Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/a0af4f93aba630111dd6a584a21e02a687960391.roa
File:                     a0af4f93aba630111dd6a584a21e02a687960391.roa (raw, json)
Hash identifier:          AciGPLEjy4LHYUiYwnDuiiNFK77flPsFkmsd5entXHg=
Subject key identifier:   1D:B2:41:EB:93:73:0A:B2:A5:CE:F7:EA:84:12:BA:32:F4:63:C3:52
Certificate issuer:       /CN=0c3098bc830b15f562a713da1e021ca658c175b0
Certificate serial:       0C1FD4
Authority key identifier: A2:74:A5:2C:D7:E0:9C:9D:DB:8A:15:84:CB:BF:E5:EC:7E:73:B8:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3098bc830b15f562a713da1e021ca658c175b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/a0af4f93aba630111dd6a584a21e02a687960391.roa
Signing time:             Wed 24 Mar 2021 14:34:28 +0000
ROA not before:           Wed 24 Mar 2021 14:34:28 +0000
ROA not after:            Tue 24 Mar 2026 14:34:28 +0000
asID:                     266881
IP address blocks:        45.160.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794580 (0xc1fd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3098bc830b15f562a713da1e021ca658c175b0
        Validity
            Not Before: Mar 24 14:34:28 2021 GMT
            Not After : Mar 24 14:34:28 2026 GMT
        Subject: CN=a0af4f93aba630111dd6a584a21e02a687960391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:2f:ca:6b:d9:09:c6:54:7c:c1:ea:67:9e:
                    65:27:d8:5f:6c:55:aa:19:13:7c:cd:52:32:f9:e3:
                    ea:10:69:17:0e:72:26:b6:f8:8d:dc:ce:e9:c7:22:
                    bf:47:71:30:c0:9d:1c:39:c0:a7:0a:83:8a:82:c4:
                    7a:47:20:13:e9:49:49:bb:c2:eb:63:3a:0e:9a:51:
                    06:90:bb:4f:53:96:87:53:4c:4b:76:af:0f:dd:02:
                    f8:a7:c0:93:19:32:d0:65:0a:d2:ba:a1:98:21:b7:
                    0d:ff:7f:72:ff:31:fc:2a:18:5b:ac:b7:41:9f:9a:
                    ba:e6:83:f3:54:0a:2c:df:e2:2b:d4:e7:c8:46:14:
                    90:db:c7:6c:e4:e8:10:41:fd:36:cf:aa:2b:04:27:
                    0e:0f:f5:50:cd:66:59:5e:14:43:ce:c3:f4:cb:be:
                    82:67:17:77:fd:db:f0:ac:b5:70:2c:e0:06:60:0b:
                    fd:25:25:6f:3c:d6:5f:27:5e:5f:61:48:e4:05:d0:
                    c5:42:9c:16:66:48:9e:8d:4f:25:7e:06:99:7c:70:
                    9d:03:2b:24:53:21:c9:47:60:97:1c:0b:23:a9:b5:
                    a0:70:1f:f0:8b:8b:62:27:14:f4:b4:b5:0b:36:fa:
                    80:54:3b:9d:90:fb:5f:c0:38:f4:d8:db:cc:66:8d:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:41:EB:93:73:0A:B2:A5:CE:F7:EA:84:12:BA:32:F4:63:C3:52
            X509v3 Authority Key Identifier:
                keyid:A2:74:A5:2C:D7:E0:9C:9D:DB:8A:15:84:CB:BF:E5:EC:7E:73:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c3098bc830b15f562a713da1e021ca658c175b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/a0af4f93aba630111dd6a584a21e02a687960391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63f5fd1a-6d52-4ec9-b01f-4d76d73cc75e/0c3098bc830b15f562a713da1e021ca658c175b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:21:73:1f:55:89:4d:df:03:0b:7a:75:e4:16:61:14:35:01:
         5b:15:ec:2c:0f:10:39:fa:1b:94:c7:b4:c4:8f:a9:7d:b0:56:
         3d:4c:c4:a7:b1:9b:72:88:aa:2d:4b:de:ce:16:aa:df:e1:b7:
         a2:d1:ce:72:b7:f5:48:64:fd:c5:6b:3c:8d:76:d2:3d:18:98:
         4f:91:8c:da:8b:d2:70:35:b4:95:68:db:e5:6c:d0:39:68:a5:
         22:0e:10:c0:e2:0d:8d:ee:b8:c0:9a:85:73:1e:a5:8f:8b:fc:
         e6:54:78:d5:a2:bf:64:73:5d:07:84:92:39:a5:6f:81:90:2e:
         1f:07:d7:9b:2a:5b:a1:8b:5f:68:ae:4a:ba:d8:f4:54:d5:89:
         b6:d9:59:8e:26:ca:e2:3e:e4:38:8c:6e:26:0e:f1:f8:94:f2:
         b2:29:0f:0a:9b:2c:e0:b1:a5:8b:75:0c:84:ba:da:00:68:ee:
         b2:dd:fe:18:85:48:72:b8:1f:f8:3b:10:c9:31:9a:7f:06:cd:
         e0:c1:a4:3d:67:0d:50:51:fe:26:8b:d2:24:62:54:8f:26:9a:
         c4:d0:7f:01:37:ac:13:2a:51:dd:b1:9a:f6:91:3e:c0:c7:91:
         27:87:e0:64:d1:3d:97:3e:07:e6:0a:3b:63:3a:45:ac:dc:5e:
         1c:3b:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org