Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/321687a86dfae8faad6652b4f562df83f0a6856c.roa
File:                     321687a86dfae8faad6652b4f562df83f0a6856c.roa (raw, json)
Hash identifier:          09nEYjwo5ca5cS+jtIDrgsPkGEyJgo+qmY7ybh2+Ir8=
Subject key identifier:   C2:B1:99:27:E9:4B:21:6F:CC:8C:E3:41:B3:C6:74:C4:A6:56:AC:62
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       16C8DA
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/321687a86dfae8faad6652b4f562df83f0a6856c.roa
Signing time:             Tue 15 Aug 2023 14:11:12 +0000
ROA not before:           Mon 14 Aug 2023 14:11:11 +0000
ROA not after:            Fri 15 Aug 2025 14:11:11 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493210 (0x16c8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Aug 14 14:11:11 2023 GMT
            Not After : Aug 15 14:11:11 2025 GMT
        Subject: CN=321687a86dfae8faad6652b4f562df83f0a6856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:5f:22:f0:76:15:28:38:4f:6c:ec:1b:53:
                    a6:3e:c9:da:55:a3:cb:72:d1:8e:0c:45:3e:66:63:
                    55:f6:64:30:9c:6f:f5:70:8d:90:98:65:2f:a4:2c:
                    00:30:97:81:11:74:1a:39:27:e7:a1:85:c4:58:41:
                    00:c9:5c:b8:12:f6:bd:8a:22:9d:32:6d:af:b0:bc:
                    4a:52:4f:35:31:b5:79:23:14:5d:e0:10:3b:a1:7b:
                    6c:d2:a6:56:a0:c5:43:5e:7e:60:83:29:d3:83:ff:
                    3c:d0:e4:a5:58:19:49:90:73:a4:9e:12:9e:89:5c:
                    b8:9c:52:89:62:7f:57:65:58:65:04:82:c5:3b:9e:
                    59:52:3d:53:18:fe:7c:ee:e5:cc:b5:69:a7:8b:78:
                    8a:1d:46:b5:24:61:4e:61:38:f6:2d:ea:68:49:d8:
                    a9:9f:f0:08:28:00:0f:f3:ef:83:35:40:2a:8a:81:
                    7b:e3:ad:b5:b6:57:52:54:dc:08:3d:4a:3e:12:06:
                    5d:0e:b6:04:17:67:09:e2:3d:d6:2a:51:4c:3c:5b:
                    31:1f:df:56:08:04:3b:2f:1b:86:61:4a:4b:d9:3e:
                    cb:d7:8e:c6:bb:fe:0e:6b:63:cf:3c:35:bb:f1:10:
                    43:0b:3f:a8:09:8c:d0:d0:21:73:3f:9a:48:f3:1d:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:99:27:E9:4B:21:6F:CC:8C:E3:41:B3:C6:74:C4:A6:56:AC:62
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/321687a86dfae8faad6652b4f562df83f0a6856c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:27:cd:56:8b:22:1b:05:c7:12:51:5d:2b:ac:38:cc:d2:d3:
         ee:f2:e1:42:c8:74:4b:c9:e0:97:ec:22:e0:e0:eb:0d:62:a6:
         8f:44:ba:54:82:f1:1a:63:fb:b9:d1:b0:bb:b6:79:2b:74:a2:
         bc:ce:9f:12:57:41:51:0e:5b:1f:cb:66:1b:b8:b7:a8:30:91:
         81:2f:2f:a3:f6:35:05:d3:9a:6d:9b:8f:74:a4:fb:6f:83:90:
         31:cb:51:70:d8:cc:d3:8a:1f:ba:6c:30:a7:50:9e:84:dd:9e:
         fa:0b:d4:50:28:f4:59:d0:df:b1:9f:ad:c4:a1:18:ab:fc:08:
         11:74:40:e2:7b:ba:77:92:00:54:60:b9:8c:c8:d3:fa:da:17:
         78:3c:97:a4:b9:17:f4:92:7b:4f:e5:c7:70:ad:cc:14:ac:2b:
         70:a2:59:e2:d0:a6:d0:7b:40:ac:eb:bb:0a:fd:24:b3:5b:ce:
         17:53:0f:b5:c7:5a:a5:a5:98:2a:c2:2b:69:40:8b:59:f8:5d:
         69:07:bd:e5:c7:bd:5d:86:12:1c:ce:2d:a5:9a:f6:b9:aa:34:
         af:6a:23:da:18:38:a6:3e:e8:a7:af:e7:fb:b7:a3:7e:79:87:
         3d:c7:3b:f2:71:9f:36:4a:7e:85:f1:7d:29:1b:d6:80:88:da:
         c3:d5:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org