Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/bd1d6efc15c08a4b724381a440db25ec70e713df.roa
File:                     bd1d6efc15c08a4b724381a440db25ec70e713df.roa (raw, json)
Hash identifier:          yjM7WnSU0SXx+Iy8SePyTvkzmjZdVRIHWzHAs4ztCFQ=
Subject key identifier:   0E:CE:3A:DD:46:F2:60:84:F3:6F:7D:33:23:C6:13:24:67:D2:41:6A
Certificate issuer:       /CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
Certificate serial:       0CDDC2
Authority key identifier: 8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/bd1d6efc15c08a4b724381a440db25ec70e713df.roa
Signing time:             Wed 24 Mar 2021 14:33:59 +0000
ROA not before:           Wed 24 Mar 2021 14:33:59 +0000
ROA not after:            Tue 24 Mar 2026 14:33:59 +0000
asID:                     265851
IP address blocks:        45.225.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843202 (0xcddc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
        Validity
            Not Before: Mar 24 14:33:59 2021 GMT
            Not After : Mar 24 14:33:59 2026 GMT
        Subject: CN=bd1d6efc15c08a4b724381a440db25ec70e713df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:de:20:65:74:60:86:12:b4:b8:22:a0:cc:
                    a3:6d:49:4b:9d:c3:4b:90:d5:39:ad:cf:65:d4:60:
                    c1:ea:f6:e4:d0:de:33:73:f5:b9:ea:9a:f1:54:24:
                    a0:b7:b8:a7:9e:56:07:9f:fb:e0:e5:06:af:a4:74:
                    6d:6c:c3:6a:06:38:db:e0:4e:1a:72:c9:ee:97:c8:
                    40:21:f2:47:ab:93:16:ac:e7:48:e1:25:e7:97:54:
                    fb:01:49:3d:39:da:db:4f:6c:b2:78:91:13:7e:6e:
                    37:ac:84:ba:d6:f4:28:36:28:82:45:12:c3:b7:1b:
                    32:89:83:a9:85:a7:e1:c6:0a:58:09:56:8f:9e:17:
                    41:04:31:4f:e3:22:6b:13:93:da:15:83:e8:4a:28:
                    55:a7:f9:3c:c1:ae:b0:a9:3d:0a:a0:62:65:c6:a5:
                    f8:f3:21:28:25:3e:a4:08:77:fa:f1:a9:e4:00:59:
                    78:a4:d3:eb:ca:4b:3b:ce:14:ef:ce:8c:e7:99:aa:
                    35:3a:3c:01:ba:e3:d9:6e:c0:bf:25:0e:04:e3:59:
                    43:0b:f1:42:d6:24:f1:77:fc:30:33:ee:c5:72:f3:
                    9e:7f:1c:05:a4:21:56:60:2b:ea:66:a0:0b:1a:1b:
                    7e:62:1e:7e:1a:e3:96:48:9d:77:b3:fb:45:7d:88:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:3A:DD:46:F2:60:84:F3:6F:7D:33:23:C6:13:24:67:D2:41:6A
            X509v3 Authority Key Identifier:
                keyid:8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/bd1d6efc15c08a4b724381a440db25ec70e713df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/f568e289143efd5bc87b265db5fbd7741f1aaab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:03:ae:0f:ca:12:58:fb:4a:e5:c4:87:e3:d3:e6:db:e9:9a:
         1d:98:f8:68:a1:0c:8a:d3:4f:25:bd:4f:95:0d:0b:84:b8:aa:
         a9:91:49:bd:bb:5d:06:5f:a4:30:c8:c5:a0:6b:09:c2:6c:cf:
         5b:1d:7e:4c:e4:58:8b:94:ee:c9:0f:36:84:a5:59:df:f3:b0:
         a7:9b:83:75:c0:69:0b:85:fd:c3:4a:f8:08:d5:3a:1d:88:89:
         4b:19:93:02:74:54:14:1f:4b:db:db:e9:d1:f2:bf:db:95:f0:
         1c:34:f9:dc:21:bd:ae:b0:93:ba:1d:35:27:eb:4d:3f:06:7a:
         c8:f9:fc:70:64:9d:0f:8d:54:79:3b:c2:e8:c8:84:c6:17:5e:
         ef:42:17:98:05:da:78:fb:ca:f0:3d:83:b0:5a:97:a8:f3:ab:
         e6:5b:ef:59:1b:75:78:a7:60:68:69:70:8f:dd:59:8e:01:e5:
         a7:48:75:12:ac:38:6d:ac:62:f2:ca:a7:cf:39:e2:b9:b9:7f:
         48:81:41:05:bb:55:06:16:e3:27:ea:86:a1:87:cb:f9:a9:52:
         d9:e2:8b:7a:73:2f:1d:16:d0:71:f0:c2:e4:59:c4:b2:f9:3c:
         c2:08:ea:18:36:48:ac:48:fe:c3:88:60:e8:46:59:9b:16:bf:
         80:a8:90:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org