Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/f6ac1c2ac77c6ba0993fadedd5fc7ee84c100ec4.roa
File:                     f6ac1c2ac77c6ba0993fadedd5fc7ee84c100ec4.roa (raw, json)
Hash identifier:          8jhZ5keAPsypC5JmM5wVcoFXUO2I9x34cq/gNpELGA8=
Subject key identifier:   D1:14:ED:F0:82:39:0C:33:5A:35:8B:49:84:77:5A:D6:28:AD:31:9C
Certificate issuer:       /CN=ee16626b2effff95f451b4227e9e67721082c9aa
Certificate serial:       1DB88B
Authority key identifier: 8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/f6ac1c2ac77c6ba0993fadedd5fc7ee84c100ec4.roa
Signing time:             Thu 07 Sep 2023 18:57:35 +0000
ROA not before:           Wed 06 Sep 2023 18:57:35 +0000
ROA not after:            Sun 07 Sep 2025 18:57:35 +0000
asID:                     28100
IP address blocks:        45.71.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947787 (0x1db88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee16626b2effff95f451b4227e9e67721082c9aa
        Validity
            Not Before: Sep  6 18:57:35 2023 GMT
            Not After : Sep  7 18:57:35 2025 GMT
        Subject: CN=f6ac1c2ac77c6ba0993fadedd5fc7ee84c100ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:af:42:03:62:e7:58:00:e8:f3:87:30:d4:0a:
                    73:75:f1:64:68:52:c0:90:cd:ad:37:d6:3a:7d:e9:
                    28:57:f3:57:7b:d8:98:bf:4d:a0:e8:85:e5:32:d3:
                    32:38:83:77:03:d4:fa:99:d3:44:90:0c:d3:36:cd:
                    99:75:1c:cb:c5:27:3b:86:40:55:70:77:0a:cb:21:
                    01:c9:f0:5a:ad:bb:05:93:d8:76:58:f9:87:c1:ab:
                    3b:04:4e:50:dd:be:d9:5e:bd:7a:d8:3f:1d:6a:f6:
                    18:b0:27:02:ba:72:33:9a:90:5c:05:74:14:52:5e:
                    b7:72:73:cb:57:0d:94:ed:ea:0e:5f:4b:02:eb:4b:
                    b6:37:c5:77:86:9e:fe:88:8e:43:7a:d7:44:14:16:
                    01:6c:57:01:c2:29:25:6a:99:ab:92:4e:95:87:74:
                    0e:b5:9f:80:6a:18:31:de:97:19:e3:2a:aa:68:4c:
                    c6:48:32:83:68:2a:44:36:34:c2:50:4b:5c:32:67:
                    a2:47:fe:fb:3b:8f:d8:17:a6:f6:d8:90:42:65:87:
                    e5:d5:c0:f9:77:70:3a:d7:e8:61:40:d5:eb:98:4b:
                    79:61:b6:ad:6b:ae:bb:66:9e:47:2e:cd:44:bf:5d:
                    29:4a:28:12:02:a7:5f:6a:ec:08:36:34:2a:3e:6e:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:14:ED:F0:82:39:0C:33:5A:35:8B:49:84:77:5A:D6:28:AD:31:9C
            X509v3 Authority Key Identifier:
                keyid:8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/f6ac1c2ac77c6ba0993fadedd5fc7ee84c100ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/ee16626b2effff95f451b4227e9e67721082c9aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:b5:dc:47:b7:1c:be:cf:1d:db:bb:53:18:e1:1c:6e:d0:
         ff:73:c0:39:db:62:8d:64:3f:53:7e:da:67:9b:e9:cd:e4:e4:
         97:46:c0:33:a0:5d:09:be:6f:45:ee:33:fd:7c:b2:0e:94:89:
         0d:2a:54:ed:55:be:9f:60:6a:30:8a:cf:42:2f:e9:b1:6d:a8:
         6b:8c:c0:a9:25:c1:01:d9:c5:8d:c3:38:57:08:07:6e:e3:e7:
         fe:93:15:cf:6b:24:0d:d9:80:b2:8f:10:7a:c4:b7:3c:7c:d7:
         ae:d1:8f:59:59:ce:c8:6d:60:59:a8:d8:8d:e0:d4:51:38:a9:
         d8:9d:84:22:38:7e:f3:de:51:0e:69:5e:a2:fb:dc:2f:6a:41:
         01:3f:ab:45:f0:07:81:47:50:c2:81:79:a6:8a:f5:ab:d9:de:
         22:40:e5:54:52:05:c3:37:95:11:fa:af:93:21:f2:48:15:69:
         5d:af:1f:4b:e1:dd:77:97:0f:0c:21:02:14:63:84:33:2e:d7:
         d2:b6:c8:fa:de:c5:f5:68:e7:4d:56:f0:d4:a4:87:56:c6:63:
         37:26:28:06:cd:5c:0a:8b:f7:44:58:93:66:c6:e8:86:61:37:
         ca:b8:44:d9:10:f4:72:b2:b5:6c:aa:c0:ca:6a:15:5c:bc:72:
         70:7a:d3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org