Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/c38c5e4f5d47a8a87e4ce08e4a1edab6150015a9.roa
File:                     c38c5e4f5d47a8a87e4ce08e4a1edab6150015a9.roa (raw, json)
Hash identifier:          8Upm+HXEw7zjbW++qvjVsOzZnXCR0cF4UJq3WS1WR1k=
Subject key identifier:   6F:E8:E2:84:E6:DD:0B:8F:64:D8:12:50:61:35:56:0E:13:81:B0:CA
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       0EEEB1
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/c38c5e4f5d47a8a87e4ce08e4a1edab6150015a9.roa
Signing time:             Tue 20 Jul 2021 13:35:35 +0000
ROA not before:           Thu 15 Jul 2021 03:00:00 +0000
ROA not after:            Sat 15 Jul 2023 03:00:00 +0000
asID:                     267811
IP address blocks:        45.169.142.0/23 maxlen: 23
                          45.169.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978609 (0xeeeb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Jul 15 03:00:00 2021 GMT
            Not After : Jul 15 03:00:00 2023 GMT
        Subject: CN=c38c5e4f5d47a8a87e4ce08e4a1edab6150015a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:ce:97:b8:b4:9b:4a:e6:af:ee:dc:f3:51:
                    52:49:80:2d:a7:2e:0a:7b:6f:19:af:5a:30:67:91:
                    42:99:45:40:53:3d:56:30:70:06:0b:86:06:8c:af:
                    ef:47:18:ff:77:17:ab:c1:22:5b:7a:aa:1e:c2:29:
                    f2:e4:6a:4e:73:8f:4c:cd:ed:8f:95:e0:13:f0:f9:
                    ec:e2:87:16:99:de:af:5d:37:b5:9b:62:9e:63:8b:
                    3b:25:ea:a9:2f:b8:d6:d2:0e:e1:31:68:97:ae:38:
                    34:57:b7:e3:85:41:cc:3d:70:24:f5:7e:a0:2f:69:
                    a2:24:56:d4:ac:e0:ab:d1:4a:c0:61:4f:09:ca:98:
                    1c:01:66:1c:b0:b5:1b:e5:c5:4d:af:3e:1b:15:57:
                    4c:0f:3b:a1:79:e2:25:50:cb:53:e6:87:f6:88:f0:
                    95:f4:71:7b:57:38:4d:a7:c7:f1:f4:a9:eb:95:45:
                    07:7d:95:e8:f4:b7:4c:92:4d:49:c2:bd:1d:43:73:
                    97:58:92:ad:70:38:78:f5:f4:69:9c:95:21:7c:8b:
                    90:6c:c3:06:1f:59:97:a7:8b:0a:fc:11:ad:4a:c0:
                    5a:2f:ca:c1:c6:3e:92:79:7a:97:89:36:d3:02:b5:
                    2f:a6:e0:2a:73:f8:67:96:87:58:8a:02:68:70:b4:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:E2:84:E6:DD:0B:8F:64:D8:12:50:61:35:56:0E:13:81:B0:CA
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/c38c5e4f5d47a8a87e4ce08e4a1edab6150015a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:32:6d:9d:e5:8c:b7:c6:74:dc:5e:4e:2a:8f:33:fc:1d:
         1c:98:23:e6:2d:3e:fc:96:35:54:d2:3d:fa:a0:9f:02:0e:29:
         59:61:be:dd:4b:c7:5d:41:d4:9c:b5:41:c9:52:ad:0f:fd:de:
         bf:2b:cf:1b:7d:25:ed:16:f9:a8:08:17:5f:58:98:0c:43:61:
         34:3b:cc:62:e1:28:2d:eb:dc:ab:cc:23:bb:27:ce:7a:b4:ce:
         c7:04:df:36:63:23:d6:47:69:6d:f5:c2:6a:c0:1c:7e:19:82:
         05:f6:0b:36:b9:1a:f8:ed:2c:29:7f:10:01:8e:36:e1:fd:36:
         15:5a:52:47:f7:a8:b1:7f:9b:f1:30:ee:ed:6f:a2:38:e2:6a:
         67:d6:17:22:de:45:fc:ce:f2:41:5f:95:a6:06:df:83:b1:47:
         1c:8e:76:bc:35:73:8c:cf:85:2a:d7:48:18:93:1b:9e:3c:36:
         dc:df:03:84:f4:61:24:e5:04:19:17:ea:49:ae:ac:ac:82:e2:
         47:9a:43:99:49:c5:ca:db:8e:6f:05:9c:72:19:43:fd:82:9b:
         c2:8e:d7:7b:6f:24:6f:0b:24:f5:d1:13:7e:5a:10:3b:78:28:
         45:fb:53:41:be:01:db:45:f4:b0:0e:c9:85:8d:ec:34:8e:e6:
         c0:40:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org