Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/a17ce384992f998499a39b395143d810ce0374c6.roa
File:                     a17ce384992f998499a39b395143d810ce0374c6.roa (raw, json)
Hash identifier:          tF2XYXc9V9AzSqD4qGcrBz6hUdNQy+SCidxsQ76LL9U=
Subject key identifier:   2F:25:AD:F0:9A:EA:C8:10:EF:CD:DF:C8:99:3A:74:6F:20:D4:D9:96
Certificate issuer:       /CN=2cfab365614823412fd7d92d366dc75c3b5048ca
Certificate serial:       0C024F
Authority key identifier: 64:48:42:7C:AC:98:7D:89:3D:D8:6B:42:36:0D:7B:A3:CC:DE:3B:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cfab365614823412fd7d92d366dc75c3b5048ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/a17ce384992f998499a39b395143d810ce0374c6.roa
Signing time:             Wed 24 Mar 2021 14:45:30 +0000
ROA not before:           Wed 24 Mar 2021 14:45:30 +0000
ROA not after:            Tue 24 Mar 2026 14:45:30 +0000
asID:                     27855
IP address blocks:        45.65.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787023 (0xc024f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfab365614823412fd7d92d366dc75c3b5048ca
        Validity
            Not Before: Mar 24 14:45:30 2021 GMT
            Not After : Mar 24 14:45:30 2026 GMT
        Subject: CN=a17ce384992f998499a39b395143d810ce0374c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:a2:72:9a:bd:f1:7b:60:ad:4a:a0:75:3d:
                    bd:d2:a3:10:4c:b5:52:c6:11:7f:13:3d:9f:ca:e4:
                    78:48:12:3a:20:bb:b7:4b:eb:02:32:a2:22:03:d4:
                    4f:f7:c7:4b:83:29:e1:0b:4d:49:b3:f7:d7:09:87:
                    dc:39:10:f8:b3:a5:7a:54:eb:5b:b4:1c:fb:db:58:
                    13:7e:47:7a:da:de:7d:40:17:de:d9:08:72:c8:dc:
                    95:86:a3:34:2d:1e:94:17:78:8c:de:9e:ce:82:1e:
                    05:ec:5c:72:23:f0:fc:b2:41:55:c4:78:46:77:28:
                    66:02:38:7a:c6:f8:b2:ee:11:31:59:9e:16:46:a1:
                    e1:75:ef:76:93:a9:1b:6d:c0:d8:5b:ea:64:c9:37:
                    6a:01:f0:de:f5:db:7d:c2:bd:bb:1f:0d:28:ca:1b:
                    62:8c:c8:eb:ff:c6:e6:cc:8f:c6:2f:31:56:f4:2c:
                    26:5b:4d:8d:fc:7c:5a:7d:05:54:8c:aa:9d:1d:da:
                    80:00:5b:5c:1e:42:df:50:98:af:90:bf:7a:68:94:
                    4a:4d:81:76:5f:c3:83:39:e2:d0:c8:03:91:02:04:
                    d1:b7:bb:a7:9e:28:3c:e7:3e:b3:e3:45:e8:dc:38:
                    4f:1b:83:e0:55:f4:5c:60:d8:53:04:6c:57:5e:5a:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:25:AD:F0:9A:EA:C8:10:EF:CD:DF:C8:99:3A:74:6F:20:D4:D9:96
            X509v3 Authority Key Identifier:
                keyid:64:48:42:7C:AC:98:7D:89:3D:D8:6B:42:36:0D:7B:A3:CC:DE:3B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cfab365614823412fd7d92d366dc75c3b5048ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/a17ce384992f998499a39b395143d810ce0374c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/2cfab365614823412fd7d92d366dc75c3b5048ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:74:c2:4a:c3:3a:11:8f:3d:1d:0f:6a:e1:69:44:38:77:
         51:37:0a:88:01:44:9e:66:0b:36:e2:a2:55:1f:8b:8b:4b:9f:
         78:a3:a4:12:a5:5f:eb:48:f2:59:68:32:27:8d:d1:07:88:31:
         49:96:5b:b2:e8:df:2e:17:ae:7b:a0:a7:e7:ee:af:40:ba:22:
         45:26:03:cd:09:8d:56:06:d0:12:b4:bf:d5:e0:35:a0:a0:5f:
         67:b4:c7:b6:02:98:9c:62:58:43:01:cb:c6:e8:d8:31:57:cf:
         09:77:dc:cc:f5:43:60:66:ef:06:c5:18:bc:6c:06:f1:c8:7e:
         99:96:41:02:00:93:96:dd:ee:22:68:73:61:6b:26:c9:34:2f:
         86:04:b6:32:d7:3b:11:28:62:40:58:e2:70:c1:71:b8:2b:44:
         e5:7e:a4:3a:32:5d:03:c4:d6:8f:eb:18:e1:19:79:e7:b9:c4:
         ec:7a:2e:8d:89:36:ec:ca:03:18:e8:16:97:07:6f:e9:6f:19:
         05:a4:7d:75:c4:ec:2d:84:3b:03:55:74:2d:52:f2:a6:61:5b:
         aa:f8:7b:97:25:7f:42:70:70:1a:bf:c2:d5:fa:c0:55:43:4c:
         ab:2c:9e:40:20:f5:f6:bf:7d:23:e0:6c:56:72:42:48:c6:e9:
         33:df:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org