Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/91fb11427c917630461b37ba3b3156012089bfa6.roa
File:                     91fb11427c917630461b37ba3b3156012089bfa6.roa (raw, json)
Hash identifier:          9LCJ88GJW9idcffftuwCbTPI0cC23sdqU4iMrADzsl4=
Subject key identifier:   3E:D3:7D:48:CB:27:79:69:50:F8:D4:E7:C3:74:76:C1:AC:3F:BE:31
Certificate issuer:       /CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
Certificate serial:       1F03
Authority key identifier: E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/91fb11427c917630461b37ba3b3156012089bfa6.roa
Signing time:             Mon 03 Oct 2022 17:41:12 +0000
ROA not before:           Mon 03 Oct 2022 17:39:50 +0000
ROA not after:            Thu 03 Oct 2024 18:39:50 +0000
asID:                     267735
IP address blocks:        45.167.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7939 (0x1f03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
        Validity
            Not Before: Oct  3 17:39:50 2022 GMT
            Not After : Oct  3 18:39:50 2024 GMT
        Subject: CN=91fb11427c917630461b37ba3b3156012089bfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:94:3e:83:d0:a9:91:fe:0a:23:3b:c8:0f:
                    7b:e9:4b:0b:af:cd:3b:bc:40:32:4e:6d:7d:1c:53:
                    e7:be:12:a2:7f:69:c6:74:96:80:4f:23:4b:10:f9:
                    7f:98:b9:f2:1d:22:56:bf:05:40:f5:9f:d0:f4:d7:
                    27:df:55:c0:d3:b9:eb:61:5f:f0:fb:a9:6e:ee:fb:
                    4c:6c:df:89:1e:da:b4:5d:31:6b:61:40:b3:24:79:
                    d0:b7:18:f8:81:23:59:4b:32:60:13:c4:9e:23:13:
                    98:ca:7a:58:3e:01:4e:3b:78:40:4c:f6:85:7f:f6:
                    0c:8a:8c:63:a1:c3:a9:49:b0:c3:fe:64:aa:c9:c9:
                    c6:b3:1b:8e:83:c4:32:63:9b:2c:5e:00:03:6a:19:
                    54:0f:9a:f4:50:bf:f5:4e:99:11:75:52:5c:35:dc:
                    18:b1:e5:44:6a:10:c4:88:2a:16:43:60:27:3f:40:
                    c4:69:6f:0d:2d:02:6d:e7:94:7e:27:7e:b8:90:14:
                    a1:fa:62:62:25:5f:09:fe:31:0a:60:24:c3:41:3a:
                    64:2d:3c:c0:ba:87:a0:c9:ff:af:8c:78:cd:0e:01:
                    d5:19:c7:57:ef:f4:b0:10:89:11:94:aa:15:8c:6e:
                    06:0a:a3:5f:8d:65:7f:b5:ba:09:7f:9b:cb:e2:d7:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:7D:48:CB:27:79:69:50:F8:D4:E7:C3:74:76:C1:AC:3F:BE:31
            X509v3 Authority Key Identifier:
                keyid:E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/91fb11427c917630461b37ba3b3156012089bfa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:22:c1:48:50:b8:b4:ef:9a:74:f1:0e:0a:8c:41:c9:4d:ee:
         bf:09:41:fc:f7:8f:32:a0:0b:82:76:8e:f1:a5:8a:2f:49:d4:
         ae:19:0a:6a:52:cd:35:81:b6:4d:0b:bd:d7:32:2e:a5:8e:56:
         fe:bd:8b:c0:13:df:ef:7e:22:41:64:63:9b:f3:58:2d:92:fe:
         21:4d:9f:eb:9d:7d:c9:91:21:39:77:fa:6f:76:17:28:99:ac:
         23:f5:0f:36:80:d3:53:db:aa:4a:48:fb:1e:cc:7e:2c:4b:01:
         f3:c7:54:9b:5d:bd:dd:05:94:81:7a:c8:11:36:ee:9a:dd:7a:
         e6:da:f0:7a:84:b4:7a:cf:53:ee:32:3a:8c:eb:09:9e:a5:ab:
         e1:24:fb:85:e5:2c:62:02:a5:40:76:24:96:b3:d7:64:40:01:
         bb:ee:44:28:6f:d3:cd:18:bb:fb:fe:d0:3f:d9:99:7a:8c:09:
         2a:88:ec:68:93:e7:39:9a:b9:35:69:67:7d:76:9a:93:fc:fb:
         8c:ae:7d:64:e7:2b:3e:ee:70:f9:d2:bd:c4:2e:13:61:fe:f6:
         56:62:a9:61:74:24:62:e7:f6:2c:39:17:7e:d0:98:6b:31:61:
         dc:a0:cf:bf:a4:e2:55:f8:97:6f:ec:8f:3a:44:ab:df:f2:0c:
         68:b5:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org