Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/7cdf18e15f9f5faace9c7e3c26f5453034e9a241.roa
File:                     7cdf18e15f9f5faace9c7e3c26f5453034e9a241.roa (raw, json)
Hash identifier:          YZQAG/BxVV9Qi6UkSzDXpGDNbdmQOAO18O+oD03VWTg=
Subject key identifier:   EF:A9:3A:00:8A:7F:17:0D:37:23:16:29:B2:D0:67:17:4E:15:6E:B0
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       170C1E
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/7cdf18e15f9f5faace9c7e3c26f5453034e9a241.roa
Signing time:             Wed 10 Aug 2022 17:38:58 +0000
ROA not before:           Fri 26 Nov 2021 03:00:00 +0000
ROA not after:            Sun 26 Nov 2023 03:00:00 +0000
asID:                     269893
IP address blocks:        45.191.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510430 (0x170c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Nov 26 03:00:00 2021 GMT
            Not After : Nov 26 03:00:00 2023 GMT
        Subject: CN=7cdf18e15f9f5faace9c7e3c26f5453034e9a241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:ea:46:bc:39:79:a0:44:06:1e:48:dd:38:
                    3d:43:96:38:30:b1:67:ed:98:17:27:3e:a3:a0:dd:
                    71:44:38:ec:70:f5:22:92:7b:8d:06:58:c8:44:06:
                    34:7b:19:bc:1d:95:03:e9:fa:d4:ac:47:fa:56:bd:
                    05:c4:a3:41:bc:86:42:25:5f:01:92:38:d5:7c:05:
                    d0:44:67:11:68:05:e5:fa:ff:c8:c2:9b:72:d1:3c:
                    62:dd:4c:a1:22:35:5b:4f:04:4e:25:e8:84:ca:5d:
                    e8:0f:bf:ef:91:7e:cb:22:d0:25:ec:bf:24:d1:17:
                    87:95:d1:40:ae:eb:1f:06:07:1f:f4:20:9c:6c:c5:
                    1a:ff:e5:48:dd:b5:39:d2:37:8f:af:ae:ee:61:30:
                    14:b9:79:50:16:2a:cb:9a:2f:16:ad:9b:68:8d:60:
                    fd:a0:b5:27:b5:aa:81:5f:e2:b6:51:b9:90:a4:50:
                    8a:69:7c:ff:a1:4a:10:d9:68:34:42:b7:fa:b3:d0:
                    9d:e0:dc:71:05:2a:b8:6c:72:b5:21:1a:4b:4c:49:
                    92:48:e9:52:d1:d2:7a:68:22:75:27:9a:b6:ed:6b:
                    04:ef:3c:5c:9e:6c:b3:f6:cb:2d:2d:18:a9:b4:c6:
                    87:87:26:1d:ac:9f:37:6d:42:06:0e:a1:d7:c5:97:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:3A:00:8A:7F:17:0D:37:23:16:29:B2:D0:67:17:4E:15:6E:B0
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/7cdf18e15f9f5faace9c7e3c26f5453034e9a241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b5:9a:d2:7a:a5:7b:90:01:88:d4:bc:6a:9e:ad:6d:20:08:
         ee:77:c6:8c:83:2f:a6:08:52:05:57:8a:93:e9:b0:81:29:53:
         ae:23:0c:be:ae:89:59:10:34:dc:db:a6:54:4e:f1:92:eb:8e:
         0a:8b:21:05:24:23:62:e5:0e:ec:21:3e:9c:17:9e:99:19:3c:
         e4:a2:46:86:b2:85:93:28:02:f1:b2:3d:ef:c9:17:4c:86:38:
         8f:18:58:83:fa:5b:ff:0f:cc:55:3a:54:1a:71:19:d9:5a:61:
         2a:6b:ff:38:2c:d6:66:cb:23:c2:f3:c0:8f:01:07:9e:9e:e4:
         15:3c:2b:fe:5d:01:3c:e5:d8:72:cf:00:30:9c:9b:fe:37:a5:
         94:e4:3c:18:fb:66:33:76:3e:28:c5:8e:c7:f9:db:d2:d9:e0:
         17:29:15:8b:4c:4e:a8:da:70:bb:3f:8a:4c:c6:bd:2f:d5:09:
         1d:99:bd:7e:93:45:16:17:95:a8:86:dd:27:ac:66:7b:37:01:
         47:4f:b0:4e:c6:9f:79:d9:61:12:77:a9:71:4e:86:68:b5:6f:
         95:3c:d6:0e:2a:94:37:74:8e:ba:11:68:87:df:c2:33:d6:62:
         6b:5b:ee:d3:d7:ee:f6:60:96:85:3b:bc:74:d9:93:ed:f0:62:
         a6:4b:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org