Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa
File:                     a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa (raw, json)
Hash identifier:          1bKoMPCyyvgxx9Tj3dpNgZf964UoL9rDkxXNTpYoQ94=
Subject key identifier:   86:FF:D0:5A:49:30:E6:FE:6C:52:AF:F3:2B:5B:74:C0:96:00:8E:FE
Certificate issuer:       /CN=40dd355863a64b49aaea56a333a078f4104009ff
Certificate serial:       0309
Authority key identifier: 30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa
Signing time:             Mon 17 May 2021 20:26:18 +0000
ROA not before:           Mon 17 May 2021 03:00:00 +0000
ROA not after:            Wed 17 May 2023 03:00:00 +0000
asID:                     266754
IP address blocks:        45.232.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40dd355863a64b49aaea56a333a078f4104009ff
        Validity
            Not Before: May 17 03:00:00 2021 GMT
            Not After : May 17 03:00:00 2023 GMT
        Subject: CN=a8f2031bd7eddc5c1bcad5d170061e5c830a5364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:ca:10:56:d1:30:47:f1:f5:89:44:2b:0f:
                    51:28:cc:c0:16:fb:ae:8a:c4:fe:6d:ac:b5:df:70:
                    3a:1a:bd:14:1f:ec:08:1c:0a:b5:f1:a3:b0:a2:f9:
                    ad:b1:57:bd:a1:5a:26:d0:c7:63:76:f5:57:83:dd:
                    a3:5b:31:99:16:1c:c8:bb:b5:46:a5:19:44:56:a3:
                    4b:fd:ca:3e:d2:ab:19:75:2d:df:36:00:9d:f2:bb:
                    db:57:fe:e8:71:bf:d4:db:b3:f4:2a:7e:6b:63:97:
                    d4:7c:bd:0c:c4:c7:f5:36:aa:a8:32:35:85:cd:c7:
                    8f:aa:32:4a:fe:38:27:13:30:39:19:e0:01:1a:e5:
                    bc:c6:a2:87:46:77:8d:3b:74:e1:06:2d:5d:e4:02:
                    dc:22:bf:82:8f:51:63:2d:26:06:47:40:56:12:8b:
                    25:86:22:48:6f:1e:24:2f:4d:75:9b:c7:b7:45:81:
                    83:b8:af:98:d5:f4:f5:6f:07:0e:b5:ad:88:d6:51:
                    40:3f:99:e8:31:2a:d2:6e:b6:01:5d:ee:de:ac:26:
                    58:b1:fc:46:3d:c6:f8:68:d6:ad:dd:a7:25:44:47:
                    d3:56:e0:da:38:43:63:85:bc:35:5d:07:e5:b6:71:
                    21:cf:a2:b2:05:69:90:95:1c:bc:57:d0:9c:60:f8:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FF:D0:5A:49:30:E6:FE:6C:52:AF:F3:2B:5B:74:C0:96:00:8E:FE
            X509v3 Authority Key Identifier:
                keyid:30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:e6:3d:54:a6:c5:0e:9d:02:ae:f7:0f:75:0a:7f:07:23:b1:
         9b:6a:5b:b7:f5:29:7f:66:a3:31:ad:44:20:bf:a8:35:d2:96:
         c7:de:4d:4f:77:4c:d1:13:87:4a:12:77:a8:70:aa:a4:b2:3c:
         8e:70:e6:09:58:a7:d8:5e:d1:d7:82:85:60:b9:8d:28:7b:08:
         47:56:ca:54:e5:e1:4c:03:6f:59:f2:47:43:b2:23:37:24:b4:
         f1:dc:f8:2c:7a:4a:1e:e9:f6:ce:44:8f:19:cf:73:14:18:5b:
         89:f1:b2:2e:51:ab:8e:87:c3:e7:a5:b2:2c:67:5e:f1:88:ef:
         f3:ca:2b:8b:de:63:a9:7e:35:cc:4c:f1:84:b4:e5:c4:d0:82:
         01:b1:71:db:8f:43:4a:9c:0a:ab:c4:77:c6:35:f0:61:02:2f:
         6e:ec:4b:54:e0:34:97:fb:1c:0d:4b:16:69:8a:d9:6f:fc:03:
         70:4d:f3:8b:c6:81:ae:33:9c:b8:7c:ec:f0:44:15:3d:20:28:
         8c:f4:28:d3:42:74:39:fb:78:d3:31:3c:b3:d9:81:2f:33:3c:
         2e:38:fc:4e:26:34:78:23:d2:27:f2:8a:4d:3b:c4:82:48:3b:
         f5:dc:47:0c:39:64:c1:ca:ce:13:4d:fa:4e:70:95:0c:ee:dc:
         43:a8:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org