Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eb494d7-cca8-4b16-b471-32c1c8675168/830667512a17520b6fb680a29bc9a725b10ac72d.roa
File:                     830667512a17520b6fb680a29bc9a725b10ac72d.roa (raw, json)
Hash identifier:          rEXoyHSolTlRAtU2nVxyw1OT7w74/rY6DkjmcsfPbww=
Subject key identifier:   99:8A:39:2C:BB:AD:AC:7C:2D:03:BC:7F:ED:CE:21:03:27:C6:27:A6
Certificate issuer:       /CN=44d981b1020f35da46ebd9f5ea0b49a0563178f4
Certificate serial:       0B91A0
Authority key identifier: 00:28:D3:48:8B:BF:5F:89:84:DC:FB:BF:14:1E:E0:AA:D8:27:E8:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d981b1020f35da46ebd9f5ea0b49a0563178f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eb494d7-cca8-4b16-b471-32c1c8675168/830667512a17520b6fb680a29bc9a725b10ac72d.roa
Signing time:             Wed 24 Mar 2021 14:40:13 +0000
ROA not before:           Wed 24 Mar 2021 14:40:13 +0000
ROA not after:            Tue 24 Mar 2026 14:40:13 +0000
asID:                     3549
IP address blocks:        192.188.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758176 (0xb91a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d981b1020f35da46ebd9f5ea0b49a0563178f4
        Validity
            Not Before: Mar 24 14:40:13 2021 GMT
            Not After : Mar 24 14:40:13 2026 GMT
        Subject: CN=830667512a17520b6fb680a29bc9a725b10ac72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:01:54:59:64:ee:37:b2:80:b2:0b:46:b6:
                    39:45:a5:db:87:38:c1:7d:d6:ce:e8:59:88:78:aa:
                    10:fd:7b:62:a0:3a:8b:34:cc:78:af:2c:5c:c4:78:
                    ec:ef:35:47:ff:45:8c:3b:e4:c2:ad:02:0a:ec:d4:
                    87:eb:b1:28:54:74:e5:95:60:0d:0a:b4:2d:a2:7d:
                    75:67:68:36:bb:77:88:b4:4a:3a:a2:57:6a:b9:ed:
                    5a:a4:34:0c:a9:c1:47:93:65:06:af:42:4f:25:05:
                    e5:59:bc:38:e5:d8:66:91:e9:5e:22:1d:fa:f2:f1:
                    89:17:45:c3:80:d2:59:fe:5f:0f:ae:42:e9:6f:9c:
                    ae:aa:3e:8d:cb:5f:f1:c7:ea:60:87:a2:3a:69:e1:
                    a9:07:e8:32:01:98:e7:b5:69:f6:ae:06:b6:19:2d:
                    d3:33:70:6f:cb:bf:b2:31:6a:09:b5:55:50:e6:2c:
                    08:22:56:4b:34:68:19:4b:03:5c:5b:14:aa:8e:94:
                    94:24:78:29:7b:45:f2:8b:72:a2:a3:3b:d9:19:03:
                    71:8b:5f:7a:6b:db:3d:74:7d:bc:ea:73:b5:fd:3c:
                    e3:03:c7:5d:1c:d3:88:d8:58:42:ef:24:93:e1:d8:
                    45:36:8a:08:1b:06:f4:5e:78:7d:b0:e9:dc:98:f6:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:39:2C:BB:AD:AC:7C:2D:03:BC:7F:ED:CE:21:03:27:C6:27:A6
            X509v3 Authority Key Identifier:
                keyid:00:28:D3:48:8B:BF:5F:89:84:DC:FB:BF:14:1E:E0:AA:D8:27:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d981b1020f35da46ebd9f5ea0b49a0563178f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eb494d7-cca8-4b16-b471-32c1c8675168/830667512a17520b6fb680a29bc9a725b10ac72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eb494d7-cca8-4b16-b471-32c1c8675168/44d981b1020f35da46ebd9f5ea0b49a0563178f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:aa:70:88:26:5d:c1:0f:59:69:d3:28:79:45:04:b3:41:ef:
         77:80:e1:66:18:0c:38:be:0b:03:83:f8:3e:3b:e7:dc:5f:6c:
         02:fb:f7:0b:ee:de:57:b9:64:22:79:07:55:b5:c6:19:af:49:
         27:06:a1:9e:b4:40:2d:85:ff:5c:02:14:36:15:a1:9f:af:91:
         47:e8:4f:d7:ee:54:10:44:f0:93:28:e1:13:8c:0c:14:c7:fc:
         56:32:dd:74:1e:fc:7b:95:3e:60:9e:40:43:9e:e8:e0:86:2b:
         d2:28:ec:83:8b:fd:1d:bb:e4:e2:2b:70:2b:56:fe:12:c5:65:
         12:ce:04:f6:e4:90:70:17:b8:d5:c4:b5:7b:1a:88:12:6b:98:
         5f:2f:73:b7:50:6c:11:9d:6f:00:9d:9c:0a:4a:a0:51:da:1b:
         20:1a:2b:d9:b0:7d:91:14:48:d4:c9:0a:97:64:bf:f3:8d:8c:
         bc:90:70:48:c2:6a:47:a4:1f:89:73:a7:9f:4e:5d:b6:aa:17:
         a4:28:48:60:6a:44:63:25:2d:34:19:6d:54:1d:c0:a0:0f:26:
         0e:4d:af:19:b4:34:85:ea:d5:37:09:f4:bb:79:a6:e2:0b:53:
         3e:a8:82:86:68:bc:62:0c:0a:f1:50:2d:9c:40:69:10:53:17:
         5f:c0:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org