Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e609384-13b3-481f-8444-cd53e7d0100d/65af4d7a5d809138520f11e78110224d5eefe824.roa
File:                     65af4d7a5d809138520f11e78110224d5eefe824.roa (raw, json)
Hash identifier:          VwL7iM0q5PgMsyGYPH73fV3vE6bv6ggqTZ7RrwwRcw0=
Subject key identifier:   E8:F6:AF:BB:CF:AC:3F:2D:0E:1D:17:9B:A0:B2:78:B1:B4:3F:FA:F7
Certificate issuer:       /CN=efdd38bb0475a0c1402c0997f2a7d64eb46c7d39
Certificate serial:       06ED95
Authority key identifier: BD:91:C3:2A:C7:79:35:67:8F:55:05:14:7C:33:84:F5:74:9A:8E:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efdd38bb0475a0c1402c0997f2a7d64eb46c7d39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e609384-13b3-481f-8444-cd53e7d0100d/65af4d7a5d809138520f11e78110224d5eefe824.roa
Signing time:             Wed 24 Mar 2021 14:32:07 +0000
ROA not before:           Wed 24 Mar 2021 14:32:07 +0000
ROA not after:            Tue 24 Mar 2026 14:32:07 +0000
asID:                     27983
IP address blocks:        45.236.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454037 (0x6ed95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdd38bb0475a0c1402c0997f2a7d64eb46c7d39
        Validity
            Not Before: Mar 24 14:32:07 2021 GMT
            Not After : Mar 24 14:32:07 2026 GMT
        Subject: CN=65af4d7a5d809138520f11e78110224d5eefe824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:f1:c0:9e:e8:2a:2c:70:ee:3b:6b:32:01:
                    36:b7:09:80:0c:47:21:42:97:e8:91:c7:ec:05:b2:
                    fa:ee:60:6f:d8:ab:47:cc:d3:eb:05:13:ef:5c:78:
                    72:d6:ca:be:3e:05:6d:99:3d:d7:cc:46:9d:a6:41:
                    cc:1a:9e:9e:05:8e:27:74:4b:2f:f5:da:a5:ad:ca:
                    18:45:ee:5a:52:00:52:0f:89:cf:d0:56:bc:51:cd:
                    40:0d:64:15:e6:48:73:25:aa:ae:a3:a5:8e:a8:69:
                    3d:ad:66:59:1d:60:66:d0:6b:90:22:7e:7f:5a:1d:
                    fb:2f:6d:68:3b:d6:21:d2:24:14:b9:28:72:10:3a:
                    80:88:fa:01:c5:7a:45:d0:7a:b1:c6:b2:9e:31:23:
                    0b:02:44:8c:25:a0:7f:c8:26:68:6e:c9:11:23:3e:
                    1a:67:b1:59:a0:b8:95:9e:7b:50:e4:54:4d:cb:a7:
                    00:61:24:7c:88:da:d8:e5:7b:91:2b:35:5b:59:3f:
                    56:ee:16:bd:67:6b:8e:5d:81:f4:18:b6:e3:8b:cf:
                    8a:87:1c:ff:58:22:53:ef:ad:f9:2e:6d:39:b0:54:
                    19:99:0e:74:97:1f:93:3a:10:ee:95:40:81:6c:c4:
                    8b:36:60:1e:bb:4e:c6:e2:a1:e9:c5:16:40:52:bb:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:AF:BB:CF:AC:3F:2D:0E:1D:17:9B:A0:B2:78:B1:B4:3F:FA:F7
            X509v3 Authority Key Identifier:
                keyid:BD:91:C3:2A:C7:79:35:67:8F:55:05:14:7C:33:84:F5:74:9A:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efdd38bb0475a0c1402c0997f2a7d64eb46c7d39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e609384-13b3-481f-8444-cd53e7d0100d/65af4d7a5d809138520f11e78110224d5eefe824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e609384-13b3-481f-8444-cd53e7d0100d/efdd38bb0475a0c1402c0997f2a7d64eb46c7d39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:f8:12:38:7a:6f:ff:88:b0:70:2c:ab:8d:d2:3f:c5:f5:
         f6:a0:10:28:f8:01:19:54:7d:e1:a2:93:72:2f:c5:b0:13:3c:
         76:f3:b2:6c:50:d8:0c:5f:f1:b3:32:29:ee:c7:92:c3:62:ba:
         bc:4f:b5:b6:b4:d3:b4:90:5d:70:15:e5:ca:9e:5a:0e:85:92:
         a8:cc:82:04:17:f0:39:12:fc:5f:61:48:50:17:79:86:5f:7e:
         ec:70:e9:41:7a:7d:ef:cc:d6:15:35:55:38:88:13:ec:c0:a4:
         d6:02:99:f8:b5:f6:c7:f2:70:fe:f1:c1:48:18:9a:34:62:92:
         68:ec:9b:be:7f:9b:f8:d3:4f:9b:19:8e:51:1e:61:4f:fe:86:
         46:12:18:65:f7:85:2e:c1:a1:6a:ba:92:7c:38:10:46:f6:a2:
         5f:9e:b8:18:e0:42:e2:70:dd:2c:bd:66:ec:51:08:e6:34:14:
         08:37:ef:f8:fb:42:c3:96:8b:80:63:0a:49:52:cf:ac:48:b5:
         7d:a8:53:55:2b:24:a1:4b:9d:74:d4:a0:33:d9:0e:6f:d4:21:
         ca:19:f6:35:c1:f0:63:79:56:cb:19:c4:25:c2:ab:f5:40:57:
         f8:16:b9:1b:dc:9e:21:f3:2d:b6:c2:66:0e:a3:db:44:8f:5b:
         51:6b:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org