Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/c9b7af18b8e919188f2a197f4fde0cceff3d8ec8.roa
File:                     c9b7af18b8e919188f2a197f4fde0cceff3d8ec8.roa (raw, json)
Hash identifier:          t0xKKQsgAgqrhWZR3G7785m1NcuyRIckWjr+9PM/+Rk=
Subject key identifier:   DE:68:4D:C2:50:3E:AF:15:86:87:E2:5E:C3:2C:91:21:8C:2E:26:A6
Certificate issuer:       /CN=b5dca082181b21ea54e3fcb373c3ae36b89b6b8e
Certificate serial:       0C7411
Authority key identifier: 0F:D8:5A:F9:A2:48:0B:ED:3B:B9:AC:B7:69:BF:09:8C:0C:47:D2:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/c9b7af18b8e919188f2a197f4fde0cceff3d8ec8.roa
Signing time:             Wed 24 Mar 2021 14:42:03 +0000
ROA not before:           Wed 24 Mar 2021 14:42:03 +0000
ROA not after:            Tue 24 Mar 2026 14:42:03 +0000
asID:                     267713
IP address blocks:        45.164.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816145 (0xc7411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5dca082181b21ea54e3fcb373c3ae36b89b6b8e
        Validity
            Not Before: Mar 24 14:42:03 2021 GMT
            Not After : Mar 24 14:42:03 2026 GMT
        Subject: CN=c9b7af18b8e919188f2a197f4fde0cceff3d8ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:d2:36:a5:32:68:f4:0c:f6:65:98:e8:39:
                    2b:9f:7b:2d:10:3d:36:76:7b:38:e2:f6:1b:91:b1:
                    7b:2e:08:61:17:e5:fa:12:42:7d:39:05:f8:1a:76:
                    88:13:3e:2a:9f:6d:16:ff:21:6e:9b:ee:54:0e:b5:
                    55:23:fb:50:15:8b:6c:fc:32:7a:ba:87:15:ef:2a:
                    98:95:64:fb:17:5b:ac:f2:7a:73:60:24:d9:17:54:
                    e6:39:2e:26:42:48:be:5c:8e:00:0f:03:fb:f8:ff:
                    6e:91:cb:24:6f:c4:e3:24:83:6f:b5:6b:9c:a7:fb:
                    a1:c4:91:01:ea:04:60:8e:5d:db:4c:cd:e0:40:67:
                    2e:ee:4f:0a:2b:b4:47:64:42:04:ac:a3:17:50:87:
                    bf:fd:88:22:86:24:72:65:db:1d:14:48:33:c3:5d:
                    43:61:73:7b:cd:d0:56:57:8d:02:7a:c9:d0:6e:19:
                    f8:09:40:a8:24:13:97:e6:71:f5:7d:fe:eb:b4:83:
                    c5:4b:1b:c5:fe:da:84:d7:34:58:27:26:26:fd:ed:
                    fb:ad:ad:3d:37:84:a9:19:c6:43:84:ae:0d:33:48:
                    2e:9f:61:4f:a4:ae:c1:e3:d7:63:a2:12:5b:73:74:
                    70:ba:a5:64:78:8e:7c:a4:9e:cf:58:46:30:46:96:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:4D:C2:50:3E:AF:15:86:87:E2:5E:C3:2C:91:21:8C:2E:26:A6
            X509v3 Authority Key Identifier:
                keyid:0F:D8:5A:F9:A2:48:0B:ED:3B:B9:AC:B7:69:BF:09:8C:0C:47:D2:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/c9b7af18b8e919188f2a197f4fde0cceff3d8ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:2a:fd:c4:89:6a:57:14:66:c5:5d:fc:51:11:8f:4a:58:
         1a:9a:09:99:cb:24:04:1e:4d:74:4e:82:a4:98:d7:c8:84:6a:
         4d:fd:12:be:ba:ed:3b:50:66:46:92:26:fc:74:8e:41:61:3b:
         d4:46:e8:8d:49:44:7a:4e:01:92:e1:ef:35:b7:55:f5:4c:be:
         20:14:9d:12:9a:c4:2a:3b:6a:36:e6:31:cf:4f:cb:43:4a:1a:
         e4:37:8c:28:15:8e:80:0f:01:b5:b7:8f:c3:4b:36:1c:ab:08:
         39:f3:3f:dc:63:0c:64:b9:7c:f7:fc:f5:79:a0:c6:b4:66:67:
         2c:c2:69:1e:10:6e:ed:dc:e9:fe:3c:3a:e0:16:b8:01:08:07:
         29:e9:6a:1d:a1:8d:b5:08:9d:e7:eb:6f:8c:e6:60:00:d7:79:
         9c:b5:6e:72:85:46:77:ff:35:9c:81:6c:d1:ff:3e:c8:8f:eb:
         a8:6f:ad:0a:a4:3f:40:09:fe:4a:0f:7e:31:bb:7f:db:6e:7f:
         95:b5:b8:fc:a6:f8:8b:af:cd:84:1b:cb:e1:90:f9:5a:f2:79:
         8c:82:22:63:0d:0b:58:67:f0:8c:4a:d5:b6:fb:47:04:ee:80:
         36:48:49:b2:f0:27:8a:55:ab:94:72:e9:f7:16:c7:50:be:e1:
         0f:10:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org