Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/14eb42cbdb7266055b01acd7daeeef08f39e02bf.roa
File:                     14eb42cbdb7266055b01acd7daeeef08f39e02bf.roa (raw, json)
Hash identifier:          Gc0F/MLUI80HWkL+821/RFl0y98an/W0bWYkcRLPvFk=
Subject key identifier:   4E:1C:B8:12:CA:4B:D9:8C:0F:4F:3A:18:9A:FD:39:2A:A8:DE:10:F2
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       10493C
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/14eb42cbdb7266055b01acd7daeeef08f39e02bf.roa
Signing time:             Fri 26 Nov 2021 20:54:04 +0000
ROA not before:           Thu 25 Nov 2021 03:00:00 +0000
ROA not after:            Sat 25 Nov 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        45.191.74.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067324 (0x10493c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Nov 25 03:00:00 2021 GMT
            Not After : Nov 25 03:00:00 2023 GMT
        Subject: CN=14eb42cbdb7266055b01acd7daeeef08f39e02bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:ea:fc:64:b0:51:a8:67:c0:c5:db:71:97:
                    2e:16:af:b0:54:c3:cd:81:a3:9b:43:19:eb:c0:bd:
                    27:36:4c:85:99:75:4b:50:16:1d:42:32:a8:93:7e:
                    5c:cb:d3:38:31:d3:85:a9:2c:a7:ae:63:97:70:57:
                    1f:42:1b:d6:f0:37:4f:ef:c9:f1:70:32:07:c9:64:
                    e3:e2:9f:47:c5:75:20:b3:2a:24:a3:f7:0b:86:57:
                    0f:62:89:b5:17:b4:7f:0e:6d:fc:23:4e:f3:34:49:
                    90:fc:6f:f4:8d:25:60:5f:42:c5:7e:c0:13:07:45:
                    e9:16:ab:bb:07:2a:12:bb:0c:a2:25:52:b3:33:fe:
                    e8:c8:54:ec:64:cc:06:7a:26:75:c3:9d:f6:76:a9:
                    f0:f3:21:88:55:70:b8:70:6f:2f:50:b3:1b:a1:1b:
                    2d:26:bf:2c:a1:de:ec:ea:72:f5:fc:20:a4:60:be:
                    c6:9f:d2:ca:82:1f:f9:e6:81:69:d7:f3:39:32:9e:
                    05:3d:df:79:86:b8:90:db:64:8a:85:11:d4:37:01:
                    26:2b:7e:61:27:c5:32:d0:7c:29:7d:0d:96:b0:9f:
                    ce:92:e0:fb:3b:6d:99:12:17:e4:89:d7:b1:2c:67:
                    86:9c:76:bd:ca:4c:64:ce:52:e5:c1:d3:7d:8f:6b:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1C:B8:12:CA:4B:D9:8C:0F:4F:3A:18:9A:FD:39:2A:A8:DE:10:F2
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/14eb42cbdb7266055b01acd7daeeef08f39e02bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:9a:1b:d7:87:f9:0b:5b:65:9e:c1:98:78:bd:50:0c:ca:
         fd:7c:83:2c:8e:da:4e:a9:83:5d:6a:7a:72:e6:9d:5e:d5:37:
         62:62:91:97:0a:d4:67:21:c7:a1:2b:59:19:03:f2:b5:c2:d8:
         0c:1e:c0:00:6d:53:3d:11:7b:88:f6:83:17:f6:cf:8b:7a:da:
         40:5f:1a:d3:0b:e9:75:7a:d1:d1:e7:ae:1b:8d:38:1c:ac:3c:
         06:1f:de:85:f5:a3:db:47:fb:f6:ca:51:81:24:e7:fa:50:81:
         25:5d:67:28:d3:d5:0d:25:ce:33:9c:22:b2:88:52:ca:e1:8b:
         f8:e5:7b:b7:cf:3c:78:0c:62:ab:14:98:82:8a:69:d6:5a:90:
         8b:ce:92:33:9f:5f:d7:ca:f3:93:49:d4:e4:b3:49:ab:6a:df:
         f5:5b:92:f4:63:3f:a1:66:c1:e8:72:c0:41:db:b4:05:00:30:
         bc:1c:b2:1f:54:ca:8c:d6:93:f1:91:49:9b:5a:36:cc:e6:f9:
         b7:c5:16:1a:0c:0e:05:7f:2f:1e:fa:51:54:a7:3f:33:17:b4:
         93:82:ac:7c:4f:40:39:77:30:b8:a3:7e:d6:4d:77:91:bf:2e:
         1d:b6:14:9c:a9:84:ad:b1:e1:60:75:39:a0:7f:37:45:2a:dc:
         f2:fc:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org