Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/7aada4b8713222391d9ed59ac66a0b977c277789.roa
File:                     7aada4b8713222391d9ed59ac66a0b977c277789.roa (raw, json)
Hash identifier:          G+j9eMQbsHGlRVXu7f1b1Sjnr72dhQ6p9tBEunemANk=
Subject key identifier:   AC:98:E1:95:F0:3F:82:99:B7:B4:FF:80:F9:4E:3A:99:81:59:DC:15
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       173977
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/7aada4b8713222391d9ed59ac66a0b977c277789.roa
Signing time:             Wed 17 Aug 2022 06:02:43 +0000
ROA not before:           Fri 26 Nov 2021 03:00:00 +0000
ROA not after:            Sun 26 Nov 2023 03:00:00 +0000
asID:                     269893
IP address blocks:        45.191.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522039 (0x173977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Nov 26 03:00:00 2021 GMT
            Not After : Nov 26 03:00:00 2023 GMT
        Subject: CN=7aada4b8713222391d9ed59ac66a0b977c277789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:ca:af:a1:e1:b7:37:ab:9b:7d:c5:c7:f7:
                    50:df:98:1b:a0:40:e3:65:30:e4:53:92:48:c7:cb:
                    17:59:f9:20:d2:a3:56:99:7a:3d:30:c8:98:5a:ef:
                    a7:c5:53:af:3a:15:ea:60:58:23:72:eb:30:c4:9b:
                    59:52:4c:50:60:b7:b4:f1:0d:e9:a8:0e:88:67:c5:
                    33:04:cc:b2:4a:74:52:09:17:7a:e2:4a:be:53:da:
                    f6:08:71:95:7d:f7:92:41:39:3a:f8:78:f8:6b:e7:
                    7f:af:43:6d:05:5a:d1:20:c5:3f:ff:44:c2:0b:9c:
                    b7:97:da:b1:ed:66:7a:c8:33:f2:08:a5:d0:83:eb:
                    7d:79:0b:99:a8:8c:b6:3b:99:06:5b:28:d6:c9:75:
                    7a:39:09:62:95:8b:61:ae:ee:8e:09:ec:e7:69:c1:
                    ce:9d:02:18:97:50:c8:0a:fd:64:85:85:a1:70:0f:
                    ff:bf:60:e8:0a:06:77:82:bc:d0:9d:ba:c9:fa:93:
                    33:b6:03:9c:f6:99:39:66:83:04:48:73:96:6a:4e:
                    16:be:39:15:ee:a0:bf:6f:e4:b0:0a:f7:c1:1d:ac:
                    8e:24:b6:be:d5:65:fa:50:2b:b6:63:d6:a1:b0:e6:
                    9d:0c:ab:82:c7:41:29:ef:6b:58:37:32:54:cf:4e:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:E1:95:F0:3F:82:99:B7:B4:FF:80:F9:4E:3A:99:81:59:DC:15
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/7aada4b8713222391d9ed59ac66a0b977c277789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:6e:53:e8:b9:35:1e:05:24:44:90:f1:ce:a0:e7:06:eb:
         08:12:76:9e:05:f8:76:cf:9f:cc:f9:f7:1c:8a:4e:32:bd:2f:
         13:24:ce:d9:24:05:7c:cd:27:f3:ae:8c:d9:48:79:b6:c4:9d:
         b5:8b:6d:3c:e5:ec:b0:20:08:ef:ab:1a:66:bf:f4:e3:af:dd:
         19:53:0c:42:d5:00:52:51:e2:94:ee:1f:c3:a4:70:9a:42:0d:
         be:be:9c:3c:73:72:12:8b:e6:25:d4:44:66:6e:b2:80:2c:2f:
         c5:c2:e1:d8:89:27:3c:89:3e:e9:c5:c5:0f:3b:d3:f8:59:da:
         8a:7f:d7:a3:51:cb:4f:87:bb:e1:9b:fc:0d:e0:34:71:77:0d:
         02:c5:a8:6b:f6:c5:77:5d:6f:90:09:9c:ec:42:7c:b8:c1:3a:
         e4:0e:7c:f2:e4:99:ef:94:97:90:1b:f6:dd:e0:36:eb:e1:f6:
         e8:2e:e6:fd:77:f2:74:fd:b0:3c:9a:5f:7a:75:bd:56:45:bd:
         e8:e3:c1:19:3f:e9:1a:ff:14:d7:7d:46:20:76:e2:4f:74:6d:
         87:bd:d1:ff:f8:5d:96:43:75:9e:75:30:83:43:11:24:48:44:
         ac:30:5a:e0:65:7e:a6:cb:1c:2f:c2:59:25:42:63:2a:cd:b2:
         d4:5e:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org