:5b:05:35:ea:d0:f6:3e:0e:bc:c4:d2:6e:b5:7e:
                    64:25:36:89:33:23:66:5d:85:47:66:e5:5f:14:49:
                    06:34:63:18:4b:4e:56:84:bd:6c:cb:a9:94:3b:07:
                    60:66:b1:7f:21:6c:bf:26:ae:36:42:81:b0:1c:20:
                    6e:cc:8a:a6:c7:9d:46:9b:12:c9:a5:3e:bf:73:8b:
                    67:23:eb:13:94:78:32:0e:c4:6a:81:bf:a4:63:13:
                    f1:12:b6:1b:7b:e0:18:ed:0f:a2:51:0e:8d:5b:f1:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:14:7C:04:FC:B5:6B:D1:7C:DA:54:DF:9E:F4:75:D6:AC:65:58
            X509v3 Authority Key Identifier:
                keyid:5B:08:A7:2D:9D:2A:98:87:3F:F2:59:96:A0:70:0E:36:C1:E4:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/664b556b2476504fc3632f03883c37447d34bf39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/bbe77ab616e0f2c5de4b8b026a532779aaace5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20d33e9a-ba68-4ad5-a311-80a59fd53452/664b556b2476504fc3632f03883c37447d34bf39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.0.0/22
                IPv6:
                  2801:11:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:62:a8:44:ec:2b:bc:ee:03:37:cd:76:77:6d:1e:b5:c4:
         c9:09:dc:b0:ff:20:ac:16:55:44:c8:a8:56:bd:a9:53:05:0f:
         f0:bd:07:d9:c8:12:ef:e4:4c:16:e1:96:bf:c5:c2:cf:87:24:
         77:53:de:8b:b2:55:f4:34:aa:49:b8:90:b5:eb:05:c5:5a:fe:
         00:87:3f:c0:03:7e:87:2e:ed:71:c3:1e:4b:de:db:f2:67:8d:
         a4:00:8e:f3:d0:1d:1a:ee:03:cf:de:ec:ff:e6:01:78:ec:1f:
         a3:54:34:dc:e9:bc:ca:b5:7e:db:ab:5f:86:1a:bd:3d:29:6a:
         02:f1:ed:07:4f:8a:0d:f2:86:a3:84:6e:3e:d2:98:f7:2d:ae:
         47:bb:d7:78:ca:23:2d:a5:71:80:be:d3:90:05:ee:33:8d:17:
         be:e1:32:fb:a9:2b:fe:f6:63:f2:8a:d3:7f:08:48:e0:67:5b:
         94:4b:d2:4b:71:f2:e5:59:5f:d4:ca:83:c9:72:29:a4:38:77:
         c1:cb:78:7c:5d:d4:5c:f6:2d:07:0f:ca:d4:9b:29:73:b5:4e:
         e8:c9:98:a7:2e:d5:c7:c5:47:54:dd:94:f4:c4:cc:38:e2:69:
         fe:63:0e:51:49:b2:eb:46:3e:97:a7:d7:35:5f:49:99:e9:68:
         70:b1:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org