Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/fc00b638416e0c8264ada4409390c1f34b159baf.roa
File:                     fc00b638416e0c8264ada4409390c1f34b159baf.roa (raw, json)
Hash identifier:          PrLkVv7Ta2gi4KI9UmupWGwy74SH1BOPpCeAu5CWSlY=
Subject key identifier:   4B:CB:AC:4A:5B:4D:6C:45:97:72:33:46:58:CA:16:E2:CC:E8:0E:3E
Certificate issuer:       /CN=bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71
Certificate serial:       0C10A1
Authority key identifier: 34:2D:AA:E7:5D:0A:15:A5:FC:A3:F1:04:F4:3D:98:8A:FC:5A:CC:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/fc00b638416e0c8264ada4409390c1f34b159baf.roa
Signing time:             Wed 24 Mar 2021 14:43:24 +0000
ROA not before:           Wed 24 Mar 2021 14:43:24 +0000
ROA not after:            Tue 24 Mar 2026 14:43:24 +0000
asID:                     23470
IP address blocks:        45.170.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790689 (0xc10a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71
        Validity
            Not Before: Mar 24 14:43:24 2021 GMT
            Not After : Mar 24 14:43:24 2026 GMT
        Subject: CN=fc00b638416e0c8264ada4409390c1f34b159baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:ec:2c:19:aa:6e:5e:64:09:32:bf:d2:81:
                    44:a8:32:49:1f:fb:54:9e:98:1e:40:61:a2:cd:9d:
                    9a:93:d2:43:9c:b2:25:90:e6:94:1b:9e:b9:55:02:
                    1d:2e:51:fb:e7:73:e9:51:75:d3:62:ef:8f:b0:09:
                    59:21:02:48:65:d2:03:10:fa:c4:82:87:3d:05:77:
                    2f:92:cb:45:f9:c0:9a:9e:01:89:cf:03:a1:eb:60:
                    c9:22:25:a5:eb:82:00:09:d3:53:cd:1c:1a:9e:98:
                    c6:b5:70:be:cc:54:74:d8:cd:9b:65:40:b8:a0:9b:
                    8d:86:41:3f:40:0a:69:2d:67:5a:02:4d:b4:b3:e6:
                    12:01:e7:e2:ef:2d:68:2e:56:f5:ec:e5:61:70:5a:
                    88:d4:1f:6b:b6:0f:fb:6b:ab:1e:49:78:e3:39:82:
                    56:26:23:2e:40:71:97:d0:7f:68:b6:4f:55:9e:09:
                    4d:3a:ee:90:f7:68:73:f9:5c:8e:82:34:74:52:f6:
                    f1:03:31:25:af:f3:7a:22:0a:07:60:fb:95:f2:29:
                    6d:36:23:6b:45:85:92:04:ec:d6:b5:0d:ab:7c:df:
                    02:3c:19:b1:f1:5f:e2:69:b4:68:49:0e:4b:84:47:
                    ba:30:fb:38:9b:9a:99:8d:f9:6f:1e:d3:29:7c:2d:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CB:AC:4A:5B:4D:6C:45:97:72:33:46:58:CA:16:E2:CC:E8:0E:3E
            X509v3 Authority Key Identifier:
                keyid:34:2D:AA:E7:5D:0A:15:A5:FC:A3:F1:04:F4:3D:98:8A:FC:5A:CC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/fc00b638416e0c8264ada4409390c1f34b159baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f8ab6d8-306e-4073-8c75-640ad4d8e16a/bb9b41db8cf86aaef9adf354d3fe6f72ac2b9d71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:11:72:7d:0d:25:a2:51:a4:1c:97:fa:92:fa:60:cb:01:
         45:12:5c:3b:71:75:88:98:01:23:81:1f:8b:ee:f6:97:97:69:
         7a:2e:64:e2:98:a9:34:76:8c:14:b3:fa:f2:fc:25:42:13:6b:
         c1:17:e0:bb:be:c5:1f:e8:a1:62:1d:4e:07:e8:6a:99:eb:a3:
         f0:36:0d:13:26:82:a7:66:36:ac:bb:de:ff:bb:54:e3:55:b1:
         5b:9f:01:85:6d:3c:fa:43:b2:b8:16:04:0a:d7:39:73:d3:a8:
         67:fa:54:62:61:90:40:49:55:c1:1f:4e:e6:63:1e:d8:3e:90:
         c8:d1:11:99:71:0d:68:a0:d2:18:2c:ea:70:94:20:e6:94:2d:
         ce:cf:16:59:45:41:ee:e4:11:f8:37:f8:19:8a:5b:12:0c:3b:
         d7:6a:ab:ca:6e:5f:1f:33:f2:3c:ee:5e:1e:6d:2c:a6:49:08:
         fb:62:41:77:58:2c:d2:68:7b:a6:17:b0:13:2d:c4:89:e1:a2:
         4e:bd:2f:0a:3f:7a:43:31:b5:07:34:8b:c4:5a:7f:a5:07:cd:
         92:a4:f3:e2:eb:48:a8:17:8e:49:52:59:3e:f3:0c:0d:9d:b1:
         7b:3a:c0:f1:77:5d:db:38:88:12:17:22:66:14:0c:8f:3e:e6:
         c3:9f:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org