Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/39e2dea4c0b0b67ce68400ab8b1dddd7a0281b8a.roa
File:                     39e2dea4c0b0b67ce68400ab8b1dddd7a0281b8a.roa (raw, json)
Hash identifier:          gkxrznONKd9L336lVb4RmwOA+R9aVGlnhXvTy3CWMfk=
Subject key identifier:   F0:F9:B8:B5:66:EF:CF:F7:D0:4A:E0:1A:4B:7F:C3:CF:C2:39:CE:11
Certificate issuer:       /CN=997d13ec4a0ba912be13c21e8b300d59802938d4
Certificate serial:       0A8DC0
Authority key identifier: B4:3B:03:63:60:EA:BC:A0:CD:5E:70:34:80:A2:0D:0A:BE:A4:8A:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/997d13ec4a0ba912be13c21e8b300d59802938d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/39e2dea4c0b0b67ce68400ab8b1dddd7a0281b8a.roa
Signing time:             Wed 24 Mar 2021 14:34:24 +0000
ROA not before:           Wed 24 Mar 2021 14:34:24 +0000
ROA not after:            Tue 24 Mar 2026 14:34:24 +0000
asID:                     262213
IP address blocks:        45.191.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691648 (0xa8dc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d13ec4a0ba912be13c21e8b300d59802938d4
        Validity
            Not Before: Mar 24 14:34:24 2021 GMT
            Not After : Mar 24 14:34:24 2026 GMT
        Subject: CN=39e2dea4c0b0b67ce68400ab8b1dddd7a0281b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:0b:26:98:dd:d3:df:18:b5:0f:3c:fc:5d:
                    1e:74:85:23:e5:dd:8f:a2:b1:fe:c9:f3:62:f1:42:
                    24:7e:6b:e9:f4:a1:fe:5a:24:58:c0:e9:cf:4f:ec:
                    40:00:6f:f0:51:ff:0c:67:2f:04:40:8a:1b:27:1b:
                    22:18:89:0e:8b:29:86:b8:ef:4e:37:7e:b5:d8:11:
                    45:56:44:c0:12:71:11:44:ce:ae:fe:d0:7f:b6:53:
                    2f:29:d4:c9:d4:48:63:aa:ca:34:ca:93:4d:5f:56:
                    f8:84:f1:bc:ed:92:65:aa:f9:df:96:97:9f:8e:3d:
                    87:57:ae:b2:c2:f2:8a:7a:2e:28:1d:8f:e6:b9:fa:
                    4f:b9:79:a5:3d:27:fe:cf:30:ae:16:ac:21:9f:48:
                    c6:19:82:3e:22:0a:d7:fe:dd:fc:e1:63:3a:3d:75:
                    6e:e8:10:42:ab:6d:fd:3c:50:ee:14:e6:9c:08:50:
                    4c:72:19:b0:5b:be:38:7d:61:1e:1b:63:b0:e5:a8:
                    82:5c:8b:99:9a:d4:c1:2c:42:a0:13:c0:f7:9d:6d:
                    bb:1b:40:3d:c8:82:77:ee:d0:ba:47:20:12:29:ca:
                    9e:d5:8f:d5:9a:76:42:f9:0b:8f:dd:e0:3a:ed:e1:
                    32:37:60:3f:df:83:21:21:9b:ba:b1:12:32:92:77:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F9:B8:B5:66:EF:CF:F7:D0:4A:E0:1A:4B:7F:C3:CF:C2:39:CE:11
            X509v3 Authority Key Identifier:
                keyid:B4:3B:03:63:60:EA:BC:A0:CD:5E:70:34:80:A2:0D:0A:BE:A4:8A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/997d13ec4a0ba912be13c21e8b300d59802938d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/39e2dea4c0b0b67ce68400ab8b1dddd7a0281b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/997d13ec4a0ba912be13c21e8b300d59802938d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:ad:bd:a5:eb:47:d3:c5:b0:e5:8f:c4:8d:77:74:ff:32:
         0c:8d:bf:58:bd:66:e8:2a:b2:3a:8f:11:27:97:b6:8a:8e:7d:
         f4:fc:a7:a2:e4:51:c0:3b:32:ba:38:47:16:47:ad:2f:61:e2:
         5d:8b:df:00:48:8e:f0:97:1c:0d:fe:12:b8:8b:32:55:6f:cc:
         87:fb:f7:89:0d:91:bf:8d:53:0b:01:86:d3:fd:e5:cd:b8:9f:
         9c:46:eb:cc:7f:3c:f0:3e:d8:22:38:48:84:ef:00:a8:f9:36:
         69:72:24:08:cf:9a:af:52:d9:ec:eb:03:63:93:bb:c0:c5:98:
         55:17:8c:0a:30:3e:59:49:be:e1:09:99:13:c0:e4:e5:69:5c:
         5e:57:73:fc:28:bd:48:70:54:3f:58:1c:88:76:d0:e2:44:4c:
         fc:5f:22:de:e1:41:85:3e:5e:41:c9:37:22:c2:67:7f:32:a7:
         7c:08:4f:73:07:fe:8a:e9:e9:df:4a:88:f2:bf:cc:2e:15:61:
         7c:4a:b6:eb:52:0e:75:13:69:a5:32:2e:32:6d:ea:71:4a:2a:
         33:3f:d7:2a:4d:20:5b:f1:47:e4:f7:a3:9d:08:8a:8a:3a:4f:
         83:aa:cc:88:bd:66:1f:ec:35:7c:cd:51:4e:81:b7:91:da:65:
         4a:22:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org