Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/11d012c00e809d8851e03371a2e685739a4c5a37.roa
File:                     11d012c00e809d8851e03371a2e685739a4c5a37.roa (raw, json)
Hash identifier:          nquQA4Qo76LRAhxelpDAzNBiZPGlReVkR9t3AbUD88c=
Subject key identifier:   A7:14:33:FC:99:8F:D0:80:91:AB:B4:05:1B:18:C3:01:6F:97:0D:4B
Certificate issuer:       /CN=5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb
Certificate serial:       0C8C8D
Authority key identifier: 51:23:63:D1:74:CB:1D:34:BB:21:6B:0C:5F:91:05:0B:21:0E:AE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/11d012c00e809d8851e03371a2e685739a4c5a37.roa
Signing time:             Wed 24 Mar 2021 14:30:47 +0000
ROA not before:           Wed 24 Mar 2021 14:30:47 +0000
ROA not after:            Tue 24 Mar 2026 14:30:47 +0000
asID:                     266883
IP address blocks:        45.161.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822413 (0xc8c8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb
        Validity
            Not Before: Mar 24 14:30:47 2021 GMT
            Not After : Mar 24 14:30:47 2026 GMT
        Subject: CN=11d012c00e809d8851e03371a2e685739a4c5a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:b3:70:f2:62:30:55:a4:61:dc:5a:6f:c7:
                    93:db:15:44:2c:33:5f:31:3c:90:63:05:ba:94:97:
                    21:13:c8:20:64:81:e1:93:27:55:fe:ca:d0:2a:ef:
                    dd:e2:95:ff:a1:44:95:d8:3c:fc:3f:92:7d:56:80:
                    6f:ff:63:3d:9c:1a:d5:fd:cb:53:95:72:c0:06:45:
                    fc:f1:5f:de:d9:27:f9:5a:83:f6:78:e8:4e:1d:49:
                    ee:79:c8:58:94:c6:d0:6a:71:a6:50:7c:5c:3f:c0:
                    2d:5a:66:42:88:df:b4:26:06:79:ef:99:3d:8a:d9:
                    34:58:f6:4f:7b:3a:76:c4:09:26:94:8f:a2:6e:86:
                    7f:29:cc:fa:fe:4a:e4:21:6f:fd:e8:2b:8b:7b:71:
                    9c:50:ed:fa:15:e1:2c:07:1d:46:31:0b:15:71:4d:
                    f7:e6:72:b4:03:ba:56:bc:16:00:5e:2a:2c:b3:5e:
                    3a:1e:70:69:ab:d2:e6:d2:92:fa:57:7d:28:0b:ac:
                    26:c5:84:2a:97:f9:81:3e:0e:ac:65:fc:0e:7e:c7:
                    29:11:30:33:82:2c:b4:b0:52:e8:fe:8e:9a:b8:d8:
                    6a:04:61:80:f2:0c:7f:f7:13:e1:ac:7d:ab:e6:8d:
                    da:1d:07:fa:f3:c8:29:2c:f2:d2:fe:24:67:73:a4:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:33:FC:99:8F:D0:80:91:AB:B4:05:1B:18:C3:01:6F:97:0D:4B
            X509v3 Authority Key Identifier:
                keyid:51:23:63:D1:74:CB:1D:34:BB:21:6B:0C:5F:91:05:0B:21:0E:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/11d012c00e809d8851e03371a2e685739a4c5a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:36:a0:e1:99:bb:83:f2:c8:41:a9:22:61:a7:b0:e0:2d:2e:
         b2:80:27:21:51:fb:19:70:53:4e:34:3c:14:14:81:dc:1c:95:
         b0:f5:47:8f:3b:e3:21:ce:43:06:f0:bf:be:d4:0c:82:9b:79:
         a9:8c:9b:95:89:25:3d:e5:60:19:30:2a:b4:3e:6b:3e:d0:16:
         a5:eb:7b:ae:29:4f:48:a2:24:20:28:9b:3f:23:ac:66:0d:0f:
         f5:ae:a8:0e:94:9d:f5:7c:13:5d:75:5a:d3:6c:be:2f:a1:e3:
         55:d0:ff:e6:6b:e5:ca:ff:a6:85:eb:dc:57:45:6c:c5:76:e1:
         7b:1f:45:1c:12:96:e0:f1:b1:32:90:e9:04:ac:2e:fa:b8:cc:
         26:14:a7:a3:40:e1:36:ae:83:1c:f2:55:8f:a3:53:7c:c2:a7:
         56:d4:4f:03:f2:7f:7e:b4:44:a4:59:4b:40:f3:f8:4e:21:0d:
         01:c9:7e:a5:58:4b:6a:37:6d:b4:39:3a:1c:06:c4:b4:9c:ad:
         b3:19:b7:69:05:8d:b2:b6:08:1d:66:0b:42:7c:3f:c2:ba:1a:
         cb:08:1a:91:87:45:63:0d:ae:01:64:5d:e6:d7:d5:58:83:d5:
         67:ee:dc:08:92:2b:71:73:ac:18:f5:44:e2:e3:32:47:75:95:
         1c:f2:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org