Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/026eff4489dc0895076a5bfc9e225e881d3ae2cf.roa
File:                     026eff4489dc0895076a5bfc9e225e881d3ae2cf.roa (raw, json)
Hash identifier:          agNDXzNyUcPn+4G+pKwg0tAjf/CIujHOVktofJwxcNo=
Subject key identifier:   61:86:BF:1D:BA:65:29:6C:13:D4:5B:9D:A5:50:25:D9:4F:92:9E:94
Certificate issuer:       /CN=b5180db106b417933418eb32a3631359412404cd
Certificate serial:       06062F
Authority key identifier: 84:30:AC:F1:2D:4E:C7:C0:82:85:AC:72:E4:A8:AB:97:1E:9B:87:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5180db106b417933418eb32a3631359412404cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/026eff4489dc0895076a5bfc9e225e881d3ae2cf.roa
Signing time:             Wed 24 Mar 2021 14:32:26 +0000
ROA not before:           Wed 24 Mar 2021 14:32:26 +0000
ROA not after:            Tue 24 Mar 2026 14:32:26 +0000
asID:                     270089
IP address blocks:        45.229.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394799 (0x6062f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5180db106b417933418eb32a3631359412404cd
        Validity
            Not Before: Mar 24 14:32:26 2021 GMT
            Not After : Mar 24 14:32:26 2026 GMT
        Subject: CN=026eff4489dc0895076a5bfc9e225e881d3ae2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:40:d4:61:ab:d6:86:db:4c:e9:8f:06:c3:
                    16:99:5a:fc:13:9e:c1:81:15:b6:5d:b9:4d:36:f8:
                    8f:72:d1:6b:c5:52:46:51:97:da:13:c0:9b:b8:8b:
                    2e:66:f6:ec:60:06:41:5b:04:8d:71:95:74:96:6b:
                    2e:c8:2f:bc:a3:50:25:ec:01:94:7e:73:25:ad:cd:
                    2b:a1:3a:df:64:5c:eb:7f:64:62:9e:97:00:c1:d8:
                    dd:44:4f:98:24:d0:eb:e6:d2:50:43:0b:3d:2f:3a:
                    66:bb:2f:e6:ed:f7:bf:f0:25:9d:b6:e6:e1:c2:d1:
                    05:e1:1c:86:e0:37:ea:c8:cb:36:86:c3:1c:10:b4:
                    3b:f3:2b:dc:8a:12:ea:60:23:20:81:60:35:43:58:
                    27:52:86:cc:7e:ed:67:e2:7c:f9:b8:d1:91:60:a3:
                    ff:3d:bc:06:86:4e:12:92:7b:6e:24:ff:74:59:ea:
                    ab:6b:e2:a5:a4:06:06:55:44:96:90:74:9f:f9:76:
                    dc:a3:03:c4:9f:b5:76:fb:dd:d0:b5:07:15:a7:cb:
                    fd:a5:14:20:38:64:8d:62:10:d5:d8:b5:20:f6:01:
                    be:22:92:13:e0:b3:3a:2c:d9:da:df:05:a2:5e:55:
                    81:24:a8:57:af:d0:28:d8:c3:ef:89:8a:b0:56:bd:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:BF:1D:BA:65:29:6C:13:D4:5B:9D:A5:50:25:D9:4F:92:9E:94
            X509v3 Authority Key Identifier:
                keyid:84:30:AC:F1:2D:4E:C7:C0:82:85:AC:72:E4:A8:AB:97:1E:9B:87:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5180db106b417933418eb32a3631359412404cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/026eff4489dc0895076a5bfc9e225e881d3ae2cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/208ce7b9-a9e7-4ed0-9b96-89ae89cb3108/b5180db106b417933418eb32a3631359412404cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:82:c4:45:9d:d1:34:f1:05:89:c5:1b:58:f2:31:11:a0:b7:
         e2:82:76:72:e0:23:63:f7:ad:34:64:25:34:07:8a:74:b3:26:
         a7:b4:8d:52:12:cf:a0:dc:7f:11:f3:f6:86:bb:52:da:21:d6:
         14:9d:f6:79:bd:c1:0e:e7:a4:6f:9f:6b:5b:d6:42:48:fd:43:
         66:59:2d:2b:a6:a5:7f:ae:3e:55:4f:bd:75:f6:13:17:ca:12:
         83:c7:6b:19:4d:92:c6:88:4a:bc:32:33:b2:9f:55:b6:07:14:
         2f:8f:54:87:87:df:00:5b:93:16:aa:33:a9:8e:90:ea:0a:55:
         ff:e2:83:86:7c:1f:95:e2:f1:3f:21:0a:76:4d:b4:ad:29:2b:
         e1:37:77:89:99:66:4e:13:33:a3:1d:da:2d:ea:c8:45:d4:17:
         20:97:d8:da:3b:f0:87:4b:8a:cc:6a:ec:42:07:59:5f:33:ad:
         07:ec:9e:f0:fa:15:48:2d:f5:ac:3d:af:4b:68:24:aa:21:85:
         ce:34:2f:e7:70:de:71:cb:9a:c0:26:ab:c2:df:f9:54:52:6f:
         b3:fb:4f:71:91:aa:00:4b:55:57:f3:dc:9f:07:06:8f:91:c5:
         62:d0:3a:2b:79:31:bb:88:af:b0:1b:cd:ce:05:d7:9f:c6:b8:
         2c:d6:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org