Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/3b7005b0ad2ed5602e312fe36b5422c181863779.roa
File:                     3b7005b0ad2ed5602e312fe36b5422c181863779.roa (raw, json)
Hash identifier:          KZfo2RqjV5RXejq8Ezbzh7zZZK55sfcJS8SReVs4Bmk=
Subject key identifier:   DD:2A:9B:5C:1D:7D:F7:1F:EC:77:B6:A5:7C:06:C2:5B:D9:70:4A:7A
Certificate issuer:       /CN=fe560058f1eca896c70528663a43bbfd22ac3902
Certificate serial:       1058CD
Authority key identifier: F3:B8:2A:61:B9:D0:96:CF:95:FB:05:90:BA:F7:98:30:AA:F8:9E:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe560058f1eca896c70528663a43bbfd22ac3902.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/3b7005b0ad2ed5602e312fe36b5422c181863779.roa
Signing time:             Fri 26 Aug 2022 18:46:45 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270101
IP address blocks:        45.6.215.0/24 maxlen: 24
                          168.196.208.0/24 maxlen: 24
                          168.196.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071309 (0x1058cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe560058f1eca896c70528663a43bbfd22ac3902
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3b7005b0ad2ed5602e312fe36b5422c181863779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7e:3a:8b:65:91:67:83:6c:42:73:08:4e:35:
                    7a:f0:ec:18:7f:26:56:66:26:a3:c2:97:ae:b6:61:
                    0e:9e:e1:c1:d9:22:03:27:ef:93:f8:57:9f:fd:9c:
                    02:4d:d4:64:0d:bf:60:fc:ed:50:98:54:91:9f:30:
                    90:56:7b:71:4d:75:83:b9:c0:c4:88:48:23:17:73:
                    6d:44:4e:e0:db:c8:f6:81:3a:a9:0b:26:8c:2f:fa:
                    c4:14:b9:3a:7c:de:4f:30:47:0c:83:9d:9e:e7:f3:
                    cc:b4:68:67:8f:85:4d:8f:29:1c:a6:6b:a7:8c:61:
                    83:82:4b:35:ba:ea:25:1c:48:8d:78:64:c6:93:f6:
                    88:a9:d8:07:c3:19:bf:aa:28:06:8b:9f:06:13:2e:
                    45:d3:b8:4e:a6:d0:32:ec:96:db:8d:67:a0:82:35:
                    81:68:10:d5:0f:24:04:68:9f:cb:54:56:b6:14:b4:
                    91:90:8f:00:91:af:98:4d:7b:3c:a6:ef:49:24:95:
                    a6:be:22:76:55:64:f0:7c:2f:3b:05:60:9e:9d:9c:
                    94:68:9f:99:02:74:1f:19:0f:d8:66:4a:51:05:e5:
                    46:bc:ec:05:b4:bf:b5:82:90:a6:65:5a:7a:45:5d:
                    7d:8a:31:d6:e5:05:ed:29:e5:e0:08:bb:ca:65:8c:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:9B:5C:1D:7D:F7:1F:EC:77:B6:A5:7C:06:C2:5B:D9:70:4A:7A
            X509v3 Authority Key Identifier:
                keyid:F3:B8:2A:61:B9:D0:96:CF:95:FB:05:90:BA:F7:98:30:AA:F8:9E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe560058f1eca896c70528663a43bbfd22ac3902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/3b7005b0ad2ed5602e312fe36b5422c181863779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/fe560058f1eca896c70528663a43bbfd22ac3902.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.215.0/24
                  168.196.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:73:2c:7f:cc:47:be:8c:12:f6:2c:06:4c:27:3a:23:15:
         94:d8:15:39:3f:da:52:89:46:6d:ea:22:f6:6c:d7:a6:6f:34:
         5a:85:f1:aa:3f:bf:65:e9:69:a4:83:46:a1:3f:3d:65:8b:1f:
         00:75:30:cf:a2:4b:b6:fe:2d:2d:b5:73:35:b2:13:f4:4e:fa:
         b0:ec:62:0a:c0:9d:75:fe:ac:22:ad:17:62:f7:8d:29:68:3b:
         d6:6e:06:97:75:a4:8d:c2:3e:72:3a:64:d1:94:82:d3:b2:be:
         6d:ec:94:3d:d4:68:0f:8d:a2:82:87:05:fa:55:2d:f1:9a:4a:
         02:29:43:13:ee:f7:7f:33:cb:c4:bc:3f:cd:1e:68:45:a2:dc:
         3b:2f:18:74:65:70:f8:0b:7a:dd:77:c7:d2:51:76:5e:e7:c1:
         2d:e8:2d:a6:5b:c8:0b:52:35:be:ad:d6:8e:0b:1b:9c:a4:45:
         33:33:c3:43:80:5e:9c:01:44:46:d5:21:96:90:27:d0:92:30:
         ed:45:b3:c6:b4:03:96:f2:9a:82:9c:53:4e:02:17:1b:44:67:
         22:fa:db:53:be:ad:fb:e8:05:3a:94:7f:3f:64:df:4b:07:56:
         6a:3a:28:01:be:67:ff:81:19:55:56:ff:c3:38:95:b3:45:de:
         1a:69:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org