Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/d7b087b3ad8bedcd881e49a2d90e482978b0f58f.roa
File:                     d7b087b3ad8bedcd881e49a2d90e482978b0f58f.roa (raw, json)
Hash identifier:          K0kFDGu3uxy+I58NRMOlGWFOArfZlhpnmE3RgIx0S64=
Subject key identifier:   DB:F0:EB:B5:F0:9E:78:65:69:DB:7D:CE:62:CA:AA:17:68:44:9C:8C
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       017F1D
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/d7b087b3ad8bedcd881e49a2d90e482978b0f58f.roa
Signing time:             Thu 15 Apr 2021 15:27:16 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98077 (0x17f1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=d7b087b3ad8bedcd881e49a2d90e482978b0f58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:ed:97:78:f1:1f:24:9a:b3:d6:29:21:11:
                    79:fc:6f:01:c4:9c:ca:0b:85:56:f4:2e:19:2b:56:
                    99:ca:5b:f2:a8:90:5f:34:67:bc:bf:90:4c:2c:8c:
                    00:75:18:f4:8f:7f:bb:f5:b5:a7:8b:d6:33:9e:4d:
                    c1:0a:15:6b:33:67:d3:55:00:c6:fb:93:f1:f4:b6:
                    3f:9e:d3:02:34:7e:8f:be:2e:fb:bc:3c:c7:1a:e3:
                    d3:35:c9:0e:2c:01:4c:25:81:42:7d:be:fc:77:2c:
                    5d:bf:97:4a:78:f1:dd:2e:01:13:17:07:c6:f1:f1:
                    74:09:2c:d7:21:22:9e:4f:bd:0c:68:14:74:ff:a7:
                    c9:74:e3:20:d5:b9:0a:03:ad:9d:7e:40:bf:de:74:
                    14:bf:19:ec:b1:32:60:ff:22:1c:10:83:3f:c0:a0:
                    a2:7c:83:8a:da:24:68:46:f2:5a:47:5e:cf:e1:c0:
                    1f:c5:97:a1:a6:d6:d6:2a:b1:a8:c8:08:2d:60:83:
                    cd:bd:36:aa:c1:0a:dc:80:f3:b3:ad:ef:29:1f:6c:
                    9e:d2:34:f7:76:e5:5f:fc:b4:57:4e:91:0d:54:ac:
                    a6:c4:60:be:23:6b:60:17:ff:63:b8:5c:b0:09:8d:
                    76:e0:a6:2b:10:60:4c:4c:0a:98:51:49:02:9f:6e:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:EB:B5:F0:9E:78:65:69:DB:7D:CE:62:CA:AA:17:68:44:9C:8C
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/d7b087b3ad8bedcd881e49a2d90e482978b0f58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:71:d9:47:0a:d5:bb:df:0c:48:44:10:13:88:d2:53:28:3e:
         37:63:e7:7f:61:83:f4:7e:8e:d9:b9:36:bf:d6:ff:d4:fc:34:
         cf:dc:40:6e:b2:37:dd:1a:54:5a:2a:ca:e1:6a:6f:1f:05:a8:
         9b:dd:f4:0c:36:ac:ea:11:5a:e6:9f:3d:ed:d0:5b:d5:00:c3:
         a7:a9:70:93:40:e1:a3:00:fc:0c:20:6d:89:15:35:de:45:58:
         87:7d:6d:33:84:43:b4:21:48:e5:8d:c5:63:53:ba:f5:4f:30:
         c3:b5:78:fa:db:a7:d0:23:f4:4e:be:50:30:eb:bf:2b:dd:9f:
         ec:b6:41:9a:22:3e:a1:40:df:50:53:6d:88:9c:bf:de:de:b4:
         88:d1:59:52:d3:f5:21:a3:43:aa:49:dd:c6:ff:b1:e5:7c:25:
         e0:48:d8:f9:23:90:f3:8d:7c:91:9a:e8:ed:11:ae:37:a2:49:
         4d:2d:be:6f:e4:f7:d3:25:13:55:ab:43:32:10:f1:2b:b6:ac:
         59:a3:18:ca:1c:cf:cf:13:e4:63:9b:99:48:0c:25:61:3a:f2:
         ec:82:28:45:83:43:a7:7d:b3:89:cd:d7:21:0c:30:b4:45:39:
         c8:f1:98:2c:c1:7c:4d:ba:0a:d1:14:8b:13:ce:ee:ab:f2:78:
         f5:bc:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org