Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa
File:                     f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa (raw, json)
Hash identifier:          tmenWncM5GL1JZc/AwBdn3VzXTMhE3zK6VnPRL9h03A=
Subject key identifier:   FF:36:36:E7:1C:B3:34:78:12:8A:38:4C:72:C9:AA:69:21:A0:F6:80
Certificate issuer:       /CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Certificate serial:       0CD4CE
Authority key identifier: 61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa
Signing time:             Wed 24 Mar 2021 14:33:14 +0000
ROA not before:           Wed 24 Mar 2021 14:33:14 +0000
ROA not after:            Tue 24 Mar 2026 14:33:14 +0000
asID:                     266902
IP address blocks:        45.161.44.0/24 maxlen: 24
                          45.161.45.0/24 maxlen: 24
                          45.161.46.0/24 maxlen: 24
                          45.161.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840910 (0xcd4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
        Validity
            Not Before: Mar 24 14:33:14 2021 GMT
            Not After : Mar 24 14:33:14 2026 GMT
        Subject: CN=f51624d1c3500df43c60b0b5c7bb77c4099e2f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:8a:05:bf:31:97:10:e1:c9:57:43:51:04:
                    14:57:fc:d7:9a:c0:f3:d2:ff:12:56:31:a7:c5:4a:
                    ee:e0:9c:79:d8:19:3a:b6:da:b9:fb:eb:15:b3:15:
                    ba:a5:91:1d:c2:15:f2:5f:66:34:08:8f:3a:42:ca:
                    a2:43:36:79:08:ae:f2:62:da:d2:ba:67:c4:e1:ba:
                    a0:d5:58:ff:ff:3a:56:64:82:58:45:28:61:ee:64:
                    e2:bd:53:1c:6b:14:d4:10:57:c1:e6:2d:a3:3e:ba:
                    e5:a6:ac:da:47:3d:22:91:c2:d4:8e:7a:c9:8e:de:
                    1c:0b:15:6c:2c:69:a1:e9:3e:86:60:c5:61:89:54:
                    fa:e5:e2:6b:7d:88:1e:5a:03:5d:0a:77:76:8c:bd:
                    0a:cf:b8:8f:a8:ed:9c:48:c4:3a:86:c2:54:1f:b0:
                    be:ab:3f:99:8e:69:77:54:ab:94:93:13:bd:7b:38:
                    a0:84:ca:58:77:61:f7:d0:30:54:0d:b1:8b:60:18:
                    c2:f2:16:0b:7f:df:fe:d6:3a:12:80:0e:7e:4f:c2:
                    96:e3:27:a9:68:2b:a2:b9:9e:9b:9e:f0:64:ce:1d:
                    4a:8c:07:c0:a2:c7:90:e7:50:e8:4f:47:28:cf:3a:
                    e1:8d:16:b4:58:d5:be:d6:2c:8f:b9:ef:ab:2e:74:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:36:36:E7:1C:B3:34:78:12:8A:38:4C:72:C9:AA:69:21:A0:F6:80
            X509v3 Authority Key Identifier:
                keyid:61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:de:42:28:84:59:e4:87:bd:45:b9:45:6e:cc:cf:77:61:3c:
         4c:a1:4d:6d:85:55:54:9e:79:5d:ed:50:a6:15:f7:ec:f5:f6:
         53:b3:c5:70:e6:93:f5:3e:45:95:0a:e4:21:f4:00:a2:fa:95:
         e6:16:7b:8e:d0:51:5a:da:76:a3:af:63:e4:77:b6:26:4a:64:
         3c:fc:a9:cb:7a:c7:28:33:a0:26:b5:a2:95:6f:37:ac:5b:0d:
         b5:87:e8:06:b8:59:5b:ab:a1:a3:b6:89:49:c7:e6:06:dd:d9:
         65:95:a2:0b:55:78:45:49:8c:21:ae:4d:4b:fa:e9:91:6b:3a:
         de:6b:b5:43:83:bf:e7:07:bc:2a:73:f0:3c:f9:d4:40:e6:0c:
         98:59:95:7c:92:ef:86:dd:40:47:57:d6:28:fa:55:d2:1f:02:
         62:50:76:ef:33:b8:86:42:03:b1:bb:45:d8:4f:f3:b7:ac:e1:
         49:c3:ba:87:9f:a0:c8:41:9a:13:94:da:ce:81:09:95:a7:f3:
         45:86:7e:62:f2:54:31:26:2d:2b:fb:71:cc:45:3f:a5:bb:52:
         e3:ad:1a:4a:43:f3:5b:49:0d:8f:e1:15:5b:d5:d3:59:d6:29:
         ab:8a:22:6d:72:35:5c:12:90:51:d7:1d:cd:a7:6f:4b:54:4c:
         b2:5e:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org