Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/c4cbf591bc70717fe0a14f1dfa05fb64d40168c6.roa
File:                     c4cbf591bc70717fe0a14f1dfa05fb64d40168c6.roa (raw, json)
Hash identifier:          /uA9j2P/Yi+GuJhfw+pVuvswvOitfKUdVBNP1w6JgD0=
Subject key identifier:   10:4A:94:E7:91:56:9A:B7:93:75:E8:DF:B3:CC:17:19:D3:EE:54:92
Certificate issuer:       /CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Certificate serial:       01DF66
Authority key identifier: 09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/c4cbf591bc70717fe0a14f1dfa05fb64d40168c6.roa
Signing time:             Fri 01 Jul 2022 05:47:32 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Mon 01 Jul 2024 03:00:00 +0000
asID:                     270143
IP address blocks:        45.7.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122726 (0x1df66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  1 03:00:00 2024 GMT
        Subject: CN=c4cbf591bc70717fe0a14f1dfa05fb64d40168c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:14:ff:95:d4:53:ea:88:d6:6f:bd:68:bd:
                    44:ea:38:96:89:aa:d0:f0:48:23:56:af:49:cb:10:
                    a4:f9:6b:48:3d:e4:03:ee:c7:96:bb:6b:c6:83:4c:
                    0d:a8:56:07:a3:b7:2a:10:91:f6:2e:2a:a2:88:10:
                    d8:3f:45:76:1b:64:8c:c3:9f:66:23:65:21:20:4a:
                    37:56:be:33:f6:89:9b:f6:0e:d1:c0:38:0b:35:8e:
                    f4:c3:12:1e:5e:73:d4:44:c8:bb:1c:da:bc:2d:a7:
                    d9:2c:c3:14:b2:d6:bf:87:0e:c8:99:32:b5:bb:b5:
                    18:58:11:57:55:bc:55:7d:5c:72:6b:77:dd:cc:c2:
                    cf:37:b5:2e:83:74:c2:a5:12:57:b5:fd:1d:83:eb:
                    dd:18:ad:d5:e8:72:ff:e6:2a:4c:8e:77:50:b9:00:
                    bb:00:c7:6a:2d:dd:6e:27:e0:ce:64:c3:be:a4:38:
                    78:1c:29:99:54:e0:4c:a2:b2:e2:25:b6:c5:fd:6b:
                    1c:84:8c:d0:50:5f:d5:06:f0:cc:24:7a:d1:07:bd:
                    e7:25:ad:03:d5:76:27:5f:39:63:0b:1c:fd:04:fe:
                    98:8f:74:a1:ae:ae:b9:84:34:f8:ab:d2:82:37:48:
                    c0:43:a6:a3:70:9b:c2:23:35:d9:26:50:d6:13:59:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:94:E7:91:56:9A:B7:93:75:E8:DF:B3:CC:17:19:D3:EE:54:92
            X509v3 Authority Key Identifier:
                keyid:09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/c4cbf591bc70717fe0a14f1dfa05fb64d40168c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:12:47:bd:74:d7:71:b3:96:b4:f9:44:3e:73:ac:e3:de:
         20:b2:26:6d:a7:db:6a:2c:85:01:3f:99:e5:41:58:fe:b4:bc:
         a4:3f:e5:8d:95:82:9b:ee:f9:1b:d5:e5:7b:65:90:05:73:ad:
         6f:a3:98:f3:bf:21:aa:73:b7:0f:f6:6c:40:b5:3e:68:a4:31:
         bd:6c:6a:e3:8c:1a:eb:91:d8:f8:bf:6e:4b:cc:12:0b:7b:2e:
         c4:cf:f2:df:70:eb:e9:5e:4f:f6:a3:7a:78:bf:c2:a2:a2:7a:
         62:17:cd:4d:f0:b5:22:2a:07:94:7d:7b:0e:38:af:08:aa:b8:
         61:b7:8f:c1:82:c7:3d:cf:ec:2e:af:28:09:b6:5d:b4:19:bc:
         65:82:da:3e:8f:ef:39:5b:53:e4:b2:17:92:56:03:27:4c:94:
         85:2d:e1:55:d2:d9:8a:7d:11:86:8e:66:d3:a6:f0:2a:8c:30:
         ca:35:bb:66:9d:d2:82:fc:3d:94:33:72:96:b7:05:a9:4e:e8:
         33:21:91:24:06:a3:f9:23:0e:7b:d6:c6:0f:fa:78:7b:c4:9c:
         96:0f:81:dc:7d:b0:a0:ec:2c:6c:91:c2:bd:d7:ce:3c:f8:19:
         9c:fe:67:fd:a9:eb:78:8e:27:81:e4:81:c2:62:6e:d8:62:0b:
         9a:e5:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org