Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/c1d0d22e50623ccc3741861aa741bff76858b000.roa
File:                     c1d0d22e50623ccc3741861aa741bff76858b000.roa (raw, json)
Hash identifier:          CZfRBq0vM6rjD6hZv20iw/yixNgGlCg87M2nSiP47do=
Subject key identifier:   0F:16:5C:AD:F9:59:ED:6F:2B:5F:AF:27:F1:AD:79:3E:D6:9C:26:2A
Certificate issuer:       /CN=c762b73a56d901ebf3f160eb23df76c2b3b95544
Certificate serial:       07CDC8
Authority key identifier: 44:B8:68:2A:AB:84:8A:3A:3D:5B:36:84:E0:03:5C:1A:09:6C:77:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c762b73a56d901ebf3f160eb23df76c2b3b95544.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/c1d0d22e50623ccc3741861aa741bff76858b000.roa
Signing time:             Wed 24 Mar 2021 14:30:38 +0000
ROA not before:           Wed 24 Mar 2021 14:30:38 +0000
ROA not after:            Tue 24 Mar 2026 14:30:38 +0000
asID:                     269933
IP address blocks:        45.191.192.0/22 maxlen: 24
                          2803:8ae0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511432 (0x7cdc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c762b73a56d901ebf3f160eb23df76c2b3b95544
        Validity
            Not Before: Mar 24 14:30:38 2021 GMT
            Not After : Mar 24 14:30:38 2026 GMT
        Subject: CN=c1d0d22e50623ccc3741861aa741bff76858b000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:bb:a2:0b:6a:01:66:98:80:a4:bf:94:3e:
                    02:9d:c2:03:bb:73:4c:9d:56:5f:98:fd:52:d8:52:
                    f2:92:45:0b:a5:6a:19:15:f2:ce:eb:67:f9:30:29:
                    94:b3:e6:8d:63:a0:ec:16:b0:51:31:92:ad:09:46:
                    91:3d:ed:a7:92:28:46:c7:1d:ac:d9:cd:a4:49:5d:
                    38:fa:4b:56:3a:5f:70:0e:e1:f1:be:8e:dd:c3:ee:
                    5f:4b:3d:e7:14:ac:8c:bb:33:27:16:ca:70:98:51:
                    54:3f:d6:97:27:de:de:fd:5f:75:5b:f1:96:6d:86:
                    ce:63:10:a5:6a:d6:ce:e8:6f:4c:6f:c4:a4:da:30:
                    31:6e:55:ef:b4:73:83:df:d5:37:ee:e6:ed:cd:96:
                    22:a1:b5:87:b4:4c:b5:0c:31:2d:5f:b6:0e:e5:fd:
                    6d:98:8b:2b:28:61:62:cf:46:2c:07:aa:6d:e5:7d:
                    2b:75:0e:a9:3a:86:b6:9f:83:e1:27:bc:77:72:e0:
                    d1:d3:90:0b:07:64:e4:db:e1:05:71:3f:0e:41:a1:
                    c0:43:24:44:20:3d:3f:e5:f0:ea:25:1a:16:7e:c9:
                    56:0b:7a:1c:41:1b:9e:1f:8f:51:d6:cb:cc:c4:2e:
                    7d:d1:f5:7b:74:6c:e7:f5:8f:5c:49:80:9b:9d:39:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:5C:AD:F9:59:ED:6F:2B:5F:AF:27:F1:AD:79:3E:D6:9C:26:2A
            X509v3 Authority Key Identifier:
                keyid:44:B8:68:2A:AB:84:8A:3A:3D:5B:36:84:E0:03:5C:1A:09:6C:77:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c762b73a56d901ebf3f160eb23df76c2b3b95544.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/c1d0d22e50623ccc3741861aa741bff76858b000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/c762b73a56d901ebf3f160eb23df76c2b3b95544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.192.0/22
                IPv6:
                  2803:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:96:fc:52:d8:1d:b9:61:6c:48:96:16:84:35:fd:10:bd:
         9c:09:b0:1b:bd:42:43:15:3b:71:68:95:7f:52:32:36:63:02:
         65:67:9f:eb:2a:52:0a:3a:8c:a4:04:9e:b7:63:bf:cd:4f:ea:
         35:3f:23:53:43:83:e3:89:21:6e:5b:d5:16:06:98:42:fa:f9:
         ea:18:0b:12:48:64:5a:62:5a:e6:17:7c:8c:37:0a:f5:ae:f8:
         59:a6:3d:e5:a0:bc:27:f9:55:ec:db:f1:d3:ba:af:9b:46:f1:
         f7:cb:b7:4e:7a:2c:a1:31:88:19:a3:8c:fc:74:ef:c7:04:6b:
         de:4c:15:35:b1:27:07:6a:0c:98:a2:32:4d:de:08:0c:b4:98:
         ab:6b:c4:92:a5:05:1d:93:96:be:02:f7:b6:0f:81:3d:ee:4e:
         35:72:44:40:95:46:fd:2a:94:3a:87:f2:27:25:18:6b:c6:f9:
         a2:54:75:2c:e8:99:f6:01:e0:6b:23:b5:2e:7c:63:d9:da:0f:
         50:ed:6d:54:66:6a:98:50:b0:bc:32:d0:da:44:73:74:3e:a1:
         00:e5:23:68:73:a4:86:55:0a:b4:64:4d:0d:7a:a8:b1:54:f6:
         99:4a:4c:8e:8f:68:ff:7c:52:2f:0e:13:16:42:63:2d:40:6c:
         29:2e:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org