Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa
File:                     ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa (raw, json)
Hash identifier:          +wPs4Fss0PGFufRwv5zsRd2+jXsRen35OJRWf6VVW/Q=
Subject key identifier:   AC:28:05:DB:CA:24:A0:34:5B:28:BC:89:E2:24:FB:E3:F4:BA:32:19
Certificate issuer:       /CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
Certificate serial:       02B01B
Authority key identifier: D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa
Signing time:             Tue 15 Feb 2022 18:43:52 +0000
ROA not before:           Sat 06 Nov 2021 02:00:00 +0000
ROA not after:            Mon 06 Nov 2023 02:00:00 +0000
asID:                     265587
IP address blocks:        45.175.236.0/22 maxlen: 24
                          2806:33c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176155 (0x2b01b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
        Validity
            Not Before: Nov  6 02:00:00 2021 GMT
            Not After : Nov  6 02:00:00 2023 GMT
        Subject: CN=ed3e08cb90c95266ecb89d0708babbfe2908d1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:d1:48:59:1c:27:2f:8f:3b:51:3a:da:69:
                    63:8f:a8:d9:1b:7d:91:b8:93:fd:9d:41:5b:20:44:
                    6f:27:08:08:78:34:d4:ca:86:36:2e:8b:36:f9:60:
                    b0:06:f3:10:10:a0:a1:ea:9b:82:36:d1:4f:27:6b:
                    02:d5:54:21:26:0e:4f:83:87:47:91:45:3e:f6:a1:
                    64:59:6a:e4:d4:55:87:7b:e9:12:7a:73:9a:ff:03:
                    39:af:f4:2e:25:7b:f9:32:32:46:9f:68:8f:c2:3e:
                    d3:1a:80:62:08:4b:0a:2e:a0:90:4a:6e:c4:47:f8:
                    7b:44:9d:6d:18:fb:10:9b:9c:76:fa:6f:81:3c:3a:
                    59:9f:d9:b8:96:62:1c:27:aa:98:59:03:6b:51:d8:
                    a3:d6:d8:26:38:76:91:0d:36:70:b4:ef:b7:78:a1:
                    83:28:d4:b2:80:ce:a8:34:1b:a8:64:92:da:1a:14:
                    1b:2f:07:de:0f:eb:76:b2:76:67:e4:42:56:82:4c:
                    c6:83:0b:1f:4b:4f:ce:f9:3d:bb:26:97:b8:e2:6c:
                    59:5a:07:b0:94:be:10:d2:3f:05:95:23:79:70:14:
                    e5:dc:9b:8b:71:5a:12:47:54:d5:a2:a2:d4:40:a7:
                    d4:9c:bf:e8:2d:7d:86:20:9c:c6:66:f2:80:2a:63:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:28:05:DB:CA:24:A0:34:5B:28:BC:89:E2:24:FB:E3:F4:BA:32:19
            X509v3 Authority Key Identifier:
                keyid:D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.236.0/22
                IPv6:
                  2806:33c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:2a:b3:de:d1:a6:b7:62:ee:0b:e2:66:1a:ac:e2:49:15:
         e5:aa:67:d3:71:29:9a:f4:29:3b:0c:e1:7e:0b:47:47:95:26:
         53:3e:2f:c5:f3:c8:9d:3d:fa:b6:df:09:23:8a:51:a7:37:dc:
         8f:9b:3e:3a:94:9b:27:d9:2f:7b:0d:a3:d1:e8:1b:43:60:b8:
         d2:ec:62:60:75:69:ef:de:f6:74:94:df:7c:89:16:34:50:40:
         26:ce:16:5a:3e:14:35:d5:6b:04:b5:60:26:8b:ed:78:4e:7c:
         25:fb:82:c0:db:f1:21:72:65:45:bc:5e:9d:64:0e:65:cf:1a:
         e6:26:af:ca:82:21:b6:77:81:c1:f0:bc:24:aa:59:ed:90:b0:
         98:7a:9b:e6:f6:74:2e:6a:4c:07:c0:60:a1:77:2d:39:6a:9f:
         79:fd:85:a5:30:cf:c5:a1:ea:b2:14:a6:cf:7a:d1:91:ae:60:
         9a:02:d4:45:d2:82:d1:15:76:59:63:72:7c:28:1b:ad:95:5f:
         dc:d4:0a:c1:aa:7a:6e:f1:43:14:02:c2:da:19:27:93:e9:d3:
         4b:9b:72:3b:db:3e:60:9a:a3:c0:08:90:78:54:35:fa:18:1a:
         32:ce:25:ca:83:80:fd:3d:b7:80:b9:d6:2e:31:13:6f:af:a5:
         4b:bc:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org