Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/9d8482ce28e0651e1b24e786dcedd2b9329fbe68.roa
File:                     9d8482ce28e0651e1b24e786dcedd2b9329fbe68.roa (raw, json)
Hash identifier:          UJmHqZvobk1HXFL0bvWnymkJyU7gpUYWR18y2RuAuSg=
Subject key identifier:   E7:8F:A8:6E:61:A1:89:46:27:57:79:15:AB:CD:36:89:FA:2B:4D:0B
Certificate issuer:       /CN=56e0dad1bc274e191f17c10f2a85105ac8ad8244
Certificate serial:       0BE533
Authority key identifier: 6E:E3:DA:CA:61:74:C0:CA:DF:18:50:60:A0:17:00:76:66:93:B1:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e0dad1bc274e191f17c10f2a85105ac8ad8244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/9d8482ce28e0651e1b24e786dcedd2b9329fbe68.roa
Signing time:             Wed 24 Mar 2021 14:31:13 +0000
ROA not before:           Wed 24 Mar 2021 14:31:13 +0000
ROA not after:            Tue 24 Mar 2026 14:31:13 +0000
asID:                     269785
IP address blocks:        45.182.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779571 (0xbe533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e0dad1bc274e191f17c10f2a85105ac8ad8244
        Validity
            Not Before: Mar 24 14:31:13 2021 GMT
            Not After : Mar 24 14:31:13 2026 GMT
        Subject: CN=9d8482ce28e0651e1b24e786dcedd2b9329fbe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:39:a2:df:50:55:e5:91:be:76:05:03:d6:
                    f4:a1:a4:3e:33:57:5e:ec:29:ba:7e:56:2a:52:06:
                    e7:55:0e:90:4c:47:4b:67:5d:de:e4:3e:e2:7f:4a:
                    7b:da:a2:b1:10:9b:3b:23:1e:e4:54:e0:96:32:50:
                    e7:ed:e2:f1:0d:ea:d1:29:5c:ed:39:c7:e4:2d:8b:
                    f1:3e:fe:99:8d:87:58:a3:98:da:87:f1:4d:39:3d:
                    e0:fc:99:a7:31:be:93:55:6c:00:75:c1:d3:f4:0a:
                    2a:46:18:ea:a3:a4:01:6e:ef:86:8c:6a:31:77:d2:
                    2b:88:e5:2e:68:06:bd:da:b5:80:f9:4c:f0:38:e6:
                    32:00:77:6a:39:be:22:4f:04:7a:48:c4:f2:d6:5c:
                    db:73:bd:f1:e0:15:12:75:ae:2d:b7:48:27:9f:80:
                    a1:6c:36:18:3d:cf:ed:c2:4f:ba:0a:dd:be:e8:51:
                    68:6f:17:bf:c3:51:c7:44:12:ec:71:02:bd:6c:ee:
                    02:38:ac:b4:a6:55:42:2e:7c:cc:d5:a2:8c:21:e6:
                    71:9e:a6:fa:59:61:e3:31:8f:a7:40:77:f9:56:52:
                    9e:2e:d7:22:1e:a1:a1:f0:28:b5:c8:b6:9d:e8:67:
                    7f:75:2c:b3:34:08:a4:36:b9:1c:96:10:56:c6:65:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8F:A8:6E:61:A1:89:46:27:57:79:15:AB:CD:36:89:FA:2B:4D:0B
            X509v3 Authority Key Identifier:
                keyid:6E:E3:DA:CA:61:74:C0:CA:DF:18:50:60:A0:17:00:76:66:93:B1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e0dad1bc274e191f17c10f2a85105ac8ad8244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/9d8482ce28e0651e1b24e786dcedd2b9329fbe68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/56e0dad1bc274e191f17c10f2a85105ac8ad8244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:38:25:b8:36:ea:b8:89:18:2f:4e:58:92:37:e1:00:64:76:
         8f:af:90:94:0c:cd:3d:14:f3:8c:80:fa:b2:bb:19:5d:1d:02:
         0d:f3:39:ec:92:f3:c7:06:18:58:05:dd:19:eb:3e:97:8f:3e:
         a3:b1:2d:c3:0f:65:a8:54:04:3d:89:30:37:dd:a9:97:00:53:
         d3:90:47:20:d3:e3:93:cf:65:cb:38:db:5e:fb:44:6d:b7:72:
         35:44:04:4d:b7:99:6f:86:8a:e6:b6:61:0f:8d:45:52:89:60:
         19:f6:b3:9c:cb:86:f0:e7:1a:65:42:c5:99:b0:e2:20:e5:09:
         f3:32:07:ab:29:6f:bc:ec:d6:7d:24:53:79:58:56:ea:cf:c8:
         ce:d6:09:c1:45:e1:94:1c:4f:cb:82:06:1e:e0:c3:79:3c:7f:
         93:2a:a8:e7:fb:56:5f:73:39:9f:42:6c:df:28:60:03:75:67:
         d8:16:41:a6:9d:31:ca:7d:8f:6c:90:fc:8c:78:46:de:10:0f:
         62:8d:b2:b5:19:d7:6c:59:57:8b:ea:34:20:91:71:21:42:82:
         17:ac:30:c7:d0:2e:f9:7a:bc:a5:8c:63:94:54:2d:3b:79:30:
         01:30:36:4b:7c:6f:49:02:a8:91:43:ee:1b:2b:1e:54:a4:b4:
         5c:c0:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org