Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/fdbf963c68adf8eacd6edaed6715a7b45e48737c.roa
File:                     fdbf963c68adf8eacd6edaed6715a7b45e48737c.roa (raw, json)
Hash identifier:          yFriy534piifkqnBS4CUgU+26fsAgcuXwmfyEIemuPU=
Subject key identifier:   6F:9E:80:F0:9E:5D:14:0F:D5:DF:21:29:9D:5C:1E:75:E8:EF:6F:24
Certificate issuer:       /CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Certificate serial:       01073D
Authority key identifier: 09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/fdbf963c68adf8eacd6edaed6715a7b45e48737c.roa
Signing time:             Thu 26 May 2022 22:49:22 +0000
ROA not before:           Thu 26 May 2022 03:00:00 +0000
ROA not after:            Sun 26 May 2024 03:00:00 +0000
asID:                     270143
IP address blocks:        45.7.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67389 (0x1073d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
        Validity
            Not Before: May 26 03:00:00 2022 GMT
            Not After : May 26 03:00:00 2024 GMT
        Subject: CN=fdbf963c68adf8eacd6edaed6715a7b45e48737c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:24:ff:88:af:09:c5:0a:7f:5f:87:68:7d:
                    1a:d2:b0:45:53:77:7b:49:21:67:60:c8:b8:0b:bf:
                    d8:4f:42:7b:a8:a9:c0:17:ac:c2:1c:e5:0f:fd:43:
                    38:39:66:a8:8e:c1:b8:b3:bb:03:0f:1d:39:da:74:
                    2f:24:cd:b8:99:76:6a:f2:83:84:02:1b:ea:c3:6f:
                    18:56:a1:0f:b4:84:a4:da:9d:f7:5c:84:18:32:b9:
                    16:46:dd:8a:3d:7e:c8:2d:6e:81:73:87:d1:47:05:
                    6e:8c:4e:df:13:57:5e:b0:86:4d:7f:08:6d:a7:5b:
                    0a:82:55:dc:e9:71:1b:58:0a:5c:22:56:cc:ad:61:
                    bd:03:5f:4b:a4:83:2d:68:a0:67:ee:ff:7f:0d:16:
                    9c:de:35:90:12:dc:ca:37:e8:34:d7:31:92:c2:d4:
                    8a:6d:ad:43:4c:65:e7:7d:3a:47:31:bb:1d:09:7a:
                    aa:9c:f2:4f:46:27:19:54:82:58:23:78:fc:4b:3c:
                    ab:79:10:43:1d:08:78:fc:f2:89:95:e1:d7:de:49:
                    53:fb:ae:97:bf:62:45:11:9f:42:e0:16:fa:34:1e:
                    44:35:73:d7:b2:7d:5b:2e:83:5a:c7:7b:35:fb:e0:
                    fa:d0:f3:d0:e8:a4:85:8f:ac:44:26:9e:3a:a7:33:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9E:80:F0:9E:5D:14:0F:D5:DF:21:29:9D:5C:1E:75:E8:EF:6F:24
            X509v3 Authority Key Identifier:
                keyid:09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/fdbf963c68adf8eacd6edaed6715a7b45e48737c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:b0:05:d8:88:03:5b:00:73:49:5b:26:f0:6d:3e:70:7a:
         29:53:43:62:fa:7f:32:25:64:e2:7c:c1:2b:9a:79:4d:65:25:
         09:f9:f7:05:94:98:a5:71:51:33:de:c3:22:8d:ed:55:bd:09:
         f6:b9:33:3b:7e:fd:1c:5e:20:49:16:64:43:49:0c:33:6c:46:
         30:ef:97:7b:a7:29:35:91:93:86:42:14:af:68:14:7d:d7:f0:
         d0:1d:ed:05:0b:57:83:dd:f2:24:a9:3a:db:41:24:85:cf:62:
         2b:c6:7f:9e:75:a1:82:23:7a:7b:0f:90:d1:86:bc:f4:17:d4:
         4d:8f:1c:50:8b:af:83:33:72:ca:1d:3d:86:c2:3e:ae:07:1b:
         46:a0:b2:c4:da:cf:49:30:1b:30:c9:5b:16:c2:c7:5e:8f:dd:
         a4:31:56:c3:9b:5d:b3:99:45:b8:c2:87:96:49:2c:f3:a0:0f:
         d5:37:3f:65:0d:54:bc:29:27:3e:93:15:17:28:7b:a5:b7:82:
         74:bb:12:98:a3:e0:b5:f4:b3:de:0e:55:d4:da:4c:b7:fd:b5:
         87:24:de:c6:ef:1f:c7:16:a9:82:2c:24:8d:dc:25:b9:08:f5:
         10:b6:a2:75:74:2f:8b:e0:e9:c1:3b:5e:82:a1:b5:ef:a4:66:
         ed:c7:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org