Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/c966c9d5d74afe6e09442f5dd2202e8bdb0d1866.roa
File:                     c966c9d5d74afe6e09442f5dd2202e8bdb0d1866.roa (raw, json)
Hash identifier:          ZNHzDSgeVVTWAo2UnhqDQW/fJAPHjfiq/IoPcSrLL4E=
Subject key identifier:   2F:3D:54:7D:C9:10:95:C9:6D:8E:CD:43:70:29:FE:01:06:82:F3:CE
Certificate issuer:       /CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
Certificate serial:       0BBBF9
Authority key identifier: 29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/c966c9d5d74afe6e09442f5dd2202e8bdb0d1866.roa
Signing time:             Wed 24 Mar 2021 14:40:11 +0000
ROA not before:           Wed 24 Mar 2021 14:40:11 +0000
ROA not after:            Tue 24 Mar 2026 14:40:11 +0000
asID:                     266894
IP address blocks:        45.161.34.0/24 maxlen: 24
                          45.161.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769017 (0xbbbf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
        Validity
            Not Before: Mar 24 14:40:11 2021 GMT
            Not After : Mar 24 14:40:11 2026 GMT
        Subject: CN=c966c9d5d74afe6e09442f5dd2202e8bdb0d1866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:b0:c9:2d:31:40:fc:34:0c:88:5e:66:83:
                    ac:48:76:d7:0e:0f:7c:a1:fb:50:c2:9f:11:25:22:
                    73:72:70:5d:a5:b3:13:fe:64:60:ec:1e:49:9e:cc:
                    a5:b0:a9:3d:7c:93:5d:a1:db:2f:15:ac:85:6a:58:
                    d3:74:39:2b:15:b5:26:cd:66:80:a3:a9:19:e8:7d:
                    00:60:af:1e:74:62:d6:29:de:b7:49:97:92:7d:f2:
                    fe:56:7f:81:65:66:b7:c2:bc:08:8d:a5:f9:f1:6c:
                    63:47:6a:84:40:05:6e:ba:70:65:7a:48:be:b7:5e:
                    bf:7b:8d:a7:55:96:76:5c:e8:8d:ba:8b:d2:00:f6:
                    30:0e:af:a7:69:9b:17:a4:3a:59:f1:08:70:ee:94:
                    0d:87:e1:8b:c3:8b:f1:02:c0:91:dc:c0:43:f7:17:
                    d2:da:09:dd:be:00:e6:27:e1:ed:8f:b6:4b:ee:a0:
                    c1:d5:e7:4f:42:fc:d3:42:67:6b:d0:73:96:6a:c2:
                    d0:4b:f9:f1:dd:e4:b3:67:f1:59:e2:7d:7d:22:a9:
                    99:7b:14:aa:5f:8d:8a:d2:4e:04:de:77:2f:12:2b:
                    9e:1d:9b:16:3d:49:37:fb:1c:58:2f:72:1d:de:90:
                    df:a2:46:c8:ad:ac:c6:85:02:cb:f5:87:a0:64:d9:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3D:54:7D:C9:10:95:C9:6D:8E:CD:43:70:29:FE:01:06:82:F3:CE
            X509v3 Authority Key Identifier:
                keyid:29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/c966c9d5d74afe6e09442f5dd2202e8bdb0d1866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:15:97:2d:04:92:68:af:af:53:27:75:59:98:28:42:f8:c4:
         9b:b4:51:38:6e:c6:75:9e:05:f2:1a:b1:db:46:8f:aa:51:aa:
         a3:28:da:d6:e9:b4:2a:44:e2:dd:6a:f6:cc:c8:5a:f4:42:a1:
         b5:b6:dc:2d:ce:b0:09:d8:4c:f5:05:90:da:12:be:73:9f:e4:
         c7:25:49:12:98:c4:f6:ce:b5:26:66:f9:83:91:db:35:f4:0f:
         0b:3d:2a:00:fa:03:12:e6:b3:f8:8e:87:29:36:37:7c:ec:bf:
         de:85:a3:0a:03:6d:76:ab:ae:6a:e9:76:a1:87:d8:c5:92:2e:
         da:11:8d:c6:82:fb:57:37:24:4b:71:b9:38:c3:3c:13:8d:a9:
         df:0a:e1:49:ce:92:e1:8e:b5:8e:c1:4c:2f:22:eb:bf:32:b4:
         d1:c4:74:bf:2f:f1:3a:3d:49:1a:d1:d5:a5:3b:48:11:f1:b0:
         9e:b5:2c:33:68:e1:8b:27:23:0f:7b:6a:28:ff:bd:5a:1e:d2:
         b8:68:98:fd:48:04:89:b6:14:d1:fc:36:c3:f8:10:13:c7:85:
         16:ea:33:77:82:9f:82:3d:eb:1c:6d:84:27:c5:3e:28:3a:a0:
         50:fe:69:d6:fd:d7:3d:bf:df:58:38:e9:82:c4:1f:b3:50:00:
         3b:91:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org