Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/47018d42a6544115dda46c95936dbf365f8cc2b8.roa
File:                     47018d42a6544115dda46c95936dbf365f8cc2b8.roa (raw, json)
Hash identifier:          gcgguHZ3+vSftOIhY7tRf/xKcj/1b36EnPRollkLp4Y=
Subject key identifier:   00:8F:8F:27:1A:A6:D5:E1:28:B3:07:16:F9:B2:91:64:30:B7:E9:9D
Certificate issuer:       /CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
Certificate serial:       0A3ED8
Authority key identifier: 38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/47018d42a6544115dda46c95936dbf365f8cc2b8.roa
Signing time:             Wed 24 Mar 2021 14:33:12 +0000
ROA not before:           Wed 24 Mar 2021 14:33:12 +0000
ROA not after:            Tue 24 Mar 2026 14:33:12 +0000
asID:                     269875
IP address blocks:        45.190.16.0/24 maxlen: 24
                          45.190.17.0/24 maxlen: 24
                          45.190.18.0/24 maxlen: 24
                          45.190.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671448 (0xa3ed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
        Validity
            Not Before: Mar 24 14:33:12 2021 GMT
            Not After : Mar 24 14:33:12 2026 GMT
        Subject: CN=47018d42a6544115dda46c95936dbf365f8cc2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:bb:bf:4f:26:85:4f:09:3c:dd:c0:07:9f:
                    75:7c:c1:ee:1a:1b:88:f1:5b:3b:54:62:a8:35:ac:
                    fa:9a:ba:12:54:1e:f6:76:ec:db:eb:f1:11:d5:35:
                    90:e5:70:54:75:12:ae:11:9d:2e:0c:8c:f2:62:75:
                    91:14:bb:9f:d2:b7:12:d4:9c:d8:c0:eb:8b:51:7b:
                    40:71:f9:ec:9a:08:1c:d0:02:df:60:31:b2:bf:4c:
                    c4:49:7a:57:8a:2d:c6:27:9c:42:ac:4e:19:55:64:
                    d4:db:07:53:9e:41:4d:7b:26:a3:2a:d1:c9:16:24:
                    99:3f:13:52:6c:c0:b4:d5:f3:43:a4:16:c1:17:1e:
                    0a:d1:b5:3e:f5:0a:3e:0b:ad:01:e0:92:ae:4e:5d:
                    c2:59:d3:e4:88:30:59:ea:9f:7c:9f:bd:2b:e1:cd:
                    27:ad:96:c5:e5:76:f2:0e:ad:99:51:cd:e4:0b:16:
                    c1:89:c0:3a:8d:37:da:9d:a7:5d:41:7e:be:e4:c9:
                    4d:ca:04:2b:59:18:3b:3b:56:25:7e:cc:bc:3c:6a:
                    f4:ee:ce:ba:54:11:a5:c1:43:26:5f:4f:88:58:ec:
                    4c:30:f9:8e:45:f8:1d:f0:de:25:82:2f:4d:bd:59:
                    8b:93:6b:48:68:c4:59:84:83:6b:60:fa:47:18:1e:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8F:8F:27:1A:A6:D5:E1:28:B3:07:16:F9:B2:91:64:30:B7:E9:9D
            X509v3 Authority Key Identifier:
                keyid:38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/47018d42a6544115dda46c95936dbf365f8cc2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:a2:17:9e:a2:0b:35:d9:42:cf:f3:6b:32:32:90:58:a1:d9:
         5b:05:46:d8:ee:7d:e1:84:4b:cb:e9:ac:c3:b3:26:f1:9c:15:
         71:a4:f9:dd:f8:28:58:21:40:07:37:c3:79:8f:1e:0a:37:11:
         ff:2d:1d:66:9a:43:de:6b:db:a3:4a:87:f0:d5:27:7b:ae:04:
         75:dd:ea:32:89:d8:98:24:8a:47:2f:95:fb:54:1a:d3:64:fe:
         65:f4:eb:4b:5c:86:e9:9c:a7:c4:88:f5:d5:b3:84:f1:db:5f:
         1d:7b:5f:63:49:3f:30:21:06:3a:0a:80:a8:35:d5:c3:83:16:
         e7:bc:f2:8b:9e:c2:42:ff:70:6d:2e:c4:6f:bc:6d:e0:65:87:
         e8:08:b8:7a:17:c4:45:85:01:5b:2c:24:61:cc:08:0b:11:ef:
         6c:68:47:a9:43:25:dd:e1:d5:fa:ac:f5:7f:d2:5a:01:ed:2d:
         c6:97:62:13:e3:59:62:45:76:16:37:b0:6a:82:e6:3f:a2:a3:
         de:2c:c7:6b:46:ff:00:4e:a5:ac:eb:a5:86:db:08:a1:d2:dc:
         17:68:89:71:fd:3a:86:95:4d:5f:68:d3:5a:06:0a:dc:4d:01:
         f9:69:44:50:d2:96:29:1d:87:d5:2c:a7:71:eb:5c:36:2c:d9:
         af:69:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org