Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/b47fb84ee0daa45aaeea606f3b3372d6a7f7a853.roa
File:                     b47fb84ee0daa45aaeea606f3b3372d6a7f7a853.roa (raw, json)
Hash identifier:          sglQ9sGV/2d6PO0NruTtlBPg46GCl7D3afnB4qAYGP4=
Subject key identifier:   2B:A0:D9:71:11:60:F9:27:07:9A:7A:D7:0F:11:2A:5D:6D:F5:B6:AF
Certificate issuer:       /CN=162120a907b927853fa0759b89cb5523b33e976c
Certificate serial:       126DB9
Authority key identifier: C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/b47fb84ee0daa45aaeea606f3b3372d6a7f7a853.roa
Signing time:             Tue 18 Jan 2022 22:27:03 +0000
ROA not before:           Fri 14 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Mar 2027 03:00:00 +0000
asID:                     23487
IP address blocks:        45.178.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207737 (0x126db9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162120a907b927853fa0759b89cb5523b33e976c
        Validity
            Not Before: Jan 14 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2027 GMT
        Subject: CN=b47fb84ee0daa45aaeea606f3b3372d6a7f7a853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:99:97:41:91:45:89:70:ad:38:65:c4:c2:
                    4d:64:2f:01:d9:15:a9:4d:8b:fa:4f:58:62:e8:66:
                    71:e3:fc:70:95:6b:0a:bb:ab:d0:29:7f:f9:ad:12:
                    1d:bf:00:ab:f3:d1:07:a8:4d:ac:22:6a:90:97:66:
                    a3:05:c7:1c:01:81:1a:84:6b:33:a2:83:55:08:17:
                    c4:9b:5f:e2:15:0c:be:d3:95:d8:98:60:ed:8d:ea:
                    13:42:b1:ba:ab:e2:78:a1:3d:19:67:91:29:ab:dc:
                    6f:c5:fe:c2:59:1a:56:c7:90:03:bb:06:8d:af:f0:
                    3f:f1:80:bb:5f:ef:0b:72:cc:8c:ea:e4:4d:be:9a:
                    49:8f:51:5b:91:4a:3b:23:d7:89:7b:a5:39:e2:44:
                    3d:7c:a8:d0:2a:32:99:6d:f1:84:d2:fa:c0:92:c5:
                    ef:56:65:2b:f2:57:7f:40:eb:5d:72:d9:5d:56:fa:
                    8a:05:78:93:c0:38:ea:3d:a4:f6:78:70:f5:cd:f7:
                    fa:d2:06:e9:c5:d2:16:07:47:36:07:a1:91:c7:43:
                    cd:6f:59:78:e6:f4:f6:2d:e7:be:fd:5b:d8:90:47:
                    69:1e:ff:cf:ba:31:69:a7:86:15:bb:4f:52:5a:65:
                    af:70:30:9f:25:1a:1e:45:ec:d1:7e:14:4a:b1:14:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:D9:71:11:60:F9:27:07:9A:7A:D7:0F:11:2A:5D:6D:F5:B6:AF
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/b47fb84ee0daa45aaeea606f3b3372d6a7f7a853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/162120a907b927853fa0759b89cb5523b33e976c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:09:ce:cb:e4:09:ec:f2:95:28:a7:06:37:35:95:11:c5:
         5c:62:f4:8f:47:90:5b:ca:03:a8:95:6f:da:cc:1a:1f:ce:a3:
         61:af:99:68:e3:92:fa:da:85:9b:65:6c:da:2b:d0:0c:08:f2:
         1a:f8:d3:ee:64:c1:b4:91:56:64:bf:d7:a8:e2:40:b9:a6:4f:
         8e:a4:2b:76:2d:9b:6e:63:79:fd:7b:64:f0:01:af:17:47:27:
         86:1c:f6:29:a5:02:68:e7:80:56:47:1d:9d:b6:1c:5b:37:4a:
         45:3a:e2:9a:e0:a2:fb:5d:49:79:a4:f5:3f:bb:a9:5a:fb:6b:
         f2:4a:54:2f:31:ab:4e:d3:01:42:37:b1:6e:43:e1:40:2a:cb:
         7c:f2:9a:98:96:d1:69:14:6f:6d:8c:c9:ba:14:38:18:d9:6b:
         a8:10:17:66:cf:c9:94:9c:bd:62:c0:84:14:b6:c0:1b:6b:b2:
         9e:99:4a:50:f1:ff:a7:d1:e3:27:5d:dd:cb:5c:64:98:67:ed:
         ae:d0:1f:c0:5a:0c:22:42:6e:d6:86:5f:00:ea:0d:a2:6b:90:
         f4:46:ef:ea:c2:25:1e:5a:f9:b6:ec:3f:ff:f8:91:e9:1e:ae:
         ce:6f:bb:8c:5c:53:27:8b:ea:99:03:b1:cb:96:3d:f6:ba:29:
         6e:b0:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org