Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/57d597a1c0ec536fb83328ff252bd4699d35f9b9.roa
File:                     57d597a1c0ec536fb83328ff252bd4699d35f9b9.roa (raw, json)
Hash identifier:          jj1ul4+0KNzeCDLTqa2GW2PtILNdCBD3Cpb3m8ufh6U=
Subject key identifier:   7B:16:BA:FA:04:98:5D:EE:94:14:9E:55:F0:EE:07:C4:43:FA:B7:80
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       201BE6
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/57d597a1c0ec536fb83328ff252bd4699d35f9b9.roa
Signing time:             Mon 13 Mar 2023 15:43:00 +0000
ROA not before:           Wed 22 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     272121
IP address blocks:        45.71.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104294 (0x201be6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Jun 22 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=57d597a1c0ec536fb83328ff252bd4699d35f9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:79:d9:1f:63:fc:3a:38:12:a2:a8:e1:cc:
                    88:11:26:c8:18:f7:a4:b9:f2:0d:e2:ee:78:74:6a:
                    43:30:55:f7:52:7c:48:f5:07:92:7c:28:7f:c9:c0:
                    da:9f:f5:3f:4d:65:44:4c:cb:d2:0c:95:f6:1f:71:
                    62:45:80:ff:95:b5:9a:4a:42:59:d4:6e:df:9c:6a:
                    63:2d:b2:f4:ab:ba:62:3b:f4:3e:ef:3b:7c:92:49:
                    27:9f:b5:f6:86:88:c7:1d:89:d3:16:ef:1a:dd:c8:
                    ad:21:78:e9:56:9c:ba:b6:75:e3:a4:8f:98:8e:33:
                    03:3b:e3:9b:57:43:5f:72:dd:c5:63:a8:9b:34:bf:
                    f7:a8:a1:97:8b:4d:6a:cb:ac:22:85:9e:ec:83:ac:
                    74:69:69:0a:77:75:ce:a0:7b:65:94:9c:86:38:bb:
                    af:76:8c:a6:4e:6a:1b:ce:35:1f:c2:04:30:ce:a0:
                    2b:c8:25:39:06:bd:53:46:99:5a:f5:d3:ca:3b:5b:
                    4b:a8:ae:c6:48:7a:f6:a9:55:2b:40:08:af:87:63:
                    bd:55:1f:05:fe:07:5c:9b:19:14:81:ea:27:db:07:
                    37:b7:6d:59:9d:ed:2e:b6:9c:92:5c:43:e6:43:2e:
                    a4:61:b7:48:d6:df:76:6e:bb:98:27:48:9c:0d:37:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:16:BA:FA:04:98:5D:EE:94:14:9E:55:F0:EE:07:C4:43:FA:B7:80
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/57d597a1c0ec536fb83328ff252bd4699d35f9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:57:a1:bd:9d:15:cb:58:63:5c:ec:d9:d4:dc:a1:fa:7b:2b:
         bc:47:b8:3e:af:4e:c5:89:63:7d:2b:ef:32:01:8c:51:27:1c:
         d8:aa:ea:05:6e:79:3c:e4:cd:af:54:3d:a5:a4:e1:27:0f:c0:
         05:af:b1:f6:2d:20:07:e1:e6:ae:59:2c:92:c8:35:44:2b:72:
         4a:52:a7:a1:14:be:df:d5:22:be:6d:e1:c7:3c:bd:6e:0c:9c:
         f1:06:bb:16:c5:3e:ca:96:67:14:81:c8:fe:10:e8:86:d3:dd:
         7d:e8:2e:88:ab:f2:5a:00:70:4e:c6:1d:16:55:97:2c:38:67:
         d3:c4:0e:95:af:df:16:da:23:65:12:22:5e:7f:1c:1f:fc:a1:
         2c:dc:c2:1f:22:ca:04:5d:12:40:25:a8:94:fa:cd:9f:78:2e:
         da:77:6d:f3:ce:af:7a:55:73:fe:85:bc:32:7b:90:06:a8:1a:
         7d:b1:b6:a4:b8:55:5e:bc:3f:56:72:04:ec:59:10:dc:a8:30:
         e2:0a:8b:7b:85:c8:3d:ed:79:f7:a9:8d:4f:b0:71:3e:b2:34:
         60:31:ba:82:46:e3:d8:0c:97:8c:2a:92:08:e5:4d:2f:38:f3:
         47:58:c0:3c:8c:a7:2c:dd:0f:a7:c8:d4:40:0d:16:06:d6:92:
         42:41:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org