Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/a1f5823bd0e81a78360a6ee159963cedf8fed0d3.roa
File:                     a1f5823bd0e81a78360a6ee159963cedf8fed0d3.roa (raw, json)
Hash identifier:          4oY74KIQFnGVuQ9mSB4+o8vIsLSKZOJuiceyOtDwwzo=
Subject key identifier:   40:76:EF:14:F5:F3:F4:2C:F2:0D:80:7E:FE:1E:3E:5B:9D:29:72:F5
Certificate issuer:       /CN=3abe8205e3875032dfb3042786eec7a637777979
Certificate serial:       0C3C34
Authority key identifier: 61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/a1f5823bd0e81a78360a6ee159963cedf8fed0d3.roa
Signing time:             Wed 24 Mar 2021 14:45:51 +0000
ROA not before:           Wed 24 Mar 2021 14:45:50 +0000
ROA not after:            Tue 24 Mar 2026 14:45:50 +0000
asID:                     267831
IP address blocks:        45.173.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801844 (0xc3c34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abe8205e3875032dfb3042786eec7a637777979
        Validity
            Not Before: Mar 24 14:45:50 2021 GMT
            Not After : Mar 24 14:45:50 2026 GMT
        Subject: CN=a1f5823bd0e81a78360a6ee159963cedf8fed0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:03:2d:f9:ec:16:d7:b2:8a:32:90:5a:10:
                    4f:ae:79:fc:1a:29:12:f4:9d:ba:48:5e:5c:60:73:
                    08:18:bf:18:14:80:38:41:a1:59:3e:96:fc:2e:6a:
                    0a:2c:9c:c3:35:6d:28:4d:fd:28:45:04:7f:05:71:
                    13:7c:dc:62:43:41:34:e8:67:c4:ad:db:7f:98:52:
                    ba:09:94:dc:c0:0a:f2:b4:9c:9a:95:f0:e9:4b:2c:
                    ee:97:ab:78:6c:68:db:41:86:d9:e5:4b:ed:96:dc:
                    4b:2c:10:e0:e4:95:d5:23:fe:83:bd:48:e6:68:f9:
                    61:b3:4b:1d:22:c2:42:b3:80:b4:37:ab:8d:4c:f8:
                    2c:ed:78:6c:9b:86:17:bd:e4:87:85:81:49:4c:ba:
                    5b:ec:61:16:ba:6c:4c:0d:59:e4:a5:63:cd:33:62:
                    6f:2f:3f:18:3a:d6:15:b7:02:8f:15:dc:c8:ae:33:
                    34:99:f5:d4:09:f4:b5:46:b4:a0:21:d1:53:da:fc:
                    7c:2d:a4:76:a2:f0:12:51:fa:d0:dd:c8:0a:5c:a9:
                    75:93:48:dd:c8:b2:bc:d8:df:5e:70:ae:7f:f9:b9:
                    17:e8:53:e3:c0:a6:9e:74:f8:7a:b0:03:f3:ed:b1:
                    ab:4b:9d:69:44:2c:6a:52:3d:05:6e:c5:2c:b9:89:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:EF:14:F5:F3:F4:2C:F2:0D:80:7E:FE:1E:3E:5B:9D:29:72:F5
            X509v3 Authority Key Identifier:
                keyid:61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/a1f5823bd0e81a78360a6ee159963cedf8fed0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:6c:93:19:f5:38:35:76:a6:f7:77:55:ad:9b:f2:6a:28:
         e5:15:0d:f5:af:ca:69:ac:95:8e:14:11:71:be:47:ea:3d:f3:
         e0:6c:d4:d2:b4:c0:a9:0f:7e:4f:2d:8c:b8:d9:b5:23:95:f2:
         a1:29:f1:aa:49:a9:f4:c8:a1:52:14:29:b7:b2:36:c9:95:a3:
         b0:fd:82:1c:92:50:31:e1:9b:12:d8:6c:2c:b7:de:a0:66:90:
         dd:ca:de:37:1e:1f:2d:6b:39:0e:1b:4c:38:23:d7:79:da:db:
         c9:b1:0b:c4:7a:4d:64:aa:89:55:24:f5:c0:39:4c:b4:1d:5a:
         20:63:c8:b1:44:44:6e:28:ff:7a:d2:d7:25:03:96:bb:6d:b4:
         e9:fc:69:b0:13:c7:ee:67:04:49:b8:81:fa:e5:28:a4:d2:fd:
         78:78:80:a5:03:7d:5b:ef:93:59:7d:df:d6:d3:1d:7f:73:fd:
         1a:e7:b0:ec:83:25:b7:c2:2b:6d:57:a4:fa:f5:ce:cd:75:8e:
         fc:a1:2c:a4:32:fe:b4:07:d6:87:db:37:fd:e0:85:92:df:4b:
         b8:7e:5b:68:f3:cf:bc:23:8a:46:7b:99:fb:c7:cd:28:cf:bb:
         2b:5a:5f:a4:1e:b5:f2:36:1a:1b:2e:4e:e9:55:96:84:ea:75:
         8d:f0:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org