Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/da230defd48d3d127072d5ae353cd7fa95ddb310.roa
File:                     da230defd48d3d127072d5ae353cd7fa95ddb310.roa (raw, json)
Hash identifier:          fW3sAVASZ+O4GNaU7I9o8Z217ChyamsAERf2KKlrsyc=
Subject key identifier:   74:09:AE:0D:D0:C2:58:B5:49:20:75:CA:B3:65:E8:30:B8:95:D6:58
Certificate issuer:       /CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Certificate serial:       07A0
Authority key identifier: 09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/da230defd48d3d127072d5ae353cd7fa95ddb310.roa
Signing time:             Mon 18 Apr 2022 15:49:38 +0000
ROA not before:           Mon 18 Apr 2022 03:00:00 +0000
ROA not after:            Thu 18 Apr 2024 03:00:00 +0000
asID:                     270143
IP address blocks:        45.7.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
        Validity
            Not Before: Apr 18 03:00:00 2022 GMT
            Not After : Apr 18 03:00:00 2024 GMT
        Subject: CN=da230defd48d3d127072d5ae353cd7fa95ddb310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:07:5c:bc:eb:c5:94:24:9a:e6:f3:9b:28:
                    a7:fc:3f:50:9f:c1:22:ae:34:d1:d7:2b:39:6e:af:
                    6d:bf:43:29:89:aa:40:54:ec:0c:4f:ca:94:5a:d4:
                    26:32:dd:07:b0:be:d4:6e:a2:01:69:18:54:c4:f0:
                    98:e4:4e:52:04:de:e3:6e:99:37:7f:94:cc:55:0a:
                    d4:8a:4f:5a:cc:31:b1:95:e6:10:45:7c:6b:90:01:
                    8f:ce:14:c7:bc:79:3c:6e:1e:39:c6:bf:98:7d:39:
                    a0:e3:9f:8a:ac:47:b6:f7:6b:1c:bc:e0:b2:ea:62:
                    8d:22:10:d7:e5:e3:49:07:1d:15:83:1e:2b:34:65:
                    83:66:4d:b6:00:dc:47:c2:21:76:4f:92:ba:71:7d:
                    7c:79:22:cf:34:9d:fa:d3:a2:af:15:3e:29:9e:01:
                    15:b3:95:a6:53:50:4e:c8:67:11:39:bf:28:e4:fb:
                    7a:15:be:3a:ac:c8:24:f3:98:5a:8d:ec:22:88:84:
                    2e:4b:c7:6b:94:5e:ce:05:70:e5:f1:10:d9:b1:57:
                    c8:c1:f3:69:2a:ca:2d:7d:1a:13:4b:ac:58:ac:17:
                    0e:46:2e:35:e8:9a:2f:41:84:50:94:2c:25:1b:01:
                    eb:ac:53:69:76:db:7c:54:55:e4:0e:f4:f4:1f:df:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:09:AE:0D:D0:C2:58:B5:49:20:75:CA:B3:65:E8:30:B8:95:D6:58
            X509v3 Authority Key Identifier:
                keyid:09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/da230defd48d3d127072d5ae353cd7fa95ddb310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:52:29:4c:3a:5e:33:cb:68:fc:74:67:23:d9:2d:0a:bb:
         30:27:0d:36:33:0c:3a:97:35:65:7e:e4:29:bf:17:91:65:c5:
         a2:83:e4:9a:a4:bc:89:cc:2e:fc:be:4b:2c:c8:a3:6f:e2:86:
         34:1c:9b:1a:e5:fa:8a:93:a4:1f:41:6f:fc:84:7f:e7:31:f1:
         28:09:a9:32:2c:81:ce:60:64:25:a7:f2:f8:e2:b7:fd:ce:7c:
         77:97:90:69:54:92:d1:b9:1f:69:b6:bb:29:fe:95:48:fa:03:
         a8:54:25:ae:b5:02:22:3e:4d:f2:47:d7:21:33:14:79:95:1f:
         55:d5:2f:c9:51:7f:8e:a2:a1:23:f3:68:29:df:69:9c:ec:01:
         fe:7b:17:ba:86:7e:2a:41:a3:ec:fa:6c:40:b8:a1:3f:42:28:
         6c:9e:b8:46:93:55:78:56:4e:2e:c8:94:ee:9e:23:36:97:cb:
         02:f6:db:f7:8e:a9:3a:7e:a8:2e:81:b1:95:df:e3:bc:b0:d2:
         70:e7:05:b6:54:9c:ed:40:26:f4:73:f6:13:5e:14:36:b1:23:
         dd:a3:bf:f3:3a:e7:6d:9c:07:21:e1:00:2f:0c:ff:64:2d:61:
         09:f6:5c:2a:2d:58:a2:44:1d:7f:d3:0b:95:f6:84:a3:7a:b3:
         3e:62:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org