Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/864bdbed-cb0f-465e-8833-01a0cc7aaffd/94af098774cd53cf3026499e2b0bfd57b6b22a1a.roa
File:                     94af098774cd53cf3026499e2b0bfd57b6b22a1a.roa (raw, json)
Hash identifier:          KYDqARnTScPUd0SkotDGu+I9XoHSanpOOkfOhVcqJ6U=
Subject key identifier:   34:31:93:71:3D:B8:F0:86:9A:B2:A0:32:5E:44:0C:CC:88:8A:AD:7D
Certificate issuer:       /CN=cd9217380fbeda8910e1ecdfbbf5e7280e4f20d3
Certificate serial:       0C67B7
Authority key identifier: F9:B8:3B:52:EF:7C:49:33:D0:35:ED:F5:47:9B:40:0B:6D:50:0E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd9217380fbeda8910e1ecdfbbf5e7280e4f20d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/864bdbed-cb0f-465e-8833-01a0cc7aaffd/94af098774cd53cf3026499e2b0bfd57b6b22a1a.roa
Signing time:             Wed 24 Mar 2021 14:30:45 +0000
ROA not before:           Wed 24 Mar 2021 14:30:45 +0000
ROA not after:            Tue 24 Mar 2026 14:30:45 +0000
asID:                     267707
IP address blocks:        45.163.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812983 (0xc67b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd9217380fbeda8910e1ecdfbbf5e7280e4f20d3
        Validity
            Not Before: Mar 24 14:30:45 2021 GMT
            Not After : Mar 24 14:30:45 2026 GMT
        Subject: CN=94af098774cd53cf3026499e2b0bfd57b6b22a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:32:05:d4:98:ce:33:6c:6e:56:1e:b5:f2:
                    3a:ea:3f:cc:b8:a0:13:10:b0:f4:46:63:7f:da:2f:
                    9e:17:cf:db:62:a8:ac:a1:8a:d9:f9:a0:2c:bb:be:
                    68:81:7a:f8:f9:fe:03:d5:0c:c0:ba:6f:4c:a6:d4:
                    34:31:14:38:a1:fd:36:a5:86:a7:50:74:01:83:91:
                    d9:7e:50:17:6f:00:18:92:9f:2e:45:c7:1a:de:0b:
                    50:9e:d6:87:03:fa:4e:a1:5f:cd:28:80:07:96:1e:
                    49:b2:33:71:0d:e2:ff:fe:55:54:9b:60:7d:12:52:
                    5e:42:51:93:f5:00:b5:52:66:ca:14:08:c4:95:fc:
                    06:f8:67:39:04:f1:48:a3:ac:30:e5:f3:4e:99:ed:
                    19:48:1f:60:63:b2:f2:e7:14:08:c9:d7:82:67:e3:
                    5f:d7:b6:c9:a6:b0:9c:7c:9c:64:30:e2:ba:a5:2a:
                    06:60:af:82:8e:cb:95:ed:13:fd:75:25:3e:9c:48:
                    dc:38:ab:6a:e8:79:9a:1b:61:e5:2e:48:f6:9d:e0:
                    fa:3b:29:1a:25:2b:8b:80:3f:94:fd:6e:72:07:31:
                    8a:5c:43:08:9d:4d:95:95:2f:22:cb:75:4c:c2:ce:
                    4d:b9:d2:f2:8b:df:14:2d:dc:0f:17:58:42:6a:4b:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:31:93:71:3D:B8:F0:86:9A:B2:A0:32:5E:44:0C:CC:88:8A:AD:7D
            X509v3 Authority Key Identifier:
                keyid:F9:B8:3B:52:EF:7C:49:33:D0:35:ED:F5:47:9B:40:0B:6D:50:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd9217380fbeda8910e1ecdfbbf5e7280e4f20d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/864bdbed-cb0f-465e-8833-01a0cc7aaffd/94af098774cd53cf3026499e2b0bfd57b6b22a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/864bdbed-cb0f-465e-8833-01a0cc7aaffd/cd9217380fbeda8910e1ecdfbbf5e7280e4f20d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:cb:ff:91:fa:24:3f:0a:a6:42:bf:f6:2d:d2:fe:db:73:
         e6:9b:4d:03:e1:c5:0a:3d:07:eb:a9:1e:f5:0a:39:a3:ab:7e:
         31:1f:9d:5a:ea:7c:f1:9e:cf:79:6a:89:76:11:40:1c:6e:df:
         2d:2f:0f:d0:f2:1f:1d:64:8e:92:ea:fd:93:15:0d:78:91:06:
         81:c1:99:0f:31:87:87:1b:57:72:b7:62:8e:33:8c:ae:87:cf:
         07:d3:35:fd:8f:68:4e:47:0b:06:76:72:84:ba:12:3e:b1:41:
         c8:48:bc:e4:43:e3:ab:6a:a1:e5:48:9b:56:60:ef:c2:b9:dd:
         5f:d7:aa:4b:a6:69:f6:db:c6:83:86:30:5a:75:a6:0d:8e:ce:
         a3:2a:c5:87:9b:df:b4:c2:b6:cb:52:b2:1d:c9:a0:b6:3d:16:
         c8:c1:6d:7f:51:10:6c:32:29:83:4d:68:f1:d4:d8:2c:17:a6:
         87:c4:87:11:50:57:99:ac:da:48:13:e2:f6:01:ae:5c:b2:64:
         03:fb:d6:64:df:62:7b:c8:fd:96:bc:d7:31:54:65:0f:5d:bb:
         af:5e:05:22:9e:17:74:b7:b9:84:5f:60:be:10:1e:53:59:b3:
         6b:12:d8:82:97:d7:a4:6a:20:c4:19:53:ed:76:50:69:cd:b9:
         cf:29:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org