Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/5329e03b380be140d7953f19b0663cf303260217.roa
File:                     5329e03b380be140d7953f19b0663cf303260217.roa (raw, json)
Hash identifier:          9Cd6CRFdz0C07rRfaZRFxn62b7N5LYwIOJ9QkMa3mUI=
Subject key identifier:   2B:E2:75:E9:D2:B1:A4:58:EC:53:22:FE:3F:3A:37:86:34:43:10:60
Certificate issuer:       /CN=f5a6fc62579b19a2435b117b3d5b39a73d68bc1f
Certificate serial:       0C3628
Authority key identifier: D1:93:C5:2D:59:93:7A:5D:CE:B2:8B:41:30:C1:2E:27:F2:5D:6F:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5a6fc62579b19a2435b117b3d5b39a73d68bc1f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/5329e03b380be140d7953f19b0663cf303260217.roa
Signing time:             Wed 24 Mar 2021 22:52:19 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     267809
IP address blocks:        45.173.196.0/24 maxlen: 24
                          45.173.197.0/24 maxlen: 24
                          45.173.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800296 (0xc3628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a6fc62579b19a2435b117b3d5b39a73d68bc1f
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=5329e03b380be140d7953f19b0663cf303260217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:cd:0e:74:ea:96:7d:a0:6e:59:05:bc:1f:
                    3d:2d:fd:3b:68:5b:2a:40:fb:bd:cb:49:78:7e:e4:
                    7e:a7:94:9a:3e:7f:3c:1b:13:be:a6:e9:82:60:cd:
                    a3:d6:ef:fe:5f:48:f5:1e:50:ff:f5:f4:eb:34:b3:
                    6a:f8:d2:d4:62:e9:ab:3f:0f:a9:30:f2:3c:9d:9b:
                    c9:09:e9:92:96:55:fb:97:42:ce:3b:8a:2d:b8:e2:
                    ec:72:5f:e1:ab:6c:12:99:72:5b:f8:35:2c:d4:4b:
                    7e:0c:69:97:29:97:46:86:92:03:0d:fd:e1:b6:31:
                    ce:32:ee:68:de:23:82:d3:03:44:71:5c:c8:a2:e1:
                    b2:99:75:a4:8b:cf:b9:62:5c:c6:7b:4b:c8:c3:b0:
                    49:27:5c:24:05:58:9a:69:14:ef:a8:4d:8e:b5:d4:
                    b9:3b:53:62:7c:6a:aa:01:2a:0a:12:3f:d0:c5:fa:
                    82:13:b9:e2:4f:37:fc:06:c4:da:a0:eb:62:c8:a5:
                    7a:06:12:8f:c7:7b:c2:bc:21:e3:d4:1b:ab:bc:54:
                    18:02:2e:73:73:f4:d8:76:fd:1a:d6:d0:39:25:55:
                    af:41:4f:4f:49:f6:40:4a:fa:0d:5d:89:98:70:08:
                    4b:f0:da:ed:61:7f:af:85:91:3a:b8:08:ad:07:08:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E2:75:E9:D2:B1:A4:58:EC:53:22:FE:3F:3A:37:86:34:43:10:60
            X509v3 Authority Key Identifier:
                keyid:D1:93:C5:2D:59:93:7A:5D:CE:B2:8B:41:30:C1:2E:27:F2:5D:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5a6fc62579b19a2435b117b3d5b39a73d68bc1f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/5329e03b380be140d7953f19b0663cf303260217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/f5a6fc62579b19a2435b117b3d5b39a73d68bc1f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.196.0/23
                  45.173.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:56:a9:9d:b0:f0:3c:0b:34:b1:d3:dc:6a:89:be:25:0c:f2:
         17:28:43:e0:24:80:8d:b6:f4:0a:25:1f:1f:3a:0b:ea:43:f9:
         d6:88:52:5c:55:db:36:cf:03:34:41:35:59:18:17:a5:c1:55:
         4a:bf:7b:5d:5b:6e:02:99:0e:cc:97:83:28:62:38:86:19:32:
         b3:ac:dc:15:51:49:ca:53:51:d9:0f:3b:ab:4b:43:da:71:25:
         72:8a:7e:f8:ba:56:8d:e7:dc:37:f6:f9:5b:06:95:89:2b:9f:
         33:e3:8b:26:6f:03:15:19:9c:c6:0c:1b:85:23:a6:c4:c7:22:
         3b:86:47:6b:95:58:a7:da:3d:35:03:a4:8b:42:74:3e:ac:42:
         d7:64:6a:5d:32:c1:6a:18:05:d7:32:7e:b9:ac:14:91:42:e5:
         cc:95:88:7d:09:7c:c1:a0:f8:0b:a3:11:fe:82:1e:9d:e5:18:
         9f:50:cd:72:2f:fc:74:73:c3:d1:c3:af:27:77:97:44:0e:ce:
         36:7b:3d:20:84:8a:7f:4b:7b:b3:02:63:2f:25:26:cb:7b:bb:
         c6:3c:57:bf:bc:e0:36:56:72:9f:0b:45:13:2b:5f:a5:d9:23:
         03:d0:17:84:14:0a:fc:1a:35:21:1c:59:86:f4:80:a1:fa:49:
         09:eb:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org