Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/13b998294869628fc9b6c4a17b2ac4552fbdb463.roa
File:                     13b998294869628fc9b6c4a17b2ac4552fbdb463.roa (raw, json)
Hash identifier:          0HxsvvPr+1J/Y8Z6pAhThl6H58Ee3NkLJJmfPYxAqkw=
Subject key identifier:   29:60:AA:00:D6:13:40:88:5B:7F:28:0A:1C:3E:D2:E8:38:8B:16:A2
Certificate issuer:       /CN=892a2462df3541f86912f2af9707f9b6f589eb8a
Certificate serial:       08F534
Authority key identifier: 89:65:DD:28:2C:F1:5A:E0:FF:EB:AF:9C:28:46:ED:E3:DA:27:35:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/892a2462df3541f86912f2af9707f9b6f589eb8a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/13b998294869628fc9b6c4a17b2ac4552fbdb463.roa
Signing time:             Wed 24 Mar 2021 14:35:34 +0000
ROA not before:           Wed 24 Mar 2021 14:35:34 +0000
ROA not after:            Tue 24 Mar 2026 14:35:34 +0000
asID:                     267810
IP address blocks:        45.172.178.0/23 maxlen: 23
                          45.172.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587060 (0x8f534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892a2462df3541f86912f2af9707f9b6f589eb8a
        Validity
            Not Before: Mar 24 14:35:34 2021 GMT
            Not After : Mar 24 14:35:34 2026 GMT
        Subject: CN=13b998294869628fc9b6c4a17b2ac4552fbdb463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:38:62:67:c3:6a:9d:15:b7:78:13:6f:5e:
                    e7:2d:c8:cc:88:96:c8:47:3b:90:22:8f:76:00:cc:
                    2e:91:09:52:66:3b:c9:d8:93:e5:60:a2:77:7a:48:
                    b8:f1:d6:99:f6:54:fb:10:2d:f7:86:43:6d:fa:d6:
                    94:d5:5b:d0:20:a9:ff:d2:8d:02:1d:99:49:ca:55:
                    52:de:97:25:8c:dd:86:44:3f:6e:4e:b3:e5:1e:59:
                    56:06:2c:b2:42:b9:8e:a9:cf:fb:72:95:49:5c:38:
                    a7:14:c9:57:75:75:df:83:f8:d3:12:2e:f9:12:81:
                    86:e9:49:11:57:7e:ac:b5:50:fe:9f:ca:97:34:be:
                    44:1b:21:be:0b:21:fa:14:9c:f1:aa:2d:0d:2e:81:
                    c0:7f:82:52:59:5b:40:1c:58:91:cd:0e:1f:c3:06:
                    66:6f:51:f0:c9:71:29:22:01:42:d0:c6:14:75:2e:
                    6b:60:73:bc:f6:9b:13:b5:2c:cf:18:f0:43:dd:1d:
                    2d:39:8c:15:b6:e5:02:d9:94:16:52:9a:89:53:62:
                    4e:d3:24:04:26:8c:a2:75:d2:e3:d0:19:af:20:3b:
                    6f:0c:c6:68:57:28:0f:b2:7f:9c:ff:80:9e:96:95:
                    f1:0b:32:0d:b4:be:7b:4c:d6:7b:10:1e:74:96:d9:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:60:AA:00:D6:13:40:88:5B:7F:28:0A:1C:3E:D2:E8:38:8B:16:A2
            X509v3 Authority Key Identifier:
                keyid:89:65:DD:28:2C:F1:5A:E0:FF:EB:AF:9C:28:46:ED:E3:DA:27:35:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/892a2462df3541f86912f2af9707f9b6f589eb8a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/13b998294869628fc9b6c4a17b2ac4552fbdb463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133ee309-7911-499c-969b-ae372f823590/892a2462df3541f86912f2af9707f9b6f589eb8a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.178.0/23
                  45.172.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:22:97:43:7b:dc:73:5a:66:7b:64:d1:6c:cd:25:c4:92:
         b7:eb:12:88:8d:f5:c5:b8:22:55:da:61:f9:15:62:fc:b8:56:
         ea:fb:a8:1e:61:3b:c9:65:ca:79:8b:4a:91:e4:98:83:d3:8c:
         b4:aa:4c:4f:5a:fa:d2:87:63:85:03:6c:dd:88:8e:dd:db:f9:
         b4:b5:1f:26:18:29:a7:0c:f6:03:b8:b8:8f:76:d9:42:e9:fd:
         01:b7:e5:f1:f6:3c:5e:54:40:07:92:6e:fa:71:97:0d:2e:29:
         9d:8a:fb:4d:28:c9:07:cf:a2:aa:c7:e1:34:37:19:a0:b7:b2:
         da:8a:80:ff:93:bc:fe:db:19:22:b5:95:8b:35:28:ce:7c:eb:
         10:69:23:47:fd:7e:cc:bb:3b:2d:5c:c6:33:57:93:13:2c:bc:
         6b:4f:3f:51:8f:f6:cb:4e:45:35:15:71:32:96:b2:e8:22:c6:
         31:55:65:0a:3c:14:08:54:8f:2f:10:3a:4c:b2:c4:44:41:03:
         de:04:47:77:d8:30:81:e5:fe:bf:91:26:70:43:f4:12:8c:1c:
         78:96:5e:39:4c:04:eb:49:d8:83:d3:ad:e0:70:8a:46:e5:1b:
         26:84:5b:56:84:e6:db:60:3e:de:d7:f4:a0:3f:1c:7e:e4:d7:
         31:f5:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org