Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa
File:                     74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa (raw, json)
Hash identifier:          9eQk3GWoKCBaJkEzdBHe/SLdRv7Zr4uUtvsSXzBbPzk=
Subject key identifier:   24:EC:2D:6F:B7:47:55:40:24:A2:D8:B0:1A:96:0A:E7:5A:14:EF:55
Certificate issuer:       /CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
Certificate serial:       090A6F
Authority key identifier: 7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa
Signing time:             Thu 17 Feb 2022 14:48:15 +0000
ROA not before:           Thu 17 Feb 2022 03:00:00 +0000
ROA not after:            Sat 17 Feb 2024 03:00:00 +0000
asID:                     271843
IP address blocks:        45.162.132.0/24 maxlen: 24
                          45.162.133.0/24 maxlen: 24
                          45.162.134.0/24 maxlen: 24
                          2803:f810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592495 (0x90a6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
        Validity
            Not Before: Feb 17 03:00:00 2022 GMT
            Not After : Feb 17 03:00:00 2024 GMT
        Subject: CN=74112dbdcd7605f2c0cf1ddbe39a23a96987c395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:6f:5f:3f:ac:1d:70:4d:f2:50:72:d6:e3:
                    ff:55:29:59:a1:5a:7e:88:d0:d3:c0:07:a5:b6:93:
                    88:07:af:0a:74:15:69:9f:ed:4f:b5:41:1a:92:e3:
                    8b:d5:31:3a:9a:37:b3:b5:97:f1:06:3b:38:80:8c:
                    cc:0a:fe:fc:99:8a:ef:10:d6:9d:be:63:73:63:de:
                    b6:15:2b:c4:54:bd:31:0b:b5:85:dc:2c:fe:07:eb:
                    4e:e1:2c:0f:af:9d:0a:ce:cc:82:f4:79:65:42:00:
                    f3:3d:22:cc:97:e5:b0:66:25:a2:8e:58:46:5d:03:
                    7b:33:2c:90:73:f6:3b:19:e5:bb:07:30:ae:de:aa:
                    2a:28:41:95:77:6f:09:27:bc:09:5e:5c:cc:9e:30:
                    bc:62:08:3a:43:00:7b:25:0f:db:3e:aa:bc:3c:91:
                    71:2f:78:49:bc:5d:85:fc:2c:45:38:13:dd:07:7d:
                    5b:6b:40:c4:54:7d:95:c2:34:11:0a:59:ab:9b:8a:
                    3a:c6:04:67:2d:34:ce:3c:5a:d8:47:2a:9f:6f:d4:
                    b4:8d:9b:f7:0a:7b:12:f0:1f:87:29:41:e4:d6:08:
                    7d:a2:1c:09:b4:a3:b6:a5:13:65:4a:e9:b0:e9:1c:
                    fa:7f:7b:dc:dd:9b:41:4b:8d:03:70:7f:ad:db:21:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:2D:6F:B7:47:55:40:24:A2:D8:B0:1A:96:0A:E7:5A:14:EF:55
            X509v3 Authority Key Identifier:
                keyid:7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0-45.162.134.255
                IPv6:
                  2803:f810::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:dd:03:f1:58:df:1a:d3:c7:ea:2e:37:35:53:13:f1:d1:
         75:e9:30:87:fa:cd:55:b3:46:1e:f2:d6:ba:cc:b2:51:84:af:
         c5:99:f7:0e:a7:ec:59:04:c7:0f:6d:15:bb:7d:50:30:68:7b:
         e1:9b:56:34:99:80:37:c1:48:da:c9:0c:0a:68:78:62:ac:7c:
         51:cf:f8:fa:97:de:0f:ea:98:ba:a2:3d:46:11:d6:a7:ad:bd:
         4f:ab:b0:27:f1:f9:bf:05:45:f9:04:13:d0:4c:78:99:a7:8b:
         6d:03:bb:87:7b:64:7b:74:4e:ec:e3:00:bc:27:91:26:20:d8:
         3d:99:f6:5b:25:ab:20:87:b7:b3:3a:7a:04:b2:dd:3f:61:2d:
         bb:fe:a2:3a:e8:44:b6:33:34:69:61:e3:25:1b:c8:c1:f9:de:
         5a:cb:a2:72:58:a4:a7:00:59:ae:20:42:7d:11:e3:df:7f:0f:
         b1:67:81:ac:21:5f:ab:4d:b3:1b:0b:37:95:63:b8:82:75:8f:
         32:6b:96:9d:47:6d:4a:ff:79:f6:a8:1a:1d:7d:02:85:06:39:
         0b:c1:d6:05:9b:86:3a:d1:be:92:68:20:9a:b6:d8:5d:86:75:
         72:05:ad:7b:5c:ca:10:c8:24:fc:45:b4:9e:37:5b:7f:93:b5:
         8d:f8:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org