Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/21e94f473e743b244700342814dadf5fa769d5b9.roa
File:                     21e94f473e743b244700342814dadf5fa769d5b9.roa (raw, json)
Hash identifier:          /FKH4v7fZXCSY2QLhCa3uiBBXg4TonCW3d+wefYQglA=
Subject key identifier:   4A:7A:F3:F3:AF:6E:38:23:2C:3F:60:4B:53:BB:29:8E:C6:4D:AB:FF
Certificate issuer:       /CN=da49da4a1967abec3f02fc95ba51928148a5a9c5
Certificate serial:       0FB8
Authority key identifier: 24:8E:14:29:6B:51:BF:25:C8:11:B0:33:7B:66:13:E9:B5:6D:05:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da49da4a1967abec3f02fc95ba51928148a5a9c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/21e94f473e743b244700342814dadf5fa769d5b9.roa
Signing time:             Fri 02 Dec 2022 12:02:36 +0000
ROA not before:           Thu 01 Dec 2022 11:59:53 +0000
ROA not after:            Mon 02 Dec 2024 11:59:53 +0000
asID:                     269957
IP address blocks:        45.191.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4024 (0xfb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da49da4a1967abec3f02fc95ba51928148a5a9c5
        Validity
            Not Before: Dec  1 11:59:53 2022 GMT
            Not After : Dec  2 11:59:53 2024 GMT
        Subject: CN=21e94f473e743b244700342814dadf5fa769d5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:2e:97:a5:4d:0c:48:15:9d:75:91:03:a1:
                    d4:07:c4:ce:b6:37:d5:7b:b2:84:46:84:da:49:4b:
                    70:d5:d0:96:40:e3:76:18:9d:a5:e9:68:5c:4a:65:
                    2b:40:c4:80:ae:ed:88:24:cb:48:3a:d2:b9:64:73:
                    b9:e8:69:94:e7:58:aa:8c:6d:76:09:94:27:b8:e0:
                    49:ad:e1:dc:9b:26:f2:61:ed:74:d0:20:54:c2:77:
                    4c:db:a9:73:b3:05:7b:49:54:24:de:a1:d9:8a:94:
                    88:36:75:62:2d:47:07:34:e5:16:ee:28:20:b7:dd:
                    81:44:f8:84:d1:79:6b:bd:cd:28:5a:fb:25:0b:96:
                    00:80:fc:77:34:b3:e4:ed:9f:9b:1c:46:eb:09:48:
                    44:10:c8:dd:bc:33:34:08:42:14:3f:a4:87:a1:cb:
                    c0:ce:35:7c:c7:cc:9c:bd:b5:e2:d2:e7:8b:82:ce:
                    e7:7f:c4:0d:a4:9f:55:a6:7e:b3:c5:1a:1f:28:f3:
                    09:af:80:8d:f7:6f:e5:46:db:94:f3:01:d3:1e:fc:
                    5b:0b:de:c1:23:79:06:92:78:72:74:94:03:8e:c4:
                    55:74:65:10:a2:c4:0c:67:51:bf:47:17:bf:1c:51:
                    3f:bb:d2:58:67:1b:e0:45:3b:4e:df:4e:9f:f8:60:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:F3:F3:AF:6E:38:23:2C:3F:60:4B:53:BB:29:8E:C6:4D:AB:FF
            X509v3 Authority Key Identifier:
                keyid:24:8E:14:29:6B:51:BF:25:C8:11:B0:33:7B:66:13:E9:B5:6D:05:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da49da4a1967abec3f02fc95ba51928148a5a9c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/21e94f473e743b244700342814dadf5fa769d5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/da49da4a1967abec3f02fc95ba51928148a5a9c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:2b:f5:07:60:6e:25:8c:05:5d:48:32:42:18:12:28:97:
         d9:96:70:76:d4:49:ef:c7:1d:8a:f1:d6:22:e0:e5:05:19:d6:
         7b:c7:cd:3a:2b:52:e9:f5:30:4d:99:a7:44:5e:0b:24:ed:f1:
         52:49:0a:a7:ad:a2:d7:cc:f7:45:cc:9c:07:1d:2c:b9:08:a5:
         6b:54:94:8b:9a:85:87:49:f9:e0:c2:7b:2d:6b:1d:09:c2:17:
         75:75:f9:b4:da:72:f8:45:a9:01:07:da:05:8a:ec:6e:00:c7:
         29:8d:00:98:c3:e4:f3:4d:0a:5f:8b:33:fe:4b:40:7d:3d:41:
         e0:4c:b9:60:9d:a2:6b:29:89:c3:3a:ec:51:5b:55:9c:65:dc:
         49:5e:ac:1c:04:fd:4e:58:5e:25:73:23:b6:31:54:f7:63:98:
         04:4b:74:36:3e:d0:d3:40:50:c6:92:9b:b2:e9:94:22:b4:cd:
         82:2e:b0:ec:20:d8:87:13:12:4a:6d:88:28:68:28:a8:f2:92:
         09:90:18:0d:60:76:af:4b:95:e7:62:29:c7:dd:fb:e4:fd:7a:
         f2:ca:8a:6f:72:ed:f8:ea:c0:ce:62:e1:94:6a:d9:9e:4d:8c:
         ac:48:97:9a:62:e9:ad:c1:2c:7c:ba:71:ce:70:27:25:19:09:
         89:96:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org