Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/716bfd45a5e5495eada015c575f9eddfcdec122e.roa
File:                     716bfd45a5e5495eada015c575f9eddfcdec122e.roa (raw, json)
Hash identifier:          tKmCW6ZiHkzHESmZ4OHBxR5Z7+ZSqWoVCZ948k/yeog=
Subject key identifier:   6F:2F:83:D3:B1:71:0C:2D:D6:0D:E9:65:CA:F0:21:1D:DF:4B:C3:47
Certificate issuer:       /CN=bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71
Certificate serial:       0C0FA3
Authority key identifier: 34:2D:AA:E7:5D:0A:15:A5:FC:A3:F1:04:F4:3D:98:8A:FC:5A:CC:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/716bfd45a5e5495eada015c575f9eddfcdec122e.roa
Signing time:             Wed 24 Mar 2021 14:43:24 +0000
ROA not before:           Wed 24 Mar 2021 14:43:24 +0000
ROA not after:            Tue 24 Mar 2026 14:43:24 +0000
asID:                     23470
IP address blocks:        45.170.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790435 (0xc0fa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71
        Validity
            Not Before: Mar 24 14:43:24 2021 GMT
            Not After : Mar 24 14:43:24 2026 GMT
        Subject: CN=716bfd45a5e5495eada015c575f9eddfcdec122e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:0a:fb:9c:11:66:f8:47:02:37:55:07:a2:
                    1e:7f:9d:57:26:36:38:c3:37:8f:da:f7:4c:b9:f2:
                    f3:58:5e:2f:af:c3:21:a7:af:1f:cb:01:af:ce:0a:
                    72:aa:7c:3a:70:2f:bd:67:c5:dd:a5:00:b4:57:76:
                    fa:98:27:c7:2a:f0:44:cc:f0:99:2c:16:9e:58:bd:
                    3d:03:ea:22:10:f4:01:0f:40:76:a7:fc:7d:8e:5f:
                    e7:3a:c8:83:09:54:35:57:aa:0c:10:18:34:d2:49:
                    d9:d5:0e:22:27:37:b7:21:a1:63:2c:a9:c0:6b:ee:
                    79:1c:2d:cf:88:42:7c:c7:6b:fa:99:b4:86:34:f6:
                    eb:96:c3:08:3c:5f:ab:fc:c5:ae:ca:47:04:c2:58:
                    a4:b6:57:19:7b:dd:41:b4:20:21:2c:01:66:16:a1:
                    8c:a4:90:2f:a7:90:fb:97:ba:f6:2d:60:94:5f:7d:
                    9f:28:61:59:85:25:d9:b3:29:ad:1c:08:0c:52:43:
                    5e:95:5d:8c:bf:d3:10:68:82:62:8d:27:b5:ab:6a:
                    e9:f4:d9:97:70:e7:0d:32:6f:da:07:80:5b:fb:ed:
                    28:15:ea:7c:e9:4d:0c:e0:50:a1:ed:75:c8:a5:02:
                    d8:fb:ea:c8:ec:de:51:0e:b5:3e:20:81:a7:ba:05:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:83:D3:B1:71:0C:2D:D6:0D:E9:65:CA:F0:21:1D:DF:4B:C3:47
            X509v3 Authority Key Identifier:
                keyid:34:2D:AA:E7:5D:0A:15:A5:FC:A3:F1:04:F4:3D:98:8A:FC:5A:CC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/716bfd45a5e5495eada015c575f9eddfcdec122e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:86:ce:dd:0f:a6:a4:1c:b2:19:e9:d6:47:c2:1d:28:ad:
         e7:ff:ce:0d:9b:7b:9c:f7:b9:02:35:ad:03:81:fe:a0:ce:70:
         74:3c:50:71:69:7c:70:ab:e8:d8:cd:5a:fa:29:9c:4f:32:0c:
         30:5b:c7:e8:a3:10:df:0a:cd:e6:3e:53:d4:ed:85:a7:6d:31:
         3f:bf:4b:ab:d2:44:a3:ae:ed:99:42:d8:22:83:5b:cc:e5:5d:
         ae:b6:ae:19:5e:7c:9f:8d:99:92:e2:38:e4:c8:dc:a9:e0:e1:
         59:57:da:2e:ec:77:5a:ee:06:55:12:34:82:78:58:8e:d5:a3:
         58:b5:6d:4d:9b:ce:3b:ec:84:48:e8:b9:88:f8:cb:28:18:98:
         64:82:e1:88:29:41:e2:b5:9f:e2:57:f6:0d:1b:4e:35:c7:a7:
         62:76:d8:47:98:f8:a1:4d:fc:58:5a:85:33:f0:26:4b:43:47:
         c5:99:13:d5:65:82:bb:7a:66:10:24:8a:79:49:0e:be:e3:8f:
         30:47:4b:02:b5:18:8c:96:2a:04:5a:9c:29:9e:f6:4e:04:05:
         2f:04:d9:66:30:d7:28:b7:c6:6a:44:ac:23:97:1b:83:e2:c8:
         21:4b:f9:14:ba:9f:25:32:db:79:11:2e:4b:f0:6e:bf:d6:49:
         8a:a7:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org