Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/dba5cb8df2ed5c90bacd243682b2709aacdc96cf.roa
File:                     dba5cb8df2ed5c90bacd243682b2709aacdc96cf.roa (raw, json)
Hash identifier:          uKm+KEyAlWPuRseHc0x0JBBAXcU/kGA47vVNgIacnJo=
Subject key identifier:   3C:B3:10:F3:FC:F1:B5:58:C9:0B:B8:C0:E1:B7:86:84:CB:73:6E:FD
Certificate issuer:       /CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
Certificate serial:       0D89CF
Authority key identifier: 48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/dba5cb8df2ed5c90bacd243682b2709aacdc96cf.roa
Signing time:             Wed 24 Mar 2021 14:42:17 +0000
ROA not before:           Wed 24 Mar 2021 14:42:16 +0000
ROA not after:            Tue 24 Mar 2026 14:42:16 +0000
asID:                     265665
IP address blocks:        45.4.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887247 (0xd89cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
        Validity
            Not Before: Mar 24 14:42:16 2021 GMT
            Not After : Mar 24 14:42:16 2026 GMT
        Subject: CN=dba5cb8df2ed5c90bacd243682b2709aacdc96cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:89:69:c8:8c:04:76:78:6c:bf:7a:4a:c3:
                    43:fe:02:d7:ca:c9:69:d6:cf:b3:c6:d9:80:05:f2:
                    10:3e:e1:ec:66:47:4d:2d:81:60:76:a3:6a:bc:c9:
                    d0:b5:87:b5:07:ad:28:29:49:c5:8c:11:14:99:55:
                    6c:25:3d:ea:d1:1e:1d:25:53:b1:6d:74:e5:33:07:
                    4e:a7:4a:eb:0c:cc:4b:0c:ca:1c:c3:10:ce:66:24:
                    ff:58:cd:de:01:8e:36:ea:aa:ba:66:b6:a4:60:40:
                    ec:6e:6a:c5:4f:17:cc:a9:e1:4f:16:52:3c:de:74:
                    5d:96:9c:f4:f9:ed:46:84:17:b2:95:1d:cd:b2:4b:
                    1a:e1:e5:0e:8e:63:1c:20:05:b4:4d:d8:79:7c:20:
                    89:0f:94:ae:64:41:06:8b:cf:49:00:14:0b:f4:5e:
                    e0:1f:a0:f4:f9:76:df:fd:ee:b4:1d:8e:bd:fb:2f:
                    24:2c:9d:4c:02:97:a7:78:b4:91:e9:b0:7e:c6:23:
                    6a:51:af:11:8e:bf:1c:c7:65:5a:87:8e:4b:29:0a:
                    71:c1:98:77:4e:95:7c:d0:e6:47:31:8b:fc:9d:87:
                    ed:86:8d:82:2f:b0:43:b9:ee:9a:1b:e8:31:d4:93:
                    61:e6:1a:43:c5:f3:7f:7b:e7:bf:0b:57:90:e7:e2:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:10:F3:FC:F1:B5:58:C9:0B:B8:C0:E1:B7:86:84:CB:73:6E:FD
            X509v3 Authority Key Identifier:
                keyid:48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/dba5cb8df2ed5c90bacd243682b2709aacdc96cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:40:74:9a:76:dd:bb:73:2c:bb:89:71:c8:e2:31:49:af:ab:
         cb:fa:66:0d:3f:66:1d:d0:29:88:dd:da:43:04:9b:c3:2f:ca:
         2b:ee:43:b4:80:0c:df:63:d0:d7:f5:b8:dc:47:6b:5c:9c:c4:
         f7:47:c4:50:6a:1b:6a:ca:2c:78:ff:14:97:a0:a5:4d:15:49:
         2b:6e:b9:f7:9c:ee:e8:7c:8e:e0:9d:6b:cc:1e:35:80:c1:d2:
         60:64:cf:49:61:99:f7:7d:4e:60:1d:84:b8:e6:dc:d8:b9:25:
         7b:0c:76:1f:40:9d:7b:9b:15:9f:31:65:7d:a7:35:c8:d4:4f:
         16:f9:44:6c:d9:f0:35:17:e2:5f:7d:5d:96:15:b2:18:c8:40:
         0a:f7:92:9c:5d:b9:42:fb:eb:97:a3:dd:d7:d5:90:19:72:88:
         77:39:ff:5d:47:64:3b:83:b4:14:3a:11:7f:41:7e:da:2e:2d:
         b4:20:c2:2b:83:9d:1f:05:21:e0:20:7c:a5:83:21:b8:d6:4b:
         8a:f2:58:69:24:ff:54:61:7b:76:89:a2:20:25:db:88:93:39:
         f3:09:6f:64:f0:f1:fa:66:21:df:ab:36:83:63:06:17:94:a7:
         2d:e0:90:cd:db:d3:5e:b2:45:b5:9a:41:7a:ae:66:5f:c3:fa:
         59:80:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org