Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/24f1dd9cad4468c90903fae373a2421ca229e76b.roa
File:                     24f1dd9cad4468c90903fae373a2421ca229e76b.roa (raw, json)
Hash identifier:          jx5IaIrQ+V/SsHoMfwak58ozISIA+LJP3tYPnSG/qz8=
Subject key identifier:   C5:05:4B:02:6B:89:66:19:49:D1:5C:7E:B9:4B:04:7E:35:57:3A:ED
Certificate issuer:       /CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Certificate serial:       1E0B
Authority key identifier: D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/24f1dd9cad4468c90903fae373a2421ca229e76b.roa
Signing time:             Wed 24 Mar 2021 14:32:14 +0000
ROA not before:           Wed 24 Mar 2021 14:32:13 +0000
ROA not after:            Tue 24 Mar 2026 14:32:13 +0000
asID:                     267686
IP address blocks:        45.163.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7691 (0x1e0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
        Validity
            Not Before: Mar 24 14:32:13 2021 GMT
            Not After : Mar 24 14:32:13 2026 GMT
        Subject: CN=24f1dd9cad4468c90903fae373a2421ca229e76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:71:0f:1e:d4:b6:d9:b1:ca:3a:d8:2e:bd:
                    b2:70:82:cd:2c:a2:ac:76:f7:59:b3:29:af:37:93:
                    da:50:13:ff:81:c7:f6:16:ac:8b:7d:37:0c:d7:2c:
                    f7:b9:79:97:25:1e:3e:9a:bf:5c:49:ba:9f:9e:b5:
                    19:25:59:4a:27:b3:21:01:bb:6a:d6:51:b8:d7:cc:
                    8f:1b:f5:5c:ae:b5:df:59:1e:97:6f:31:a1:e1:e4:
                    41:ae:11:b0:3c:ec:98:32:0e:aa:d2:dd:36:88:54:
                    d3:b0:1a:1b:25:24:56:8a:1e:dd:ba:a1:99:0b:19:
                    c3:a5:81:f4:a9:43:9b:aa:53:99:53:48:16:2c:52:
                    70:b1:5c:11:3f:7a:82:9a:da:52:21:0b:57:1d:bb:
                    57:96:46:fd:64:de:3c:81:51:e7:4d:e6:dd:3a:7d:
                    51:9e:32:c2:2d:27:a8:86:b4:de:df:93:98:68:7f:
                    42:29:4e:d7:26:e4:5f:3c:18:60:7b:b9:ed:42:7a:
                    44:92:e4:d4:79:6d:8c:2c:d2:da:12:b8:cd:3b:28:
                    83:fe:4e:ef:56:cd:a2:9e:6e:51:d3:7c:32:db:98:
                    0d:41:e4:66:d5:c0:5a:0d:5e:50:4a:a3:4f:56:27:
                    5b:99:82:43:d5:48:75:44:e5:37:a0:1b:7b:5c:cc:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:05:4B:02:6B:89:66:19:49:D1:5C:7E:B9:4B:04:7E:35:57:3A:ED
            X509v3 Authority Key Identifier:
                keyid:D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/24f1dd9cad4468c90903fae373a2421ca229e76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:2b:cb:e0:62:da:3c:14:12:22:6d:2e:57:22:dc:de:cb:
         6e:d7:8f:78:18:3c:c5:2a:0d:7a:d7:0a:ef:55:14:98:05:92:
         58:11:66:4e:51:45:b1:a4:6b:41:64:a6:cf:2d:73:63:c0:3c:
         bd:88:5c:47:c1:97:03:40:f7:3d:8f:4c:0f:ee:8b:fc:28:9b:
         1b:b1:f8:52:9f:57:2f:1e:c8:9f:9f:fe:f6:46:f3:fe:3a:e4:
         24:7a:9b:d9:38:de:6e:43:89:47:7a:b5:2d:4c:9b:48:fb:82:
         1c:35:60:22:ff:12:58:01:6f:21:98:87:02:11:f1:bd:9e:ed:
         1f:d3:1d:39:3b:e1:d1:9a:3c:38:d8:5f:4e:ec:ed:0f:14:7f:
         37:4a:c7:b3:dc:a2:9e:45:0a:4d:4b:72:5a:e4:b1:00:55:c6:
         47:90:cc:ef:46:0d:47:42:36:2c:6f:01:dc:16:e2:b2:48:48:
         9e:a8:b2:75:f1:95:e3:33:fb:b8:b3:75:db:a1:32:40:62:a5:
         ea:59:5e:63:eb:88:f0:62:12:25:2a:5a:20:04:9f:5e:ec:dd:
         d9:44:2c:56:91:8f:5d:8a:92:e0:ab:dd:ec:4a:de:d2:23:41:
         bf:db:60:37:5d:ea:86:b3:6c:49:ed:21:71:ef:3e:d7:f8:4b:
         6c:c0:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org