Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/691fa1622b1113d96c1e6424433713c5d932d01d.roa
File:                     691fa1622b1113d96c1e6424433713c5d932d01d.roa (raw, json)
Hash identifier:          vgbzajLdmP20wII8zHTDQpNAqiQZEejAOowY0qNvK3c=
Subject key identifier:   01:CB:AC:5E:AC:22:B2:1F:DE:D3:FB:0A:BA:58:23:CE:13:F1:AC:2F
Certificate issuer:       /CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
Certificate serial:       064280
Authority key identifier: D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/691fa1622b1113d96c1e6424433713c5d932d01d.roa
Signing time:             Wed 24 Mar 2021 14:34:55 +0000
ROA not before:           Wed 24 Mar 2021 14:34:55 +0000
ROA not after:            Tue 24 Mar 2026 14:34:55 +0000
asID:                     266832
IP address blocks:        45.238.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410240 (0x64280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
        Validity
            Not Before: Mar 24 14:34:55 2021 GMT
            Not After : Mar 24 14:34:55 2026 GMT
        Subject: CN=691fa1622b1113d96c1e6424433713c5d932d01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:07:71:fc:57:e1:a3:5f:02:8e:15:de:25:
                    77:ed:74:e5:c1:00:fd:ef:54:00:7f:c7:14:4a:d5:
                    79:3d:d0:87:7a:c4:bd:e2:e0:70:67:81:a0:79:51:
                    d5:d2:52:6c:7b:3d:0b:de:b8:0f:69:e9:a6:a6:5d:
                    c5:07:80:14:3a:9e:b7:be:ee:ab:13:e3:1e:16:03:
                    8d:1a:94:5c:d2:9d:1e:1d:70:ee:e7:f0:f5:57:d6:
                    4b:e4:83:f5:a1:d4:ae:b7:19:10:09:af:c9:28:a1:
                    7e:0e:cb:bf:2d:37:2a:b4:7c:79:77:52:9e:86:79:
                    e3:45:b6:ec:bd:0e:ec:06:5b:0e:b5:e3:17:b1:0d:
                    a7:d0:63:03:18:bf:a4:0c:f7:39:5f:77:3e:d1:c7:
                    27:67:42:ef:d9:18:59:4f:f9:c9:1b:12:81:52:2b:
                    73:bf:1f:13:e5:28:cf:e3:17:4f:42:1a:c6:dc:88:
                    83:3d:40:c4:1d:de:cc:f4:f3:4c:23:c6:de:13:ff:
                    79:f4:c0:b3:e6:6d:8f:db:03:84:03:e9:46:94:68:
                    2f:98:46:fb:60:a5:e6:df:7b:f6:2c:95:54:61:ab:
                    33:dc:bd:51:b9:45:55:6c:75:dc:14:83:99:38:47:
                    12:54:95:e4:da:bb:4e:25:20:bc:2d:90:4e:db:51:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:AC:5E:AC:22:B2:1F:DE:D3:FB:0A:BA:58:23:CE:13:F1:AC:2F
            X509v3 Authority Key Identifier:
                keyid:D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/691fa1622b1113d96c1e6424433713c5d932d01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:6b:b4:b5:d9:73:ed:68:ec:d0:58:99:7f:c5:74:98:89:
         8d:39:83:03:fe:f1:58:c1:75:4b:8b:a8:55:da:d7:ea:17:3b:
         b5:4c:36:66:71:ee:97:ed:b8:1b:67:83:9a:4b:69:60:88:9b:
         5e:02:44:91:07:65:82:bc:cf:1f:28:b0:75:5a:92:5a:d2:d8:
         19:fb:cc:97:8e:55:22:65:8a:8f:79:81:84:2a:f3:39:bc:84:
         7f:8b:cc:1e:e2:fb:85:93:e8:09:79:18:a5:df:14:76:70:3f:
         b8:3d:e8:0e:51:2a:80:c5:51:ce:51:9d:d5:a0:5d:19:84:50:
         d6:ee:35:af:73:2a:97:2a:26:80:4f:d0:f4:b9:dc:95:7e:fb:
         f9:ff:7e:fa:fd:34:e1:6c:82:fa:a3:0a:1f:de:4c:7c:89:d9:
         19:e6:df:6c:43:8d:90:46:fb:4a:8f:3b:a7:c9:c0:f2:9b:97:
         6f:53:99:10:c4:5e:63:31:b7:6b:f8:e5:19:56:92:25:e1:65:
         d9:c4:95:a2:9c:84:dd:65:64:86:68:fd:65:c9:a3:5a:31:17:
         dd:f9:fe:49:fc:f0:b6:22:ac:4e:9c:05:51:ec:f8:fd:01:a2:
         1e:db:c0:10:52:89:a6:d8:c8:62:fe:73:4f:db:fc:3a:c3:53:
         bd:ce:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org