Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/38d32ef3a8951a71c9d7d920dd4e0780377b12c8.roa
File:                     38d32ef3a8951a71c9d7d920dd4e0780377b12c8.roa (raw, json)
Hash identifier:          JLkTh3eFy/4C8jEkYM9DQ3LZeNETk0pw2YUOvZjy3xI=
Subject key identifier:   25:77:5B:88:F7:58:C7:70:64:CE:21:DB:5B:D0:7F:5F:4D:EA:F9:56
Certificate issuer:       /CN=974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6
Certificate serial:       10684B
Authority key identifier: 4F:05:07:E1:F7:0B:8A:60:9C:EA:BA:80:43:03:39:C2:C9:D8:6D:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/38d32ef3a8951a71c9d7d920dd4e0780377b12c8.roa
Signing time:             Thu 07 Oct 2021 14:08:15 +0000
ROA not before:           Fri 16 Apr 2021 03:00:00 +0000
ROA not after:            Sun 16 Apr 2023 03:00:00 +0000
asID:                     266819
IP address blocks:        45.237.220.0/22 maxlen: 22
                          45.237.220.0/23 maxlen: 23
                          45.237.222.0/23 maxlen: 23
                          45.237.220.0/24 maxlen: 24
                          45.237.221.0/24 maxlen: 24
                          45.237.222.0/24 maxlen: 24
                          45.237.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075275 (0x10684b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6
        Validity
            Not Before: Apr 16 03:00:00 2021 GMT
            Not After : Apr 16 03:00:00 2023 GMT
        Subject: CN=38d32ef3a8951a71c9d7d920dd4e0780377b12c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:5c:91:d5:ad:e8:df:84:2a:06:c2:d6:0d:
                    7a:21:6b:d0:e0:41:6c:d4:39:54:91:6f:54:2d:6f:
                    f3:38:bd:67:f1:32:30:52:42:95:5b:f3:ee:9b:d0:
                    1d:b9:53:94:64:a9:08:e9:6a:96:32:53:1e:58:b6:
                    a1:21:a3:02:f0:e5:fd:27:3d:e1:17:99:4d:3d:65:
                    77:66:99:c7:c4:fa:0f:ad:43:01:b7:29:bb:c8:28:
                    ad:ae:7d:60:b1:24:29:9d:a5:33:e5:8d:11:7b:81:
                    47:13:30:f3:17:95:8c:09:0e:6c:54:85:24:0d:31:
                    85:61:f7:6b:81:ce:4d:5c:d3:ea:95:34:5b:19:60:
                    69:a5:50:e3:94:16:63:7f:ab:84:d8:ce:f8:53:62:
                    a3:33:6f:ce:c5:ad:fe:2a:cb:14:7a:b2:0d:9d:5c:
                    a8:32:5f:42:62:6c:ae:f3:b9:90:f0:aa:24:94:85:
                    4b:d2:d6:44:19:5f:b8:05:83:e7:e3:b8:65:a3:55:
                    46:0c:29:d4:8c:3f:24:6e:e7:7d:20:c5:83:66:68:
                    74:7f:bc:a1:c0:c2:8f:9a:61:5e:05:62:9f:09:ff:
                    9d:b2:fb:f5:c0:cc:23:da:c5:5b:09:91:15:3f:3a:
                    85:b1:f0:68:51:50:42:a3:6d:c2:77:a8:15:68:8f:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:5B:88:F7:58:C7:70:64:CE:21:DB:5B:D0:7F:5F:4D:EA:F9:56
            X509v3 Authority Key Identifier:
                keyid:4F:05:07:E1:F7:0B:8A:60:9C:EA:BA:80:43:03:39:C2:C9:D8:6D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/38d32ef3a8951a71c9d7d920dd4e0780377b12c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ee3e6fa-5aa5-4ab5-82ec-fee6fd610c6b/974b813962a95abb3c0dd3bd9f8ab0504ebe2ac6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:95:d2:f3:13:74:62:7c:9e:16:1a:96:d2:d1:ae:49:47:3b:
         cd:c6:8d:a5:83:2e:1a:50:16:7f:98:1c:21:d8:97:89:6c:f3:
         24:fa:3e:75:50:67:8c:66:f7:7e:3f:61:86:0a:aa:df:33:43:
         fa:2b:c1:83:43:bb:5b:c3:57:1d:1a:59:af:eb:49:8d:05:ee:
         32:7c:4a:39:1e:55:b3:80:7b:74:c9:f7:ea:70:47:e6:02:ca:
         7d:55:ef:99:1a:a8:d5:a7:0a:82:34:bb:0a:cc:40:07:50:66:
         d8:41:03:cc:a1:2a:7c:10:c5:64:04:00:05:ac:62:96:7e:3d:
         5a:35:03:88:a1:0c:46:22:24:c7:2f:8e:ed:7b:49:01:7e:3f:
         42:b0:0f:d8:17:9e:85:59:35:51:c9:d8:06:77:3c:d9:b1:49:
         39:cb:6b:ca:5f:0e:f3:81:b9:d4:1b:be:74:69:4d:34:29:b4:
         87:2c:cb:90:8b:25:02:2e:7b:22:72:81:fa:15:93:17:19:1a:
         72:1c:03:57:3e:d2:31:c9:a0:e8:e8:f9:1a:72:ec:31:55:c9:
         97:ed:41:aa:c8:da:0c:72:7b:da:53:84:ee:00:f2:36:05:37:
         1e:4c:13:9d:35:a5:18:e3:c6:8d:aa:c1:a4:d2:7e:7f:e8:04:
         48:df:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org