Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/ec32a0b679fb3d833d0e0f455e0068f0ab0eb8e6.roa
File:                     ec32a0b679fb3d833d0e0f455e0068f0ab0eb8e6.roa (raw, json)
Hash identifier:          Ahv59Vrs8311jcaULzeh/5UChVWa9vmZ/8hm5QthpgQ=
Subject key identifier:   25:AC:86:D4:B0:8B:C7:74:79:58:41:23:8E:84:E7:77:EA:1B:BB:78
Certificate issuer:       /CN=3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1
Certificate serial:       0D24A5
Authority key identifier: 3A:3F:3B:1C:9A:82:51:F4:86:AC:4E:16:74:89:FB:FD:83:03:0A:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/ec32a0b679fb3d833d0e0f455e0068f0ab0eb8e6.roa
Signing time:             Wed 24 Mar 2021 14:38:21 +0000
ROA not before:           Wed 24 Mar 2021 14:38:21 +0000
ROA not after:            Tue 24 Mar 2026 14:38:21 +0000
asID:                     264605
IP address blocks:        45.6.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861349 (0xd24a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1
        Validity
            Not Before: Mar 24 14:38:21 2021 GMT
            Not After : Mar 24 14:38:21 2026 GMT
        Subject: CN=ec32a0b679fb3d833d0e0f455e0068f0ab0eb8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:33:74:c0:31:e3:d0:30:df:a7:b9:4e:40:
                    7e:c1:f0:15:e5:42:3b:7a:82:b1:e9:e0:0d:34:76:
                    df:f2:6a:09:79:df:58:da:92:56:70:83:3a:74:8d:
                    75:7d:07:0f:0e:ec:9e:85:7b:82:80:ef:a6:db:0f:
                    00:3b:06:2d:9e:dc:99:55:a0:18:b7:5d:63:c6:f8:
                    29:7d:97:64:01:67:0d:74:4a:e2:a3:d8:73:7d:74:
                    a3:50:c3:8c:21:a6:d5:13:9c:92:72:0a:1b:ed:f5:
                    0c:f7:de:0f:43:95:7a:d3:f7:d1:8c:2e:df:f9:f4:
                    13:c2:3e:ca:10:e5:c2:54:b6:fe:7d:03:8f:9e:e1:
                    ed:d1:83:40:04:3a:ff:18:56:e8:bc:9e:d6:92:90:
                    0a:1f:de:94:54:11:40:a3:53:45:cf:cb:b9:48:e1:
                    1b:d1:64:2a:f8:27:a4:07:57:8f:1c:60:07:1e:eb:
                    40:52:26:3a:68:51:14:37:3b:5f:2e:f2:95:d6:27:
                    5d:87:6c:56:5a:d3:b1:34:be:8c:9a:e5:1c:15:02:
                    6c:70:df:26:9e:82:9c:6e:a0:2a:42:d0:83:fe:cf:
                    0c:c6:c3:c4:19:17:63:15:1e:1f:2e:ce:4b:88:af:
                    82:6c:ae:74:3c:87:1f:3c:7a:59:49:94:ab:54:ca:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AC:86:D4:B0:8B:C7:74:79:58:41:23:8E:84:E7:77:EA:1B:BB:78
            X509v3 Authority Key Identifier:
                keyid:3A:3F:3B:1C:9A:82:51:F4:86:AC:4E:16:74:89:FB:FD:83:03:0A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/ec32a0b679fb3d833d0e0f455e0068f0ab0eb8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:58:c3:62:53:2e:74:4b:7a:4a:a8:87:75:60:c0:5e:08:4e:
         8c:f9:63:2b:f4:6c:72:b2:4b:2c:44:79:46:0b:89:e1:86:ec:
         25:5e:4e:5d:98:58:99:59:7f:33:26:c7:9b:e0:ef:40:df:e0:
         d0:54:95:ca:a1:aa:34:be:db:d9:a7:7a:17:ca:e9:2d:35:7d:
         45:38:32:01:74:27:10:21:32:2b:c1:be:ad:c4:2d:e8:59:da:
         3c:34:22:23:ed:7a:08:19:9b:19:0c:d9:27:cf:d5:71:4c:f2:
         12:1b:19:10:b8:09:b9:fe:d4:32:d5:a6:f1:eb:97:22:4c:0b:
         85:4b:c1:10:33:1f:2b:82:29:db:ab:6c:f6:66:32:9c:09:dd:
         e6:ba:98:b9:b7:2d:08:5a:9b:1c:e9:29:3c:5a:84:b6:52:f6:
         b4:93:b3:9d:48:fb:1c:bc:b0:92:c3:93:1c:37:24:6c:d9:9e:
         22:a4:9b:62:f4:39:cc:68:45:6d:11:32:73:7c:45:33:14:0d:
         30:52:a2:74:76:5c:ab:35:85:e4:c7:07:11:4a:b7:09:bf:90:
         7c:e5:8a:6b:59:7d:1b:2a:4f:9b:23:d0:53:20:06:71:74:43:
         99:92:a7:b9:08:7b:87:79:5b:29:84:e7:a0:17:d5:8a:44:66:
         2e:04:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org