Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/d442661dbd1dd068756de578077fa6a4c84ff396.roa
File:                     d442661dbd1dd068756de578077fa6a4c84ff396.roa (raw, json)
Hash identifier:          BtqRr6OEDevIBmn41Lh/KnWgc67BF09V/PlX/Y4B31c=
Subject key identifier:   CD:B5:E9:B3:A2:ED:B7:ED:0E:5F:6C:27:3C:47:74:22:C8:80:CA:9C
Certificate issuer:       /CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Certificate serial:       050B
Authority key identifier: D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/d442661dbd1dd068756de578077fa6a4c84ff396.roa
Signing time:             Thu 09 Sep 2021 16:35:58 +0000
ROA not before:           Thu 09 Sep 2021 03:00:00 +0000
ROA not after:            Sat 09 Sep 2023 03:00:00 +0000
asID:                     266743
IP address blocks:        45.230.204.0/22 maxlen: 22
                          2803:6b20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
        Validity
            Not Before: Sep  9 03:00:00 2021 GMT
            Not After : Sep  9 03:00:00 2023 GMT
        Subject: CN=d442661dbd1dd068756de578077fa6a4c84ff396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:e1:20:8b:ab:60:26:1f:c8:58:81:05:62:
                    b6:82:1a:26:7b:32:a5:76:0f:9b:24:1c:7e:7b:33:
                    7a:59:7e:71:a3:43:0f:20:c2:03:9f:5a:37:fd:d6:
                    2c:91:df:6c:c8:0e:1b:21:3f:ff:07:1e:9f:41:df:
                    2f:56:63:da:8c:0c:82:ed:a3:81:a8:ff:17:6f:ff:
                    ca:69:79:83:48:d1:95:4b:ac:c6:10:e0:48:5e:c3:
                    60:88:76:b6:8f:5a:47:f1:0a:c8:34:ca:1b:ed:a4:
                    cd:21:f4:1d:78:82:79:69:88:4f:ef:1e:21:cf:71:
                    4a:15:45:7f:8d:4b:bc:d8:82:a4:11:0d:7b:04:96:
                    8c:74:be:cc:62:54:88:a5:33:a8:a2:3e:fd:16:73:
                    a3:3c:aa:c8:fb:40:1d:79:fb:57:f4:01:a0:8b:95:
                    c2:c0:be:1d:cc:49:43:da:b5:da:5e:8a:56:0a:38:
                    44:b4:72:47:56:c6:de:0a:25:f3:8a:8c:b3:ff:a6:
                    a7:83:75:68:d7:99:29:1c:6a:31:52:58:44:2b:6f:
                    19:85:34:24:19:b8:fb:ff:cf:c9:b5:16:4e:c0:d6:
                    d5:32:28:d0:23:0a:91:80:17:bd:86:a9:d2:22:39:
                    ac:be:22:6b:3a:58:f5:d2:a3:62:1f:3c:ee:1e:a2:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:E9:B3:A2:ED:B7:ED:0E:5F:6C:27:3C:47:74:22:C8:80:CA:9C
            X509v3 Authority Key Identifier:
                keyid:D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/d442661dbd1dd068756de578077fa6a4c84ff396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.204.0/22
                IPv6:
                  2803:6b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:81:e4:88:52:8a:c3:25:b8:6b:fa:06:66:3d:eb:81:01:
         af:4f:f2:d4:b2:d6:69:97:d6:4b:65:31:00:4b:41:b6:a0:68:
         ad:7e:2d:92:6f:b7:62:21:a4:77:cc:ac:10:c6:4a:d3:ff:6f:
         47:2b:1e:0a:de:e3:c7:1a:70:c6:f8:b1:df:a1:31:bf:ba:89:
         53:1a:60:2d:89:fe:64:b2:91:d2:d6:51:2f:10:41:c2:47:d6:
         2f:0a:a0:98:a4:3e:1c:51:4a:81:a4:6b:cd:0d:61:b9:0c:c8:
         d0:fb:ff:58:ab:c9:b5:b7:5d:d3:e0:a9:0b:5b:6d:73:d4:25:
         d9:2d:b8:e2:be:fb:a8:6f:2d:2e:36:0c:29:7b:b6:d2:1f:1a:
         87:88:54:20:3d:41:f6:e1:8c:64:e1:b2:85:68:a8:1e:a4:c1:
         c8:b3:99:69:7a:8c:a0:26:1d:e9:7e:86:bc:ce:64:1b:39:03:
         cc:7a:61:f2:19:71:11:87:c0:7e:19:cf:a4:9b:d1:55:c4:1f:
         59:0f:9c:4c:4f:2a:1f:0e:f4:38:3b:38:22:fe:9a:64:69:29:
         c3:01:06:fd:9a:0f:9b:b4:41:7f:fc:71:ab:1a:f5:db:78:38:
         6d:fd:d4:fa:df:83:42:c4:91:5e:fd:b7:1e:5c:31:ca:b9:93:
         53:00:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org