Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/32e6aace74215266fbc28b2a57fde08270349c8e.roa
File:                     32e6aace74215266fbc28b2a57fde08270349c8e.roa (raw, json)
Hash identifier:          91Tv+KTa81rB3JrZONC/brx8T8mhmpItZ6eYditUMMc=
Subject key identifier:   C2:FC:E8:2D:AF:1C:78:28:B4:52:E0:F1:31:A9:62:49:C4:CD:69:50
Certificate issuer:       /CN=99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4
Certificate serial:       0CB5A5
Authority key identifier: 95:99:DE:F0:B2:D2:73:2D:D3:A0:4E:87:83:B1:04:B1:A3:74:B6:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/32e6aace74215266fbc28b2a57fde08270349c8e.roa
Signing time:             Wed 24 Mar 2021 14:34:27 +0000
ROA not before:           Wed 24 Mar 2021 14:34:26 +0000
ROA not after:            Tue 24 Mar 2026 14:34:26 +0000
asID:                     267746
IP address blocks:        45.169.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832933 (0xcb5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4
        Validity
            Not Before: Mar 24 14:34:26 2021 GMT
            Not After : Mar 24 14:34:26 2026 GMT
        Subject: CN=32e6aace74215266fbc28b2a57fde08270349c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dc:f6:ed:bd:8c:0b:51:9a:00:82:71:6b:55:
                    1a:0e:99:e4:0f:7e:02:f5:b4:d8:c0:74:c2:d4:fc:
                    ae:1b:4e:33:b1:fd:34:f3:5c:b3:7a:e5:45:8d:b3:
                    bb:e3:39:aa:40:0e:5b:6f:25:7e:4e:3d:06:cd:1b:
                    44:da:80:88:ca:e6:a5:e8:e9:82:1b:2d:79:7c:20:
                    2c:fd:25:8b:48:6a:de:68:fa:63:2d:f2:c2:c0:61:
                    bc:8c:d1:9d:e0:9b:46:32:16:bb:5b:e8:1d:08:77:
                    9f:14:9f:0e:4b:3a:7f:5a:5f:bc:d4:14:3b:44:e0:
                    b9:a0:22:c6:be:07:0e:e1:f5:4e:aa:67:fc:05:4f:
                    77:55:20:cd:43:51:f0:fa:42:11:51:b9:42:c8:67:
                    2d:da:b4:f2:aa:59:2e:79:b6:27:22:c5:00:5a:9c:
                    6e:21:64:25:9f:d4:b9:ce:b2:7a:60:6d:b6:9f:e5:
                    fb:d0:43:24:bf:be:ab:8e:ba:29:d1:b6:cc:0e:f4:
                    90:91:d4:e8:23:dc:4e:c4:16:4f:43:0a:15:89:be:
                    d6:da:c8:ce:de:7e:bf:16:8f:be:87:cc:ce:e6:0e:
                    82:17:8f:f1:5c:19:4e:9b:f6:a8:1f:4f:b6:e6:66:
                    cd:8e:f2:c9:22:e0:ad:20:1c:91:49:68:de:d7:25:
                    25:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:E8:2D:AF:1C:78:28:B4:52:E0:F1:31:A9:62:49:C4:CD:69:50
            X509v3 Authority Key Identifier:
                keyid:95:99:DE:F0:B2:D2:73:2D:D3:A0:4E:87:83:B1:04:B1:A3:74:B6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/32e6aace74215266fbc28b2a57fde08270349c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99bce20c-c284-461b-81c3-ee54a6db85d2/99b9d222ecef42cd0c192f6c4cb9d9bcb1b25ae4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:ad:97:14:8b:d1:cc:d7:94:68:64:cf:e3:c9:05:0d:5f:
         62:98:af:27:17:29:47:ee:d0:30:24:c7:6a:c8:98:b1:6f:bb:
         28:b6:fd:b0:79:66:f0:88:c3:63:cb:f7:16:e2:ff:23:91:81:
         b9:92:03:7d:46:d7:f6:81:6f:4f:7e:6f:a4:b8:e4:40:48:97:
         8c:f0:ab:d5:bc:19:5a:75:04:de:e5:44:16:e4:da:0b:ed:60:
         92:fc:db:c0:ff:a1:ce:a6:3d:eb:d1:67:e4:b3:07:ca:14:f6:
         03:74:aa:43:46:5b:e2:30:a4:78:c5:2a:99:b6:18:1e:9a:f1:
         f2:c1:ee:90:93:c4:fa:d0:b4:19:ac:39:5b:0c:ab:7f:60:c2:
         b4:b0:59:a7:4d:ac:14:c6:65:d9:43:31:73:dc:f1:61:67:54:
         3b:a2:b3:fd:81:04:cb:11:de:c1:43:56:a3:0e:42:b6:09:e7:
         b9:9a:17:da:ad:32:ae:80:04:47:a0:1b:0f:33:19:61:e4:88:
         57:5b:83:89:59:30:ed:76:f0:23:bb:18:d2:fc:07:3a:46:5f:
         c8:34:03:c2:f7:2a:27:e7:c2:2b:cf:62:0c:2d:22:f3:f8:2e:
         88:84:59:32:f5:0c:5d:60:89:28:76:cf:11:00:bc:13:fb:ac:
         41:e0:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org