Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/b8a5d577aa72d22ee60092ef67b8ba65e8f41eba.roa
File:                     b8a5d577aa72d22ee60092ef67b8ba65e8f41eba.roa (raw, json)
Hash identifier:          9Id1r/tWkIAj1lqb5n0lIYw4IebwJWtihGvcyBOqq80=
Subject key identifier:   B1:46:F3:F0:5A:24:48:B0:5A:9E:7F:28:FC:D8:2A:D6:98:4D:B1:0D
Certificate issuer:       /CN=d13e4d0d0c963a024a98b0007ab0fa0d334261f3
Certificate serial:       0A964D
Authority key identifier: F0:95:8D:9D:72:0D:36:22:A5:DB:FB:09:91:F3:6C:9B:C7:02:92:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d13e4d0d0c963a024a98b0007ab0fa0d334261f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/b8a5d577aa72d22ee60092ef67b8ba65e8f41eba.roa
Signing time:             Wed 25 Aug 2021 21:17:51 +0000
ROA not before:           Wed 25 Aug 2021 03:00:00 +0000
ROA not after:            Fri 25 Aug 2023 03:00:00 +0000
asID:                     269741
IP address blocks:        45.181.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693837 (0xa964d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d13e4d0d0c963a024a98b0007ab0fa0d334261f3
        Validity
            Not Before: Aug 25 03:00:00 2021 GMT
            Not After : Aug 25 03:00:00 2023 GMT
        Subject: CN=b8a5d577aa72d22ee60092ef67b8ba65e8f41eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:8a:a1:03:a3:9d:46:c6:a7:09:05:22:21:
                    59:5d:aa:37:67:42:1e:22:8b:3d:c3:32:34:dd:90:
                    e8:9c:fa:c4:37:ed:06:67:f5:45:10:6d:34:04:84:
                    0a:59:71:e6:a5:39:58:e3:f7:fc:48:7f:0a:02:65:
                    34:ca:40:1c:a1:8e:11:6f:73:ec:16:82:04:cb:37:
                    80:d9:e0:4b:70:b3:06:21:8b:9a:e3:7f:6a:4e:9b:
                    1f:c3:b9:f9:60:e9:e9:9d:97:f9:b3:22:4c:21:a2:
                    c7:5d:15:b3:e4:12:38:c1:83:28:e7:ca:82:24:24:
                    48:25:c1:8a:30:b8:39:12:7f:8f:91:1f:39:8c:81:
                    31:c4:dd:7b:88:bf:d8:f1:b4:ba:9a:89:27:9a:41:
                    4f:89:69:be:0a:cd:3a:c7:1a:e0:4b:93:22:44:f7:
                    2b:f9:bb:12:68:d1:f7:20:cd:b6:25:b0:8c:04:0d:
                    ad:e4:ad:4f:3d:28:47:c8:df:ce:0b:1b:81:b1:b7:
                    e4:a8:3e:d4:69:95:5a:7b:6f:aa:4c:27:97:d3:d2:
                    f2:37:a5:c8:0e:eb:25:96:6b:7c:a4:96:d8:a7:1f:
                    62:87:9d:bb:d0:ab:77:dc:d0:fc:e8:8f:27:fa:dd:
                    05:82:10:e5:75:b3:12:a5:df:54:78:1f:08:f2:48:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:F3:F0:5A:24:48:B0:5A:9E:7F:28:FC:D8:2A:D6:98:4D:B1:0D
            X509v3 Authority Key Identifier:
                keyid:F0:95:8D:9D:72:0D:36:22:A5:DB:FB:09:91:F3:6C:9B:C7:02:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d13e4d0d0c963a024a98b0007ab0fa0d334261f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/b8a5d577aa72d22ee60092ef67b8ba65e8f41eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/d13e4d0d0c963a024a98b0007ab0fa0d334261f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:52:e4:5e:d1:b5:85:2d:7f:5d:c2:6e:85:bd:e4:a5:98:
         06:4d:57:fb:b5:89:32:07:3d:1d:2a:6f:8a:c2:d9:c9:bc:ad:
         5f:95:e0:a0:2b:e1:da:1d:2f:21:cc:b7:51:3a:86:9a:32:f5:
         43:7f:1d:72:c1:3d:4a:ac:14:64:67:ab:89:6c:da:71:e5:3f:
         12:e8:4b:85:84:f8:db:cf:a1:d8:76:80:36:ba:ba:0f:4a:10:
         7a:4f:f2:a0:8d:9c:18:a7:27:eb:4a:f3:5c:a0:80:e3:46:a2:
         ee:22:33:fc:16:d8:46:31:f7:31:0b:d5:ce:4c:20:03:31:4d:
         6c:91:20:32:4c:01:73:8c:a1:32:c4:2a:b0:e2:89:e8:c9:35:
         80:22:a9:3b:11:99:12:ff:91:7f:05:73:70:4e:65:fb:49:b0:
         b0:22:6c:67:53:a7:2d:18:9e:62:96:43:96:76:c4:7a:f6:4c:
         5d:cc:5c:8d:17:83:94:a5:05:0d:33:12:7c:46:71:23:03:ee:
         96:b1:ab:d4:df:6e:50:e6:c2:4f:a3:d0:3b:5b:ed:ee:e7:cc:
         f5:92:cc:1e:db:42:08:3a:85:83:c3:7c:0c:1f:bb:a8:ac:43:
         6b:71:dc:00:f7:a3:c3:bb:ff:63:d0:24:5c:f1:f9:0d:c6:b5:
         00:46:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org