Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1ce29b33fef5517237b3de348b3721431a40a979.roa
File:                     1ce29b33fef5517237b3de348b3721431a40a979.roa (raw, json)
Hash identifier:          mtE62hITSWFjuQgntgZ+E/X+SdhUd7Tn0EK0cb+C+pQ=
Subject key identifier:   E2:F9:44:C5:F4:D8:82:BB:F5:8D:12:EF:04:B8:3B:1A:20:AE:D0:66
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1A6698
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1ce29b33fef5517237b3de348b3721431a40a979.roa
Signing time:             Fri 26 Aug 2022 18:38:27 +0000
ROA not before:           Fri 26 Aug 2022 18:36:15 +0000
ROA not after:            Mon 26 Aug 2024 18:36:15 +0000
asID:                     266904
IP address blocks:        45.71.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730200 (0x1a6698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Aug 26 18:36:15 2022 GMT
            Not After : Aug 26 18:36:15 2024 GMT
        Subject: CN=1ce29b33fef5517237b3de348b3721431a40a979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:16:57:50:8e:0f:59:72:f4:4e:ec:f3:b8:c4:
                    41:15:d0:ed:4c:1e:80:30:0c:d4:5c:4d:da:34:c1:
                    63:f7:17:da:9b:50:c4:db:f2:c4:61:3a:4f:2a:db:
                    0a:9f:f2:2a:48:05:ee:34:44:42:79:cb:8a:c8:f8:
                    4a:d2:94:9f:e5:31:2b:eb:f4:af:fd:bf:30:30:9d:
                    a6:91:a9:54:2c:7b:79:10:3f:16:fc:76:47:1c:5e:
                    be:f5:b4:dc:86:4b:b0:11:ad:92:e0:61:67:e4:b8:
                    82:2f:ff:44:9f:c4:73:1e:cf:9c:28:d3:6a:ae:bf:
                    0d:c9:29:70:4f:49:64:68:d7:60:fe:79:91:ae:35:
                    d3:21:52:0d:c6:db:95:23:9b:c4:6f:4a:3d:6f:df:
                    ea:a9:59:1f:6f:33:5b:35:58:61:87:e6:ae:31:c7:
                    03:2f:d9:5d:ae:7d:9b:42:c2:c2:4f:42:49:7f:af:
                    b7:0c:a7:1c:c7:ce:2f:7a:39:2c:80:16:ca:14:c7:
                    0a:0d:7f:01:62:c7:65:8d:2e:70:48:63:33:8c:38:
                    6c:74:b7:c2:0c:60:b6:97:7b:07:fe:ec:c3:6e:d2:
                    e6:44:40:89:b4:14:cc:5c:14:4c:9b:f8:32:86:cd:
                    cf:49:af:e5:db:54:cd:f4:58:72:d7:e8:49:c5:05:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F9:44:C5:F4:D8:82:BB:F5:8D:12:EF:04:B8:3B:1A:20:AE:D0:66
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1ce29b33fef5517237b3de348b3721431a40a979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:10:7d:16:d4:14:e7:d7:a4:ef:22:a6:8b:cd:24:4b:61:1c:
         aa:56:aa:cf:83:e5:c8:48:60:8b:26:00:f7:06:99:cc:c5:0d:
         d2:11:11:ee:4f:96:8a:f0:be:ed:d8:aa:6c:20:5d:44:a1:9e:
         67:8b:83:47:09:23:f2:1e:ad:ec:c1:bf:f4:32:2e:a5:93:d5:
         29:13:37:45:fe:b6:c0:46:c8:27:b6:7f:4c:48:23:2f:ff:a0:
         8e:0f:07:5a:c1:9c:0d:a3:7c:3e:b4:25:c7:dc:7d:96:e9:51:
         bf:95:f8:3f:cf:83:ed:99:d3:2d:b0:91:84:18:29:65:76:53:
         14:e3:55:91:4e:5a:6f:56:69:40:23:fc:cf:4d:5a:7f:09:fa:
         ad:db:1d:06:82:33:a5:9c:3e:a0:fd:ce:f8:a4:1c:f2:97:ed:
         ec:0b:ae:a9:79:b9:18:3a:a7:06:9e:cb:1d:30:72:cc:70:12:
         f1:56:36:7b:51:67:78:16:a1:5b:63:ef:3b:eb:e9:2c:c8:bf:
         fe:cf:5e:65:86:e5:00:a5:32:89:67:95:c9:26:9c:27:4f:e0:
         ec:65:9b:f1:36:ae:37:1e:69:c2:a7:af:ec:08:66:7b:e8:3e:
         f2:c8:5f:7d:9b:22:1c:cc:5d:b3:ce:50:a3:be:46:bf:23:b4:
         e2:d4:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org