Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/d28aacae0e5af59af785e095e377f42cd41888fd.roa
File:                     d28aacae0e5af59af785e095e377f42cd41888fd.roa (raw, json)
Hash identifier:          wrm/py5xHI3LqQaQZpIa6/iNXmAcTHIfpYopNDmtSNg=
Subject key identifier:   B0:94:6B:1F:06:FD:93:AF:5A:D5:68:6C:99:34:91:31:A9:F1:BF:23
Certificate issuer:       /CN=1ff19a587cf1d895ff1421bb064598306e517ca7
Certificate serial:       0CDD6F
Authority key identifier: 6D:6C:45:63:97:90:99:6E:7E:BD:65:5E:FB:C5:4A:F2:88:44:C5:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff19a587cf1d895ff1421bb064598306e517ca7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/d28aacae0e5af59af785e095e377f42cd41888fd.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:16 +0000
ROA not after:            Tue 24 Mar 2026 14:45:16 +0000
asID:                     266828
IP address blocks:        45.237.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843119 (0xcdd6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff19a587cf1d895ff1421bb064598306e517ca7
        Validity
            Not Before: Mar 24 14:45:16 2021 GMT
            Not After : Mar 24 14:45:16 2026 GMT
        Subject: CN=d28aacae0e5af59af785e095e377f42cd41888fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:1d:f6:55:a9:e9:ea:bf:48:d9:40:01:8d:
                    85:79:00:99:93:5f:86:bc:e4:19:32:29:19:69:e8:
                    9c:04:36:37:46:9a:bd:c7:5c:b4:ec:d7:41:63:0b:
                    04:96:7c:eb:b2:15:9f:d8:87:ac:6f:80:8f:e6:cf:
                    e5:2e:9a:df:ae:a8:3e:7c:81:08:1a:78:43:97:d8:
                    3e:37:f4:ef:1b:79:b4:0f:37:4c:37:5c:73:d3:cc:
                    cb:b2:fa:b6:f6:bb:65:97:42:25:f0:13:bd:c6:69:
                    1d:f7:46:bd:89:da:22:96:3e:4d:69:5c:64:46:d5:
                    75:83:41:de:13:33:2a:c5:34:0d:4b:52:90:52:19:
                    30:5d:cd:45:67:9b:e2:fb:a9:0d:0b:16:16:b4:1b:
                    65:62:f5:5b:ff:72:98:52:65:c9:8f:67:fe:3f:d2:
                    cf:5b:ae:98:63:0d:b1:8b:79:af:61:c6:93:bb:88:
                    68:d0:7e:1a:e4:a3:5a:b5:83:f4:ac:75:58:de:1c:
                    69:73:ab:e6:e1:89:58:06:e2:78:04:88:0f:f6:59:
                    07:50:d0:fd:8e:5f:5c:59:d5:77:18:2c:61:94:35:
                    ef:b7:fd:5e:0a:c7:96:7a:48:87:8c:02:20:7a:15:
                    65:42:ed:66:aa:db:f6:a0:88:bd:ba:48:bd:ac:e0:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:94:6B:1F:06:FD:93:AF:5A:D5:68:6C:99:34:91:31:A9:F1:BF:23
            X509v3 Authority Key Identifier:
                keyid:6D:6C:45:63:97:90:99:6E:7E:BD:65:5E:FB:C5:4A:F2:88:44:C5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff19a587cf1d895ff1421bb064598306e517ca7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/d28aacae0e5af59af785e095e377f42cd41888fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/1ff19a587cf1d895ff1421bb064598306e517ca7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:04:0f:44:0b:75:40:7c:56:99:f0:39:ff:81:4d:e4:bd:9a:
         97:75:e5:d4:aa:07:ce:c5:c9:09:41:5d:ec:85:44:5a:d7:6e:
         32:71:ed:e7:ae:96:48:3f:d5:60:b3:c2:d8:68:53:bd:09:80:
         f3:5a:ea:07:ed:dc:e3:7c:67:e9:42:ed:bd:00:47:83:f8:18:
         cd:72:6d:40:96:7b:fa:b9:3b:9a:f0:ab:1a:6f:bd:3f:e5:ec:
         fc:97:d9:f8:fd:1b:26:13:95:d9:c1:07:0d:a6:34:a7:aa:81:
         48:4e:26:f7:0a:f5:8b:08:bc:63:5c:fc:8a:bf:20:1a:7c:f6:
         c1:56:93:ae:08:0e:76:1a:1e:d8:85:9e:8d:04:c4:1e:47:08:
         02:bc:e0:94:28:e8:b8:13:fb:1a:4c:a8:97:b4:74:d8:c0:80:
         cf:26:e4:e9:28:be:13:22:f4:09:ec:2f:9c:4d:5e:23:2b:f1:
         6b:e6:0f:be:c6:45:4f:1f:08:40:1f:b3:ac:d7:c4:d8:15:71:
         40:6d:e3:dc:da:5c:06:ed:c6:2a:8c:4d:fc:9b:99:f5:8d:fc:
         db:25:5b:2f:e7:8f:99:18:d2:ca:a2:22:81:96:f6:bc:cc:82:
         19:0e:67:20:f8:6b:78:1c:03:c3:15:fd:da:6d:b1:75:4d:bf:
         ec:1b:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org