Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/cd5a93ef96cdb4ab3222a13b9cdfc67048f4b847.roa
File:                     cd5a93ef96cdb4ab3222a13b9cdfc67048f4b847.roa (raw, json)
Hash identifier:          eiLq9jwH/0rzjPzFLhvouyYBdDkLS/AgzFR1lWEVtN8=
Subject key identifier:   D1:81:87:AC:FE:4D:F7:C8:E5:41:95:3A:CD:96:DD:B3:67:3D:05:E5
Certificate issuer:       /CN=6c4e32566e6591859de2af682b800bad4f8ce7ad
Certificate serial:       0BB494
Authority key identifier: 07:A5:DA:6D:EB:59:9C:9D:91:80:25:2E:FF:3B:72:4A:27:91:D2:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c4e32566e6591859de2af682b800bad4f8ce7ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/cd5a93ef96cdb4ab3222a13b9cdfc67048f4b847.roa
Signing time:             Wed 24 Mar 2021 14:43:24 +0000
ROA not before:           Wed 24 Mar 2021 14:43:24 +0000
ROA not after:            Tue 24 Mar 2026 14:43:24 +0000
asID:                     265565
IP address blocks:        45.167.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767124 (0xbb494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4e32566e6591859de2af682b800bad4f8ce7ad
        Validity
            Not Before: Mar 24 14:43:24 2021 GMT
            Not After : Mar 24 14:43:24 2026 GMT
        Subject: CN=cd5a93ef96cdb4ab3222a13b9cdfc67048f4b847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:c6:44:a6:d4:23:9b:c6:27:37:cb:cb:23:
                    48:88:81:6a:83:22:7a:ae:9e:03:a6:d9:60:35:a5:
                    06:a7:b5:80:95:ce:68:40:2a:60:d7:0b:5b:c2:a5:
                    d4:2d:5f:84:12:b4:40:db:c9:cb:6f:ee:8c:70:1b:
                    bb:2d:74:09:54:04:fc:de:8f:ca:c0:76:5c:2c:cd:
                    de:0a:3d:8d:c3:39:36:5e:4c:8e:54:e5:7d:06:bc:
                    54:9d:e7:4c:f7:6c:87:e8:1a:3f:78:ab:0f:ca:0d:
                    53:23:7a:f8:97:b2:0d:54:87:66:76:0f:96:3f:ed:
                    40:b5:8c:64:6a:5f:13:23:da:3a:4d:ba:22:bf:39:
                    df:0c:ce:ad:18:a0:91:e1:ac:66:85:3a:73:11:09:
                    3e:45:23:c3:09:20:5f:8c:e3:66:37:d3:e6:7f:cb:
                    46:6f:51:14:17:f5:b5:d0:e6:c1:d1:5f:d2:ad:ca:
                    e6:14:3b:d6:5f:3c:a3:63:1c:2f:44:a3:2c:f8:1e:
                    e9:95:f2:ae:29:ec:32:0d:ff:92:af:a2:bd:dd:83:
                    3e:d0:b7:fd:4a:e1:38:04:21:52:2d:14:d0:eb:e1:
                    22:d0:31:c3:f9:87:72:6d:50:c4:45:2c:5b:78:d6:
                    64:cb:19:90:de:5e:48:04:af:84:34:3a:3f:30:ea:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:87:AC:FE:4D:F7:C8:E5:41:95:3A:CD:96:DD:B3:67:3D:05:E5
            X509v3 Authority Key Identifier:
                keyid:07:A5:DA:6D:EB:59:9C:9D:91:80:25:2E:FF:3B:72:4A:27:91:D2:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c4e32566e6591859de2af682b800bad4f8ce7ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/cd5a93ef96cdb4ab3222a13b9cdfc67048f4b847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/6c4e32566e6591859de2af682b800bad4f8ce7ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:da:41:5c:2b:c0:c0:d0:2a:3b:e1:dd:83:39:24:bb:ac:95:
         9e:f3:1f:49:9a:6c:7d:7c:ac:76:a7:59:58:d2:a3:9e:7b:dd:
         ca:7c:b1:54:e9:35:83:ad:7b:73:2a:32:d2:70:2c:10:59:51:
         d1:36:07:35:51:e8:1c:da:38:d2:7d:af:f9:99:cc:d5:ce:b8:
         51:22:aa:72:0d:7f:4b:68:f2:85:02:e7:46:df:7b:37:bd:f3:
         a8:01:bb:b9:dc:19:aa:6d:35:23:40:b6:c7:ba:9b:8d:f9:ba:
         f3:f8:90:d8:47:ac:0e:88:79:85:5b:97:b5:1c:ed:b7:b0:c5:
         f0:53:88:17:cc:cf:31:fb:51:f3:0e:3d:f9:a1:e2:94:65:16:
         9a:30:ad:16:c5:6a:4a:ad:11:86:e2:c9:44:aa:34:17:e6:6a:
         50:df:4b:57:ed:4f:5e:6b:22:cc:a1:ea:3b:32:d6:2f:aa:ce:
         48:db:93:dd:a5:47:33:06:46:d8:f6:db:a9:7f:58:44:66:2a:
         4f:a6:8d:92:3f:9b:99:cc:92:3e:f9:c8:e8:b4:e3:71:17:3d:
         ad:8b:81:f8:1c:dd:4d:04:cc:31:82:cd:7b:dd:5e:fe:fd:5e:
         30:f9:a6:b2:d1:b4:a3:5e:b8:02:19:72:49:58:55:a3:3f:3c:
         4e:d2:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org