Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/87d73aed09914da1a13b668ce1a0a84e70f18325.roa
File:                     87d73aed09914da1a13b668ce1a0a84e70f18325.roa (raw, json)
Hash identifier:          GUW4ivcV4ufCgCGqrvzJGisnRWZ42Dlff/KwwPXy9KI=
Subject key identifier:   C5:71:3E:7D:D3:91:22:DF:42:64:B0:1C:27:D5:5F:66:5D:12:E3:E8
Certificate issuer:       /CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Certificate serial:       05C973
Authority key identifier: C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/87d73aed09914da1a13b668ce1a0a84e70f18325.roa
Signing time:             Wed 24 Mar 2021 14:30:45 +0000
ROA not before:           Wed 24 Mar 2021 14:30:45 +0000
ROA not after:            Tue 24 Mar 2026 14:30:45 +0000
asID:                     267798
IP address blocks:        45.173.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379251 (0x5c973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
        Validity
            Not Before: Mar 24 14:30:45 2021 GMT
            Not After : Mar 24 14:30:45 2026 GMT
        Subject: CN=87d73aed09914da1a13b668ce1a0a84e70f18325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:f6:4d:b2:40:37:5f:7d:ca:d8:7c:5b:fa:
                    d7:0b:70:67:ad:5e:05:cd:df:68:50:5a:63:6c:33:
                    6e:44:b8:d8:5b:50:11:e9:b6:a4:6e:25:f9:b0:62:
                    c6:a2:f3:6b:7d:d2:d0:74:e3:ec:86:37:f5:33:6f:
                    b1:0b:83:89:e0:0d:cc:0a:cf:6f:64:ad:aa:8d:f0:
                    96:10:f2:fc:d0:22:69:e7:c7:ab:3b:cd:ae:4c:97:
                    89:09:62:d4:d4:ed:a4:ac:50:68:b9:f0:16:3b:ac:
                    4c:95:18:53:69:7d:b6:20:bc:a3:9d:01:90:44:52:
                    93:8d:13:24:aa:f7:19:06:74:63:60:50:d6:14:df:
                    fb:fa:5a:c4:52:00:f5:1b:73:b5:a9:b9:24:03:30:
                    95:77:b9:75:f1:a3:a5:4d:23:f5:e6:64:18:36:d6:
                    06:49:2c:55:87:11:29:85:36:dc:c4:5e:c8:e3:fd:
                    53:00:9c:57:18:5a:e7:1f:f5:3b:f0:40:07:5f:07:
                    62:87:5a:4f:1d:52:a6:4a:61:f1:b9:19:c9:95:40:
                    c3:db:34:7b:3b:4a:1d:d8:6d:02:bb:26:8d:7b:3f:
                    75:9f:d7:f4:21:66:31:2e:89:a0:9f:72:a8:3b:2e:
                    1b:67:9f:b7:73:59:1e:32:3f:0e:e0:3f:90:90:49:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:71:3E:7D:D3:91:22:DF:42:64:B0:1C:27:D5:5F:66:5D:12:E3:E8
            X509v3 Authority Key Identifier:
                keyid:C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/87d73aed09914da1a13b668ce1a0a84e70f18325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:c8:e1:2f:f3:7a:05:5d:67:9d:7f:f4:57:bb:e1:21:1b:
         05:14:ca:0b:dc:5b:12:31:d2:bb:e3:2a:e6:cb:ef:cb:f2:8b:
         ad:cd:c3:6a:e6:10:38:6b:85:35:65:a7:16:f3:25:07:b6:ad:
         9e:fb:4e:92:ea:3d:9b:a1:47:5e:81:06:50:5f:c7:0d:cb:89:
         e8:bf:32:b7:ca:1a:5d:49:23:87:4a:88:a3:eb:75:b6:16:0f:
         de:b9:c4:2f:0f:07:ec:12:2a:89:f0:b7:63:d9:8c:a7:a1:be:
         40:59:6e:a4:10:61:61:02:2b:9a:56:54:33:f3:6b:ed:f6:02:
         64:f4:cb:ec:eb:db:87:11:ea:8f:83:f5:17:ef:26:53:38:13:
         e5:b0:71:31:79:c4:6a:8d:91:a7:7e:80:51:6b:4c:bd:66:a0:
         98:75:3a:6c:69:48:18:fe:f1:c4:d1:2f:84:ce:84:ea:e7:bf:
         92:1a:0c:44:f1:df:0d:32:51:c6:cf:2f:88:b5:d2:cf:cb:da:
         00:1e:45:26:4f:23:b6:48:26:28:56:d2:79:06:b2:59:f7:c5:
         97:ba:f4:33:b4:c9:76:d5:9d:f0:f1:65:2b:14:3d:30:06:87:
         3e:9f:6d:18:ba:28:7d:38:f0:b0:f3:04:ab:a0:39:b2:11:91:
         b0:5c:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org