Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/34687320b309a896a418e061e7481fa9e0ac205b.roa
File:                     34687320b309a896a418e061e7481fa9e0ac205b.roa (raw, json)
Hash identifier:          0vneT53GBs3zIoZBNFo7CbyIQCsxn1au3G1frv3ewMw=
Subject key identifier:   9C:52:C7:53:01:F9:B1:D9:CC:EE:CE:74:E3:66:BF:5B:54:41:89:B2
Certificate issuer:       /CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Certificate serial:       384D
Authority key identifier: D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/34687320b309a896a418e061e7481fa9e0ac205b.roa
Signing time:             Thu 25 Mar 2021 01:15:07 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267686
IP address blocks:        45.163.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14413 (0x384d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=34687320b309a896a418e061e7481fa9e0ac205b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5c:f8:99:ee:e8:87:d1:f8:37:1c:0b:58:ee:
                    23:68:73:3a:04:5f:1e:0b:29:32:92:ab:1a:03:df:
                    a2:da:f0:13:d7:ef:b9:a1:62:4a:20:7b:64:0a:72:
                    ff:7e:39:f1:fe:39:c6:46:a2:f8:02:74:e3:07:c8:
                    98:6c:94:d5:dd:4c:80:58:1e:75:5c:a3:fe:18:2a:
                    db:e7:70:7f:47:57:54:05:4d:57:29:84:c2:81:0b:
                    29:92:a1:a4:46:52:11:90:69:6a:b8:a3:c8:db:81:
                    e7:14:0c:34:a1:ce:a0:41:8e:8e:9a:19:d4:6a:b0:
                    1a:ac:46:81:b4:38:ce:b3:25:32:48:17:47:0b:e1:
                    00:5f:0e:6a:d2:fc:4c:8d:c0:10:96:cf:ed:f6:de:
                    c4:ea:06:55:bc:72:bf:94:63:d9:fb:06:8c:af:60:
                    5a:04:5e:3c:b2:bb:96:68:f7:c7:a8:3b:98:e1:4f:
                    e9:4e:85:9f:a5:95:fb:ec:0b:fd:c3:12:3b:72:b5:
                    50:09:b8:b8:37:76:86:1a:70:6a:ec:d7:59:d2:38:
                    2f:cf:ff:95:d2:83:af:02:4e:4c:74:50:7e:4e:03:
                    94:9a:c7:0f:2e:14:b4:5b:64:a9:a9:bd:3b:cb:2b:
                    e3:2c:46:98:c5:39:78:7a:ac:69:24:74:62:0f:3a:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:52:C7:53:01:F9:B1:D9:CC:EE:CE:74:E3:66:BF:5B:54:41:89:B2
            X509v3 Authority Key Identifier:
                keyid:D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/34687320b309a896a418e061e7481fa9e0ac205b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ec:62:c4:7c:9e:a1:56:3c:b8:d1:33:0f:03:29:c8:35:3a:
         cd:7e:a6:38:92:fb:ac:52:40:c1:37:4a:d7:9b:60:d6:8c:f7:
         f1:16:6c:f9:1c:b2:72:ad:ff:bb:23:c0:2a:67:0b:b9:95:51:
         8b:39:29:5a:7f:70:7c:0f:af:5f:37:96:9a:8e:f4:f7:1d:a1:
         e1:56:0d:d2:78:23:61:32:a5:60:0f:4d:9f:21:ba:c2:c5:d1:
         7f:83:66:a7:27:df:53:5f:eb:fa:25:30:77:68:b3:62:21:26:
         05:32:26:c8:f6:7b:44:e4:70:05:22:eb:64:38:5f:c2:b8:73:
         34:c7:3e:3e:f4:02:d6:08:b1:b9:db:fc:fd:79:63:63:38:4c:
         c9:ce:28:d6:a8:a9:86:50:be:dd:83:e3:a6:5d:2a:55:34:63:
         67:da:f1:b3:d0:c5:7d:08:a0:35:23:78:fc:be:e4:8e:f5:f6:
         ce:44:13:3a:8a:93:ed:5a:e0:85:68:39:71:4d:06:07:88:5b:
         15:2a:a8:73:57:d3:a8:f0:df:6f:a6:b2:30:df:72:62:d4:92:
         a6:40:06:68:06:d8:ee:33:ae:73:d4:7c:bd:86:46:02:85:fa:
         6f:13:61:93:31:93:0f:de:ce:35:14:fd:9e:7a:42:90:de:1b:
         d3:4b:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org