Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/8ec19b9eff5c382a8c6e8698317b43d344f70256.roa
File:                     8ec19b9eff5c382a8c6e8698317b43d344f70256.roa (raw, json)
Hash identifier:          p34VrDRBrbGK6U8/u+FJ5ZuRP9fL2eA3k8kvz9fwMgs=
Subject key identifier:   3B:7E:86:93:F6:EA:62:E3:E9:86:CE:F3:0B:BF:C5:2E:80:DE:C9:9A
Certificate issuer:       /CN=bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71
Certificate serial:       0C0C92
Authority key identifier: 34:2D:AA:E7:5D:0A:15:A5:FC:A3:F1:04:F4:3D:98:8A:FC:5A:CC:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/8ec19b9eff5c382a8c6e8698317b43d344f70256.roa
Signing time:             Wed 24 Mar 2021 14:43:24 +0000
ROA not before:           Wed 24 Mar 2021 14:43:24 +0000
ROA not after:            Tue 24 Mar 2026 14:43:24 +0000
asID:                     139235
IP address blocks:        45.170.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789650 (0xc0c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71
        Validity
            Not Before: Mar 24 14:43:24 2021 GMT
            Not After : Mar 24 14:43:24 2026 GMT
        Subject: CN=8ec19b9eff5c382a8c6e8698317b43d344f70256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:b6:52:ad:e9:af:5d:e3:4e:78:be:7a:78:
                    81:46:73:76:13:82:6f:e8:70:46:ef:09:5c:0c:56:
                    4f:29:af:c4:1a:2a:51:8e:f3:ff:82:7f:54:58:05:
                    c0:d5:81:91:c5:bb:5e:02:39:33:c5:0d:2a:09:64:
                    74:5c:33:98:64:e1:3e:b2:48:13:6c:27:80:89:80:
                    f5:ad:9f:76:b3:78:17:69:a1:78:1b:bd:35:5c:9a:
                    e9:4d:59:a4:35:8a:22:72:81:b6:7b:86:47:69:7e:
                    73:46:b8:98:25:45:46:77:2b:22:4f:44:18:e7:75:
                    c3:89:85:55:cc:11:4a:f6:a8:bf:b1:b7:25:5c:48:
                    f3:9d:1e:3d:3d:ad:b9:e9:81:5e:01:d4:e5:e8:df:
                    73:f9:a6:9e:ab:4a:79:0e:ff:19:45:16:4a:cc:5d:
                    ca:4c:04:3b:e3:46:7e:4e:65:ad:de:be:7f:26:8d:
                    27:a2:83:32:f4:00:c9:3f:0a:ef:64:23:90:39:b8:
                    00:b8:70:85:2e:c7:b3:85:ac:eb:20:b5:f5:7a:9f:
                    64:79:5a:5c:31:6a:21:b7:1e:33:de:e3:ea:e6:27:
                    3e:97:97:75:fd:e4:46:0c:75:1e:e8:0a:27:fa:8c:
                    2a:c7:c8:38:23:c2:de:c4:02:e1:0d:c7:38:5d:1c:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:86:93:F6:EA:62:E3:E9:86:CE:F3:0B:BF:C5:2E:80:DE:C9:9A
            X509v3 Authority Key Identifier:
                keyid:34:2D:AA:E7:5D:0A:15:A5:FC:A3:F1:04:F4:3D:98:8A:FC:5A:CC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/8ec19b9eff5c382a8c6e8698317b43d344f70256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:a9:83:52:1e:2b:77:f7:66:67:07:12:5c:cc:a8:1f:1e:
         09:87:d3:ce:c6:40:80:fc:3c:5a:42:6e:d1:a9:03:8f:c9:93:
         64:0e:fe:ff:84:94:0f:72:ca:53:d5:af:bd:9d:ed:50:7c:c6:
         e5:a8:3a:2f:d3:f0:23:cb:da:50:0c:86:44:4b:6d:41:31:87:
         16:71:2c:5f:1e:12:2c:44:14:2c:75:a8:e4:40:57:5f:f5:cf:
         0f:02:5b:ad:d0:fa:75:a1:90:5e:ab:7a:c9:da:13:ac:cb:1e:
         c2:4f:dc:96:f3:14:74:2a:6e:6f:0d:99:6c:14:14:ff:64:61:
         af:15:1b:d6:5e:04:21:10:c6:00:fc:bd:c4:1a:de:84:dd:3a:
         25:e5:7e:10:db:d3:b5:b6:71:23:89:61:c3:aa:bc:26:ad:9a:
         9e:9e:45:26:ad:e4:aa:b2:93:21:b5:b3:68:1c:0b:2d:82:57:
         74:a7:b6:00:63:52:b0:c3:e8:cc:ee:d5:c4:6b:4d:c6:bc:6b:
         d9:0f:86:81:28:fd:ce:f2:aa:60:e2:00:7d:7c:18:a4:62:e1:
         2f:d0:d8:2f:c6:e6:02:44:c1:68:31:a4:ca:2c:79:b0:b6:f2:
         b4:8e:5d:56:44:c8:d1:75:15:43:e3:1a:0f:26:69:49:9c:5e:
         30:78:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org