Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/ca5d60f9f575d246c9614ca7c417117f7a351003.roa
File:                     ca5d60f9f575d246c9614ca7c417117f7a351003.roa (raw, json)
Hash identifier:          YBqMyKvOnVSM2WeYyJ8JcjGChAxMSKR8aKhWl1yZFD8=
Subject key identifier:   6F:79:2F:80:41:D4:B7:C6:13:B4:53:51:22:6F:C9:BC:1F:F7:2A:F2
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       0D5089
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/ca5d60f9f575d246c9614ca7c417117f7a351003.roa
Signing time:             Wed 24 Mar 2021 22:49:32 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266784
IP address blocks:        45.235.120.0/24 maxlen: 24
                          45.235.121.0/24 maxlen: 24
                          45.235.122.0/24 maxlen: 24
                          45.235.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872585 (0xd5089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=ca5d60f9f575d246c9614ca7c417117f7a351003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:40:d1:6e:3c:58:2a:12:ad:a8:b8:57:a4:
                    25:f2:ef:92:90:d7:25:8b:55:39:43:26:74:1f:e1:
                    99:29:71:e0:70:9d:bc:aa:ff:af:03:d7:2c:d2:87:
                    ae:f5:ee:1c:a0:0e:9b:b8:9f:a0:e5:d4:e3:da:73:
                    7a:95:5a:62:16:f6:93:39:c9:31:49:d3:37:9e:2f:
                    ef:47:36:92:65:f3:3a:15:13:4b:cf:f6:c5:8e:b8:
                    a1:e1:e4:5b:04:cb:2d:6e:3f:13:c7:45:31:6f:55:
                    67:9f:a0:72:1f:fe:21:0f:88:b7:21:71:dd:91:50:
                    eb:59:df:e2:c2:d4:49:61:db:af:a1:66:16:85:02:
                    92:c2:20:0c:d5:23:8a:45:03:41:fc:82:96:a8:6e:
                    30:c2:cb:6a:6b:4a:10:d2:9e:43:52:5d:84:06:73:
                    4e:c3:b9:03:ee:63:0d:ae:26:5d:91:81:95:d3:e6:
                    72:aa:bb:48:58:37:dc:63:25:e6:64:c8:95:7d:dd:
                    93:44:3c:d5:e8:6b:7c:5a:3a:5b:8d:4b:a6:66:35:
                    9c:8b:ca:f9:2f:a8:51:62:67:6a:0d:56:fe:dc:31:
                    99:77:fe:f5:ec:4a:d7:b1:48:84:97:45:ef:0d:09:
                    7d:08:87:ce:6e:c9:51:b0:81:bf:25:83:94:98:a9:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:2F:80:41:D4:B7:C6:13:B4:53:51:22:6F:C9:BC:1F:F7:2A:F2
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/ca5d60f9f575d246c9614ca7c417117f7a351003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:49:7b:b4:b5:7f:74:5c:c5:82:50:f4:f2:e8:22:c8:6d:6c:
         e9:c0:92:fe:c6:b4:8a:36:35:00:45:18:f4:48:c6:54:64:df:
         c6:a0:54:3f:76:d3:84:8e:fa:6e:69:5e:eb:48:2e:76:d1:28:
         fe:f6:43:01:c5:3c:31:d1:d3:8e:32:0c:37:66:ae:db:1b:58:
         d5:bc:65:cc:f6:09:f2:ec:be:cf:3b:b2:99:a6:40:bc:e2:87:
         cf:2e:87:52:bb:9d:66:3c:8b:4c:24:a7:b2:d8:ca:7d:2b:5e:
         02:ea:70:c2:e7:30:cb:f8:31:c9:36:38:97:ba:aa:99:3f:7c:
         32:ae:bf:2c:2a:3f:40:f6:7f:85:94:97:3d:c9:d1:17:a5:9f:
         8f:2d:e0:3c:33:f0:3f:c2:c4:e4:d4:17:80:b6:b9:09:5b:6e:
         ce:b8:2d:04:a3:3a:d1:c7:97:0a:6b:c4:22:61:d9:b6:3b:fa:
         33:38:1c:c6:53:c6:f5:1b:f3:97:81:a1:43:24:ec:8c:88:93:
         79:18:8a:6d:31:53:a8:1c:b5:91:48:99:94:b4:23:89:8d:51:
         c1:36:bf:4f:89:af:6d:8e:b7:6e:68:b6:7e:5b:f0:ac:33:47:
         d0:4e:6f:14:66:f0:db:14:d5:fd:fe:b0:c3:2a:11:8f:ea:5a:
         2e:07:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org