Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/c380d9add7f1e650566a9e3b7d2ba4d693380d99.roa
File:                     c380d9add7f1e650566a9e3b7d2ba4d693380d99.roa (raw, json)
Hash identifier:          FjtYLAxfxmajpAEb5Vrk5q6ROxuCLbSwUIr5bXuYkDo=
Subject key identifier:   C6:8A:D4:4A:BC:E2:28:F9:86:A5:2D:1F:B3:99:86:2B:05:CE:8C:33
Certificate issuer:       /CN=7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9
Certificate serial:       0C3529
Authority key identifier: 83:16:29:5C:A6:DE:03:11:B2:7D:0E:49:35:2F:60:48:E3:63:91:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/c380d9add7f1e650566a9e3b7d2ba4d693380d99.roa
Signing time:             Wed 24 Mar 2021 14:47:04 +0000
ROA not before:           Wed 24 Mar 2021 14:47:04 +0000
ROA not after:            Tue 24 Mar 2026 14:47:04 +0000
asID:                     267860
IP address blocks:        45.173.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800041 (0xc3529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9
        Validity
            Not Before: Mar 24 14:47:04 2021 GMT
            Not After : Mar 24 14:47:04 2026 GMT
        Subject: CN=c380d9add7f1e650566a9e3b7d2ba4d693380d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:d4:76:15:9d:b4:0e:7c:0f:6d:e8:3d:e7:
                    82:f7:41:06:fb:7c:b2:a4:0c:58:54:ce:97:b2:1d:
                    6b:14:b6:41:f9:93:69:2a:66:87:7f:e1:81:a6:27:
                    33:a5:2e:b8:18:79:1f:e7:c2:f0:ab:65:24:76:75:
                    a3:26:d1:4d:51:6a:bb:a1:23:28:26:6b:09:f2:76:
                    29:4b:2a:48:b0:f2:88:a8:16:16:38:4d:0c:aa:62:
                    9b:14:c5:c8:50:66:d3:cf:13:7c:7b:49:fc:6d:8b:
                    90:f4:5f:62:a6:2e:dc:2a:d3:3e:1d:88:d0:d3:45:
                    35:50:98:dd:8a:04:e3:b1:40:64:ae:8c:3a:32:2f:
                    6d:ad:bc:c2:a1:75:23:5f:0d:bf:a8:e1:4a:0f:95:
                    06:9b:e7:bd:64:5c:aa:46:aa:d1:8a:16:fd:34:0f:
                    89:28:41:fd:5c:af:34:54:3d:e7:6b:76:4a:dc:bc:
                    67:59:f6:d6:91:40:b1:94:bd:37:8b:b3:3d:11:af:
                    9c:39:99:49:6e:ef:1e:9e:99:0c:06:44:2f:ed:f7:
                    57:db:06:47:7c:33:71:ef:b5:e1:a6:89:6a:97:9b:
                    47:80:9e:02:2f:60:04:b6:ff:82:11:9a:2b:bf:6b:
                    ba:96:0b:e2:62:fb:ef:7b:6a:14:d5:9b:31:79:7e:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:D4:4A:BC:E2:28:F9:86:A5:2D:1F:B3:99:86:2B:05:CE:8C:33
            X509v3 Authority Key Identifier:
                keyid:83:16:29:5C:A6:DE:03:11:B2:7D:0E:49:35:2F:60:48:E3:63:91:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/c380d9add7f1e650566a9e3b7d2ba4d693380d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:da:83:74:d0:88:cb:f5:02:24:1d:d1:74:5b:b5:05:e2:09:
         f8:cd:b7:0c:91:8b:bb:72:6c:36:88:cc:9f:6b:d0:cd:13:0e:
         73:13:1d:69:a8:41:53:40:25:97:a9:a2:e7:79:97:98:61:9b:
         79:a4:97:a4:59:33:b2:86:1a:0b:9a:a5:4c:f4:a2:34:07:cc:
         b9:05:31:d9:35:aa:38:4f:0b:2e:09:dd:f7:42:04:f2:0e:6d:
         56:06:57:39:59:14:64:c8:5a:61:bd:6c:29:c7:c8:03:72:dd:
         6b:ec:4d:2b:ac:5e:aa:d9:f8:51:cc:00:4d:c9:12:62:ef:f4:
         9f:36:5c:dc:00:0f:bd:d2:9d:5a:2c:4d:60:31:e5:04:fc:5d:
         9f:ff:bb:c3:67:88:34:87:9b:21:34:69:1e:86:5f:d9:c1:b7:
         f5:be:96:32:d5:de:5f:ce:16:3a:2f:03:21:9b:64:7f:37:d5:
         38:43:f7:9d:9c:2b:82:2d:39:df:fd:7b:db:f5:fa:49:33:a6:
         26:6a:a8:c8:9f:23:e9:17:72:c7:7b:4e:e0:c7:ec:a9:4f:82:
         44:71:73:5b:00:e6:e2:25:50:b1:1a:eb:50:31:c9:09:68:92:
         a2:f3:60:e1:c6:90:93:34:c3:4e:c6:24:d0:2b:b7:96:6d:f3:
         b7:4b:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org