Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/2430172c628b6feaaca6fd6f05b6e8f171f1745f.roa
File:                     2430172c628b6feaaca6fd6f05b6e8f171f1745f.roa (raw, json)
Hash identifier:          N4HoOmaxU39QQwAxg0JaCjDzNc8yTXrS3FSX5UHklaU=
Subject key identifier:   08:AE:3B:76:27:87:99:04:5D:A8:22:08:C3:CF:AB:F8:7B:6F:B3:F2
Certificate issuer:       /CN=7aa6139d0f064a46788368b0bbfee31294aba351
Certificate serial:       108A97
Authority key identifier: 91:77:83:02:25:AA:AF:96:36:14:5A:D5:ED:C6:0D:DE:06:9E:10:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa6139d0f064a46788368b0bbfee31294aba351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/2430172c628b6feaaca6fd6f05b6e8f171f1745f.roa
Signing time:             Fri 17 Sep 2021 16:07:54 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sat 17 Sep 2033 03:00:00 +0000
asID:                     266769
IP address blocks:        45.224.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084055 (0x108a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa6139d0f064a46788368b0bbfee31294aba351
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2033 GMT
        Subject: CN=2430172c628b6feaaca6fd6f05b6e8f171f1745f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:ad:f8:cc:86:7e:bc:94:e7:26:f3:09:37:
                    23:9e:48:1a:dd:1f:6d:85:ac:ca:61:37:37:be:d1:
                    ad:72:1e:e3:23:4e:23:1f:09:34:d1:9c:d3:60:92:
                    9c:31:a7:c4:2b:34:72:97:f5:99:cc:0d:34:f2:00:
                    fe:5c:39:ff:d4:03:f6:ef:b7:f3:a6:b5:62:56:e9:
                    e7:9c:04:d4:15:3c:39:02:17:1d:8f:22:0a:3a:01:
                    06:31:4a:e6:33:b8:62:03:ea:db:bb:8b:1b:99:41:
                    f0:1c:5e:53:de:13:c4:4e:6a:9e:98:06:e9:c4:7f:
                    20:84:5b:cf:c3:34:1a:9b:e3:33:43:61:a4:74:5a:
                    da:7c:82:a4:d2:2f:79:4f:ef:eb:3d:2d:69:38:37:
                    43:79:dd:50:01:8a:25:e5:ba:11:3d:82:a3:e6:3d:
                    10:cc:c0:c8:34:1b:a0:ee:dd:b7:78:05:76:58:16:
                    66:be:60:1b:cd:a4:ec:0d:9c:c5:28:31:7e:ee:bd:
                    18:3f:c2:45:d4:9e:e8:17:5a:bb:36:c8:9f:22:79:
                    ae:56:64:b1:4e:50:24:9e:2c:a3:f2:c0:a4:63:fe:
                    fe:19:67:c5:1e:49:f4:da:bb:33:27:92:38:62:88:
                    64:c5:23:ad:ce:ae:ef:ae:2e:bc:9f:78:b9:fa:51:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:3B:76:27:87:99:04:5D:A8:22:08:C3:CF:AB:F8:7B:6F:B3:F2
            X509v3 Authority Key Identifier:
                keyid:91:77:83:02:25:AA:AF:96:36:14:5A:D5:ED:C6:0D:DE:06:9E:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa6139d0f064a46788368b0bbfee31294aba351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/2430172c628b6feaaca6fd6f05b6e8f171f1745f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/7aa6139d0f064a46788368b0bbfee31294aba351.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:48:59:fa:a4:cb:eb:a3:e3:59:4e:bc:d5:87:e0:2c:62:a4:
         b5:b3:3b:cc:f6:a4:c8:80:50:38:19:87:8d:b2:f2:7b:78:0d:
         69:4a:3c:7b:d4:53:97:d6:e7:95:36:2e:e7:d7:63:9d:34:c4:
         68:e1:25:89:52:76:f3:b4:00:ee:68:80:3f:bf:24:6f:d7:43:
         a4:d4:7d:2b:8a:f2:f3:b6:cf:1e:cb:06:f1:d7:f8:fc:ae:e8:
         f1:21:c5:eb:3a:74:4e:42:2b:a1:2e:19:61:ff:f5:8a:05:d2:
         e0:d1:88:5d:c8:0f:68:10:c7:b3:5a:23:d1:42:90:88:8b:6d:
         55:2d:5e:35:97:f2:72:2b:af:10:96:a0:4c:98:b8:67:1b:36:
         0c:b7:eb:6a:47:f6:6a:0e:4b:7f:73:fd:6d:94:6c:f1:e6:58:
         60:98:25:53:e3:8c:09:59:dd:99:94:9a:15:b8:38:9e:b4:02:
         7e:f1:53:6c:a0:29:a8:8c:d4:44:78:12:31:f5:01:85:dd:b2:
         9d:a5:57:ba:bf:a4:14:50:58:6b:5e:00:5d:70:16:93:6d:bb:
         e5:cc:d0:16:6c:67:dc:c2:4b:65:26:08:4a:d5:d4:85:13:73:
         5d:54:a4:de:ee:ea:76:33:be:bf:49:45:50:f5:ac:d6:4e:c5:
         09:01:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org