Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/9517aa42112a60aa2aa8c614abb129bce904588b.roa
File:                     9517aa42112a60aa2aa8c614abb129bce904588b.roa (raw, json)
Hash identifier:          o3wt6NXP8W277b2kkv+AawNogcMdexHbGvyBKUH9t4U=
Subject key identifier:   D4:8E:D0:B0:A8:60:2A:8E:B4:B1:EF:51:A2:A2:CE:E1:47:87:88:BC
Certificate issuer:       /CN=162120a907b927853fa0759b89cb5523b33e976c
Certificate serial:       126AD8
Authority key identifier: C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/9517aa42112a60aa2aa8c614abb129bce904588b.roa
Signing time:             Tue 18 Jan 2022 22:26:18 +0000
ROA not before:           Fri 14 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Mar 2027 03:00:00 +0000
asID:                     23487
IP address blocks:        45.178.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207000 (0x126ad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162120a907b927853fa0759b89cb5523b33e976c
        Validity
            Not Before: Jan 14 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2027 GMT
        Subject: CN=9517aa42112a60aa2aa8c614abb129bce904588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:3a:94:3e:f2:b8:67:9e:8c:06:68:0a:d2:
                    21:d9:76:07:cf:67:28:da:82:03:63:f7:ff:c5:c0:
                    0a:6e:0e:08:08:6b:84:a1:d1:4a:a4:fe:95:68:53:
                    02:77:0b:30:4c:43:9d:b9:d3:f8:33:2b:23:17:f8:
                    a4:88:ac:85:0d:dd:6a:87:3d:02:19:0b:2a:19:74:
                    9e:9b:54:f2:89:74:2f:f0:74:f8:46:fb:de:b5:47:
                    06:57:37:8e:3d:18:ec:0e:e2:5e:d7:b5:70:a2:f5:
                    74:ca:1d:75:46:95:fb:75:ce:21:5d:18:5d:85:48:
                    94:8e:74:00:15:64:ef:3b:25:3c:2d:ae:0e:25:f6:
                    f6:c4:4a:88:56:58:da:55:87:f2:b0:30:3a:a3:e5:
                    97:f4:28:56:c3:4a:8d:5d:42:39:02:e0:27:78:fa:
                    22:3b:5e:00:e9:76:8d:40:66:da:72:18:55:fa:89:
                    83:b5:32:23:bb:df:38:b5:52:d0:e3:dc:86:14:8e:
                    ce:b4:52:34:62:da:fa:fb:f0:75:58:7a:2b:cf:a7:
                    de:1f:c6:bf:51:7e:88:37:16:89:a2:c3:1b:4c:66:
                    44:a6:be:bf:c1:b5:b9:d2:26:f4:19:ac:d9:5c:51:
                    77:a7:f1:59:ed:9e:b5:0b:69:f8:10:b5:77:aa:04:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8E:D0:B0:A8:60:2A:8E:B4:B1:EF:51:A2:A2:CE:E1:47:87:88:BC
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/9517aa42112a60aa2aa8c614abb129bce904588b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/162120a907b927853fa0759b89cb5523b33e976c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:3a:6b:ab:3d:46:01:54:d9:72:c3:35:39:b7:e1:2f:9c:
         5a:de:d4:eb:db:15:b5:bd:65:8a:10:19:63:a7:b4:2b:5c:8f:
         30:ca:46:82:06:05:b8:25:c1:14:b8:31:85:58:b9:3c:7e:8c:
         0e:20:83:a0:89:34:99:b8:05:71:1f:06:de:76:24:5d:99:0e:
         fd:6d:7a:80:c5:a4:da:be:6a:b0:c6:e2:92:fb:00:c3:c7:e2:
         f7:93:5b:9a:c3:56:e0:89:73:34:21:50:bc:c9:e1:ed:43:fd:
         4a:6a:3c:3f:26:72:14:09:74:8a:0a:5d:3c:9b:26:72:96:cf:
         12:da:af:b9:02:de:f7:ce:15:33:fb:19:e4:30:bb:6b:d9:17:
         8f:19:ce:c5:28:aa:9f:19:9d:35:0c:6a:f2:e6:49:0d:07:83:
         a2:e0:3e:76:4b:fa:7e:39:0f:37:94:ee:9a:50:f8:84:12:06:
         33:be:c4:3f:23:99:2e:d5:1d:09:be:fd:3b:3c:75:29:1f:3d:
         07:bf:04:7b:af:e1:0c:01:6d:45:a1:f9:c0:da:3b:c0:75:33:
         66:9d:29:a8:c5:c1:e7:3f:1b:53:5c:3b:64:45:4e:b4:fc:d4:
         22:e2:cd:7e:89:74:b6:3a:78:a2:a5:95:bd:05:1e:03:97:ea:
         2e:81:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org