Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/904cfb244d9551a3deac75547f3ac5fa803d5d2e.roa
File:                     904cfb244d9551a3deac75547f3ac5fa803d5d2e.roa (raw, json)
Hash identifier:          s9P8rv7amJYCy6+lvzh6DqInUbXk3xsl3qWvAEqu12c=
Subject key identifier:   6C:B2:B6:39:DC:A8:E7:B3:AF:A8:2E:19:08:B9:FD:45:F6:6D:6E:7F
Certificate issuer:       /CN=162120a907b927853fa0759b89cb5523b33e976c
Certificate serial:       126387
Authority key identifier: C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/904cfb244d9551a3deac75547f3ac5fa803d5d2e.roa
Signing time:             Tue 18 Jan 2022 22:25:32 +0000
ROA not before:           Fri 14 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Mar 2027 03:00:00 +0000
asID:                     23487
IP address blocks:        45.178.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205127 (0x126387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162120a907b927853fa0759b89cb5523b33e976c
        Validity
            Not Before: Jan 14 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2027 GMT
        Subject: CN=904cfb244d9551a3deac75547f3ac5fa803d5d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:4c:a9:1e:b6:aa:a7:74:bb:0e:b8:a1:0c:
                    9d:aa:0d:5e:6f:33:1f:72:6e:0a:4c:b3:fd:da:4f:
                    93:d6:5c:53:a7:1f:c3:52:e0:f1:e3:be:07:93:a9:
                    15:1b:85:a0:40:86:22:31:15:21:49:dd:e1:08:75:
                    ff:fa:7c:91:82:80:4c:1f:f9:71:b3:0c:67:94:6a:
                    99:50:16:af:b3:61:49:2f:5c:ce:41:f8:df:ed:8e:
                    96:e1:d5:ab:81:8d:a0:3f:60:09:20:5b:0e:00:f0:
                    f7:af:e1:e7:b2:d3:ee:46:54:d6:6f:55:31:43:fa:
                    ac:09:c3:ce:02:e1:94:34:13:bf:dd:b0:6e:b3:73:
                    bc:f3:80:bb:e2:99:fc:d8:22:d5:c2:26:50:3f:bd:
                    d3:79:11:07:01:8f:e4:8e:ec:fb:68:57:5d:d3:5e:
                    4c:9b:e8:d4:6d:6c:48:fb:db:cc:4e:66:b7:33:7c:
                    72:c6:e0:72:76:7a:dc:dd:3d:eb:f8:be:3d:f8:f6:
                    53:e0:39:cb:52:99:a4:ff:79:3f:95:3b:2f:d7:4e:
                    cb:89:fa:91:fd:7e:f9:89:53:03:86:5d:32:8d:68:
                    3b:d6:f7:29:06:86:f8:07:77:09:7a:7b:ba:ff:de:
                    5b:4e:3c:f0:66:11:35:19:18:6d:98:52:82:e9:13:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:B6:39:DC:A8:E7:B3:AF:A8:2E:19:08:B9:FD:45:F6:6D:6E:7F
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/904cfb244d9551a3deac75547f3ac5fa803d5d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/162120a907b927853fa0759b89cb5523b33e976c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:07:17:f2:67:5a:51:cc:bb:93:37:3f:6f:03:4e:27:76:
         cf:bc:e8:96:b0:df:91:28:b7:6c:bf:10:cc:64:33:0e:92:f4:
         0d:bd:b7:d0:08:88:c4:8e:66:d1:9a:b5:06:bb:99:f0:e2:75:
         f5:4e:ad:ba:91:cd:fe:ab:43:72:b8:85:c9:93:78:ad:d1:0a:
         b0:a6:ea:b7:59:0c:13:de:e5:0a:1e:25:2a:dd:62:9c:a6:bf:
         04:75:f0:b2:b9:d8:46:6b:6b:0f:78:f1:c3:4f:2d:63:a5:e9:
         c4:8d:74:f8:24:c9:65:71:9b:2e:9e:4f:b4:f4:d0:94:a2:65:
         84:9f:4a:95:80:f7:b7:4f:e1:ee:af:1a:33:92:a9:e8:6e:1b:
         66:3f:f5:a8:a1:19:ad:6d:7a:e5:a2:3d:e9:25:6c:16:26:33:
         66:ac:c6:61:8e:3a:72:ad:a5:3d:33:49:26:d5:03:8c:8f:42:
         7b:82:59:2f:db:e1:c9:7f:3d:5a:fb:6d:f2:f1:59:4f:dd:96:
         da:e3:55:b6:46:49:85:b8:6c:f0:28:85:77:1c:87:a6:40:5e:
         f5:c6:5d:14:63:49:c2:9e:da:63:03:3c:33:a9:16:8a:46:ca:
         aa:bd:74:df:a7:cb:ad:61:63:6c:17:5b:9e:f6:82:cb:9a:97:
         b8:34:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org