Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/0c66feb2027efb2945cf63c0308a1490d5a46965.roa
File:                     0c66feb2027efb2945cf63c0308a1490d5a46965.roa (raw, json)
Hash identifier:          bjVS21P3ZvgU/5TKqWAfEleUuy5Lv/3jT7YAkMAvN/k=
Subject key identifier:   78:99:76:35:E9:AD:72:06:08:1C:C7:9E:6B:56:79:F0:80:D1:84:B5
Certificate issuer:       /CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Certificate serial:       1EA831
Authority key identifier: EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/0c66feb2027efb2945cf63c0308a1490d5a46965.roa
Signing time:             Sun 09 Apr 2023 08:30:01 +0000
ROA not before:           Sat 08 Apr 2023 08:30:01 +0000
ROA not after:            Mon 07 Apr 2025 08:30:01 +0000
asID:                     265675
IP address blocks:        45.171.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009137 (0x1ea831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Validity
            Not Before: Apr  8 08:30:01 2023 GMT
            Not After : Apr  7 08:30:01 2025 GMT
        Subject: CN=0c66feb2027efb2945cf63c0308a1490d5a46965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:39:68:29:ae:b3:17:54:79:46:b2:4b:93:
                    3c:a2:65:7e:67:a7:d1:65:70:0f:30:de:b3:62:88:
                    ff:c6:9e:71:b9:c9:b8:41:a9:fb:a1:91:32:c6:0d:
                    cd:ab:40:db:ce:e6:c7:1d:53:4d:5d:d4:86:c3:74:
                    cb:df:ad:5c:a4:ca:21:c1:ee:67:cd:65:87:79:79:
                    0f:1c:32:19:ef:0e:51:d2:30:22:ee:2f:28:34:63:
                    d2:49:98:23:97:f5:47:af:f9:a1:37:ff:7a:b1:79:
                    28:b7:2e:7f:e6:b5:74:e0:22:bc:fe:b2:f7:0c:b8:
                    f4:7a:b0:02:c7:e2:fb:02:83:e2:05:b4:c6:f7:cb:
                    dd:da:fb:49:2e:45:49:f2:cf:04:b5:da:f0:63:10:
                    9e:9b:ff:c3:79:ed:e7:1e:69:83:62:15:df:99:b5:
                    ca:58:cc:be:8f:4d:7d:21:72:f1:eb:0b:75:0d:6b:
                    d5:a4:55:73:da:f7:13:24:05:0a:2c:b5:89:09:2b:
                    8d:77:bf:39:a3:eb:ff:59:44:0b:c4:a1:f3:44:53:
                    e8:5b:de:c8:37:c2:aa:3a:03:cb:4d:29:2d:a5:a5:
                    9e:4c:b1:ee:10:28:db:4c:49:54:da:6a:3a:47:83:
                    91:25:7f:ae:3d:65:ed:72:1c:0a:8c:8e:b8:c6:fd:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:76:35:E9:AD:72:06:08:1C:C7:9E:6B:56:79:F0:80:D1:84:B5
            X509v3 Authority Key Identifier:
                keyid:EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/0c66feb2027efb2945cf63c0308a1490d5a46965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:ff:65:ea:21:5f:f5:3d:ea:21:98:69:dc:5c:e6:1d:e0:
         52:15:a2:71:10:02:48:48:e8:25:f1:bf:aa:84:ff:0f:80:03:
         7d:90:17:ea:59:56:c5:86:10:da:4d:a9:6f:ae:80:5b:96:af:
         6b:2c:a7:98:37:a0:e9:e1:c9:da:b2:92:63:bf:43:36:e8:8c:
         a4:94:bf:8b:d9:08:f9:9e:92:4e:bd:78:3c:5d:46:9c:8d:d8:
         47:67:a8:ab:7f:2b:c8:02:c7:bc:96:37:c7:12:31:26:74:9f:
         55:36:44:5e:a3:64:60:d1:fe:1f:f2:98:d3:fe:84:f1:28:33:
         9b:ac:e6:2c:a9:61:3b:5d:80:43:8f:e3:de:d3:a8:74:c3:6a:
         cf:70:aa:cc:05:fc:d1:e2:dc:5b:b7:8e:73:5a:59:64:db:fd:
         4f:0e:8f:8c:f9:8d:0c:37:0f:cd:57:0b:be:0b:eb:53:f5:fc:
         92:d8:58:c0:98:67:e6:07:c2:75:7b:c3:7d:11:e3:80:e1:3c:
         c9:7d:0e:54:37:12:8c:7f:0a:3e:b6:24:e6:7a:62:f3:4d:bf:
         83:b5:d6:73:58:de:28:eb:7f:6d:fd:1a:68:bf:0d:79:c0:22:
         1f:c4:29:4e:7f:c0:fe:ea:a1:09:e4:7e:4a:5f:91:fc:fd:84:
         ae:34:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org