Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/b0e680d38f92ef9a6fbb5392dc48004b29e7ef24.roa
File:                     b0e680d38f92ef9a6fbb5392dc48004b29e7ef24.roa (raw, json)
Hash identifier:          o5T1ZcduJAiqyv+dQN504+qqo+UXlxWfQMnX80KaBzE=
Subject key identifier:   63:F0:B3:06:29:CD:42:37:1E:52:B9:6F:5D:16:69:F8:6B:65:D2:C0
Certificate issuer:       /CN=52cabd7c82ad25b1d422313740868842924c1649
Certificate serial:       0CEC8A
Authority key identifier: 8C:1A:92:BF:B3:DB:DD:04:44:92:92:44:4F:58:5F:51:D7:5E:2E:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52cabd7c82ad25b1d422313740868842924c1649.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/b0e680d38f92ef9a6fbb5392dc48004b29e7ef24.roa
Signing time:             Wed 24 Mar 2021 14:34:21 +0000
ROA not before:           Wed 24 Mar 2021 14:34:21 +0000
ROA not after:            Tue 24 Mar 2026 14:34:21 +0000
asID:                     61503
IP address blocks:        45.239.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846986 (0xcec8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cabd7c82ad25b1d422313740868842924c1649
        Validity
            Not Before: Mar 24 14:34:21 2021 GMT
            Not After : Mar 24 14:34:21 2026 GMT
        Subject: CN=b0e680d38f92ef9a6fbb5392dc48004b29e7ef24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:46:9a:d1:d3:db:01:2d:6f:e7:8b:c8:dc:
                    54:ce:1c:e9:b2:ea:07:0f:fb:74:09:02:4e:ff:08:
                    5e:85:89:ec:b5:f0:19:7e:dc:86:ae:4e:cb:68:13:
                    ab:78:4f:5e:a9:52:3c:21:9e:31:f5:d9:a5:53:f7:
                    84:6d:53:13:40:08:08:20:ca:ee:1f:ae:ef:f9:ae:
                    7d:96:d9:45:57:45:ad:e0:5b:06:b0:64:2b:40:b8:
                    99:b1:5c:65:5b:11:29:04:6d:06:bc:da:d2:87:d4:
                    da:48:cb:cd:e9:3f:9a:93:c6:46:62:8e:70:e0:61:
                    25:2f:e4:cb:40:fc:ff:37:1a:50:34:7a:4a:f2:d1:
                    7c:9c:1f:c5:3b:51:59:c5:f4:c8:07:f2:9c:b9:cd:
                    6a:c5:6d:01:2e:09:1e:a8:fb:52:b6:b2:2d:65:e8:
                    06:85:39:5d:2d:17:f4:56:08:f9:e1:5c:c3:9f:f6:
                    a3:a4:3b:ce:6a:6b:8c:2a:8c:1b:0b:b5:ab:dc:96:
                    5a:8f:cf:d9:0a:b8:a5:1b:61:3c:a3:a2:76:8c:f4:
                    28:36:70:88:37:2f:01:fa:9d:42:6e:c5:9a:b2:25:
                    5d:f2:7d:f8:ba:ad:81:ee:91:d5:11:22:26:4f:2f:
                    2b:09:12:55:fb:d8:2b:92:bd:20:fa:e4:8e:79:f3:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:B3:06:29:CD:42:37:1E:52:B9:6F:5D:16:69:F8:6B:65:D2:C0
            X509v3 Authority Key Identifier:
                keyid:8C:1A:92:BF:B3:DB:DD:04:44:92:92:44:4F:58:5F:51:D7:5E:2E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52cabd7c82ad25b1d422313740868842924c1649.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/b0e680d38f92ef9a6fbb5392dc48004b29e7ef24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95ba07cf-b046-4915-838e-136e207ba897/52cabd7c82ad25b1d422313740868842924c1649.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:0f:10:74:0c:70:b5:75:59:d0:4c:5b:51:f5:92:87:fd:06:
         51:fe:48:1f:60:03:d7:8f:7a:8c:90:18:eb:af:44:0d:1a:73:
         30:93:e2:d1:cc:79:69:d1:23:b0:ee:d7:1d:40:84:6e:db:ed:
         8a:1e:26:55:5a:4b:3c:84:8b:25:86:89:f6:58:a2:65:49:37:
         99:d5:37:66:7e:d8:ec:48:4e:ab:d6:d2:b4:82:98:ab:74:7f:
         df:a2:e5:30:27:8c:a1:6c:c4:85:f7:5d:9d:9e:8d:54:89:ba:
         25:62:1c:85:f6:68:06:ff:77:2a:26:fb:1f:a0:46:38:b3:f1:
         55:5b:83:50:1c:47:db:c1:b3:a0:6f:d6:48:b8:a2:13:26:1c:
         c4:e7:8f:67:12:99:b2:ab:0f:13:ed:39:f4:ed:49:c5:09:04:
         49:cc:ce:47:72:9a:80:24:f3:88:b1:76:92:71:66:76:e3:3a:
         ed:be:d8:02:17:12:62:63:56:fb:e2:ed:57:2c:79:27:79:3e:
         2d:cb:fb:35:aa:ee:e5:7b:9c:1a:04:a2:91:11:ed:3f:cf:eb:
         f9:e8:19:93:e0:95:87:31:16:57:43:26:50:a6:62:94:d7:32:
         d8:85:9d:bb:e2:a5:76:4c:07:fc:ac:55:e2:17:8d:61:bb:1a:
         5f:9c:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org