Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa
File:                     ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa (raw, json)
Hash identifier:          /OS3FoIBLWaJSj3IuV2bcXElgwVjlbcDfwoxxao8nhM=
Subject key identifier:   EF:46:D4:D7:3E:A1:6F:C6:E4:5C:21:4F:4E:29:25:70:90:B5:6E:BA
Certificate issuer:       /CN=68daa985947750b9a7aa4090e0e120abbd088f1b
Certificate serial:       0360
Authority key identifier: 79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa
Signing time:             Thu 30 Sep 2021 17:39:49 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Sat 30 Sep 2023 03:00:00 +0000
asID:                     265849
IP address blocks:        45.224.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68daa985947750b9a7aa4090e0e120abbd088f1b
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2023 GMT
        Subject: CN=ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:1c:08:36:b0:66:d3:a7:1f:11:cb:5a:da:
                    b5:fd:b4:de:eb:29:ee:f1:ab:6b:3a:35:a6:0c:5e:
                    f7:bd:ea:63:e4:3f:a8:27:eb:4e:04:c8:bb:f1:16:
                    3a:48:e3:88:35:8e:25:78:e2:c9:71:41:62:05:63:
                    47:63:7c:a1:51:c9:66:f9:87:c2:7c:eb:c0:cd:8c:
                    5b:e3:06:da:77:97:72:ed:90:80:74:af:71:3f:b2:
                    df:c8:08:88:ce:e8:ed:4e:59:1e:fd:cf:a4:61:12:
                    1c:58:8a:66:fc:12:ab:e8:b7:73:3f:f7:75:69:db:
                    d1:0a:a4:a9:1b:8c:e2:df:73:46:aa:48:7f:08:d7:
                    24:73:97:73:9f:f2:3f:76:d5:2c:92:11:fb:77:63:
                    7d:0d:39:3c:31:97:0d:9b:d9:78:80:9c:78:89:ac:
                    b6:e3:23:6d:ea:e9:a5:fb:1c:72:69:77:20:5d:98:
                    db:3b:5c:eb:f8:e5:32:cd:1b:52:18:84:ed:e3:16:
                    20:d0:6d:4e:c9:f9:be:d5:8b:63:a8:05:16:54:92:
                    c7:26:21:2d:4d:71:79:e7:94:fc:50:96:f4:28:68:
                    f7:8a:ee:ac:40:b8:8e:fc:3c:60:b3:a9:a2:2b:ee:
                    5e:4b:3c:cc:d6:09:e4:31:4a:9d:99:80:72:a6:27:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:D4:D7:3E:A1:6F:C6:E4:5C:21:4F:4E:29:25:70:90:B5:6E:BA
            X509v3 Authority Key Identifier:
                keyid:79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:f4:f5:7c:59:79:76:93:c6:a0:41:88:33:d0:8c:58:65:
         14:71:53:83:75:dc:d3:d4:e0:a6:d5:51:e9:24:84:b0:92:0c:
         10:c2:3c:d3:d6:c2:e1:7a:c6:0d:c5:c7:b9:0d:13:62:16:9c:
         33:98:c0:40:b0:68:55:a5:9a:b2:d0:d7:a7:46:99:38:b6:74:
         59:51:1d:e8:7b:fc:b0:9c:ba:5d:9c:26:9b:3d:a5:14:d2:ff:
         c2:49:f8:f8:63:e4:ea:ec:a0:12:a2:24:37:8e:2a:43:b2:3f:
         99:e9:86:cb:56:1e:1e:39:73:54:ef:3c:66:12:43:a8:c9:f7:
         1f:75:0b:d6:88:1c:b2:a8:02:00:f7:a0:51:a9:85:e0:ed:60:
         d4:d9:7c:b4:5a:43:e3:08:f0:8c:f3:0f:0c:54:ce:71:71:7d:
         c5:2a:d4:ef:c2:a3:d8:97:93:63:2a:76:c0:ad:9d:2a:c7:a7:
         2c:44:04:f5:11:32:12:e7:69:78:ac:64:86:7c:80:e3:47:3a:
         0b:6e:84:eb:b3:f3:58:58:e9:06:2c:8b:0a:9c:ec:4b:30:51:
         c0:c5:ed:98:63:75:f3:ce:29:bd:61:28:fd:3f:86:93:f5:95:
         c3:3b:fd:c3:43:24:59:4d:49:0f:5c:cf:41:70:83:77:d9:70:
         a3:8b:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org