Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/072842e207be5a8d33b78c34aa5932c41bcfa087.roa
File:                     072842e207be5a8d33b78c34aa5932c41bcfa087.roa (raw, json)
Hash identifier:          3Ao55VVFxS1CpVUWO7e4RAVgmd9yz5lpbxpIfpHMqQg=
Subject key identifier:   4F:8C:29:69:62:AC:6B:39:AA:EB:52:99:A7:34:FB:BF:26:BF:E0:E1
Certificate issuer:       /CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Certificate serial:       338D
Authority key identifier: D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/072842e207be5a8d33b78c34aa5932c41bcfa087.roa
Signing time:             Thu 25 Mar 2021 01:14:47 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267686
IP address blocks:        45.163.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13197 (0x338d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=072842e207be5a8d33b78c34aa5932c41bcfa087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:cb:54:e9:c0:d2:02:c5:41:02:6a:64:86:
                    7a:76:37:f8:ad:25:05:f4:80:ab:19:a8:21:ac:c9:
                    94:2f:c7:30:56:23:06:ce:7d:a6:15:18:21:38:2b:
                    d4:37:9d:88:ef:d4:f3:4b:f1:a6:8d:77:5d:18:e9:
                    ac:20:d7:8d:85:39:cc:73:ca:17:ca:e9:40:8c:22:
                    08:28:93:e2:7e:ac:bc:91:19:e6:7e:1d:c1:e6:17:
                    57:53:1a:89:97:eb:73:0d:83:e4:96:b4:cf:df:10:
                    25:dd:30:1e:01:11:c9:85:0a:17:6a:dd:53:ec:de:
                    77:d0:a7:42:b6:3b:b7:af:74:72:a9:8b:62:c7:5a:
                    61:cf:b6:10:23:a1:e9:3d:14:68:42:84:32:3e:6f:
                    16:41:ed:9f:23:24:c4:d7:b3:81:ac:4e:16:c4:17:
                    49:03:98:c2:6a:5f:54:51:9e:a5:d7:cc:7f:3d:3d:
                    20:d0:49:bd:c3:4d:e3:2a:3b:27:7d:09:0e:61:9e:
                    3f:88:b1:51:a7:9c:5c:25:5f:c1:cc:5b:b4:77:1f:
                    c5:8f:f7:89:32:14:f7:b4:f9:81:fe:26:41:da:ff:
                    ac:5f:0d:ca:43:74:80:a9:60:be:07:74:5a:38:d9:
                    89:f2:b3:d6:21:d3:df:19:58:11:01:ef:7c:43:d9:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:29:69:62:AC:6B:39:AA:EB:52:99:A7:34:FB:BF:26:BF:E0:E1
            X509v3 Authority Key Identifier:
                keyid:D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/072842e207be5a8d33b78c34aa5932c41bcfa087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:59:3f:2f:38:87:13:11:65:67:ae:36:77:52:20:88:ae:
         3d:fb:24:77:c1:fc:24:f8:12:20:63:43:cf:80:2f:9d:08:dd:
         59:68:9c:f1:77:21:35:ec:a0:fa:2d:7e:84:47:a7:76:d8:a2:
         6c:dd:29:2a:df:c1:f1:ec:0b:38:0c:80:24:5c:f1:45:df:4b:
         0e:6f:06:99:da:66:86:d0:32:fc:f6:6f:b4:71:ce:66:7f:97:
         63:a3:87:fc:bf:f0:7d:cf:c1:50:bc:f6:e4:bb:e3:01:ca:e9:
         0e:c3:1f:e7:e9:0e:77:69:42:23:66:7c:b5:70:7b:88:42:59:
         54:63:a2:f8:0c:6b:4e:6c:9a:b3:e3:63:79:32:d7:e2:4f:24:
         da:fc:1d:8c:1d:af:92:81:a6:f0:e3:9d:13:ee:fb:b6:b8:88:
         41:57:7b:59:e7:90:c1:3a:90:32:12:76:1a:96:86:66:3a:37:
         b1:e5:8e:d3:44:79:f4:1f:ed:1b:86:c0:85:34:f5:f8:14:2d:
         ec:25:9a:d6:24:60:a6:18:71:29:8e:79:10:f4:34:e2:ee:09:
         1c:78:5e:ce:88:53:a6:1f:64:07:ec:29:66:95:ce:70:01:7f:
         b9:99:b1:05:89:25:bc:85:b7:6b:08:b7:cc:eb:71:ae:bc:67:
         bd:57:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org