Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/33539b2395d295674c42c40e0e02d0f8ee826dea.roa
File:                     33539b2395d295674c42c40e0e02d0f8ee826dea.roa (raw, json)
Hash identifier:          +mss5LZW3nWo9H+Y+U3ecJ8OI8Z3nuAdb8QF+tSP9Z8=
Subject key identifier:   05:89:61:BC:45:A3:B8:DA:8A:B1:99:73:79:88:71:94:F9:8C:37:D3
Certificate issuer:       /CN=a877a47e4a7bb2106d1aba44de1fa5ae17f4f321
Certificate serial:       0B9E13
Authority key identifier: 4E:D3:9C:FD:30:51:21:88:4C:22:BF:37:54:6B:05:DB:5A:65:B7:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/33539b2395d295674c42c40e0e02d0f8ee826dea.roa
Signing time:             Wed 24 Mar 2021 14:47:24 +0000
ROA not before:           Wed 24 Mar 2021 14:47:24 +0000
ROA not after:            Tue 24 Mar 2026 14:47:24 +0000
asID:                     3549
IP address blocks:        45.183.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761363 (0xb9e13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a877a47e4a7bb2106d1aba44de1fa5ae17f4f321
        Validity
            Not Before: Mar 24 14:47:24 2021 GMT
            Not After : Mar 24 14:47:24 2026 GMT
        Subject: CN=33539b2395d295674c42c40e0e02d0f8ee826dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:4d:8d:57:28:b5:48:7c:6b:4d:84:cd:8d:
                    02:aa:00:17:6a:f9:37:de:38:c3:c2:44:e3:af:3f:
                    d3:2b:33:92:e8:79:0f:b1:31:b6:1c:30:40:12:f8:
                    d0:a6:61:ca:39:4a:e2:88:2a:b2:b6:d1:f0:17:50:
                    a5:87:ef:44:4c:1b:93:7e:aa:b0:83:cf:4d:55:71:
                    50:02:66:cc:b3:d9:f8:fe:f7:dd:94:75:2a:f4:5b:
                    80:d6:dc:84:41:81:42:7e:3b:56:f1:d1:99:65:a3:
                    8a:c4:3f:4f:ee:9c:6e:7c:3f:92:fa:9b:20:f1:44:
                    af:ce:27:ca:03:7e:8e:6f:ec:92:e8:ef:d0:6e:00:
                    01:ed:d2:b4:ce:e1:5f:a1:49:2b:48:63:26:c9:3b:
                    4b:21:1f:9b:5f:d4:96:a7:35:48:dd:d6:58:0a:5f:
                    01:a2:04:18:0f:f2:2e:c7:5d:30:61:fe:e4:c3:85:
                    e6:11:66:2c:30:46:91:5d:79:0e:1a:f8:cb:15:bf:
                    fa:6d:de:b6:26:c1:68:4d:ac:19:8c:07:4c:16:df:
                    1c:b7:5c:77:35:10:d4:83:5c:ba:5f:75:45:bd:26:
                    e5:ee:fe:e1:aa:9a:3b:00:0e:27:b1:a3:25:8a:e9:
                    bb:77:58:ba:01:ef:dc:ea:16:09:6b:f9:f6:15:19:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:89:61:BC:45:A3:B8:DA:8A:B1:99:73:79:88:71:94:F9:8C:37:D3
            X509v3 Authority Key Identifier:
                keyid:4E:D3:9C:FD:30:51:21:88:4C:22:BF:37:54:6B:05:DB:5A:65:B7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/33539b2395d295674c42c40e0e02d0f8ee826dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:83:49:83:07:81:f0:c6:d2:15:68:31:af:3f:1a:23:3c:
         95:62:44:94:9d:ff:e5:aa:2c:41:99:5f:50:a4:f2:e3:3e:e5:
         11:5d:52:18:cf:75:92:c1:40:38:e6:f5:8e:4e:9c:3d:56:ee:
         ca:a8:78:54:40:cb:9c:13:3a:b6:87:82:fb:7d:1f:ca:8c:91:
         80:d7:8d:e1:cf:6f:f8:c0:6b:34:72:16:5a:f8:08:02:f1:bf:
         ce:17:d4:3a:03:5b:3f:75:23:76:12:4c:bb:4a:a5:78:5f:e0:
         2f:30:10:c4:a1:e2:d9:c0:60:97:ca:65:c8:e1:38:6c:de:38:
         d0:63:ee:5b:89:57:16:43:12:e3:1c:f2:46:94:e7:73:80:4c:
         d3:8b:1f:e7:cd:a1:58:e9:98:a3:48:f0:b9:cb:bf:76:56:ff:
         d4:50:4a:cd:d5:6c:4e:23:92:73:d2:30:33:75:8d:a1:79:de:
         cd:0c:7d:0a:f6:78:1d:5c:96:05:d5:b6:e1:5d:e9:85:88:59:
         e1:f0:cc:8d:94:f4:3f:d5:47:ff:6e:e3:d1:61:13:2f:20:5a:
         b1:71:f4:b2:83:a0:ec:e9:cc:be:cb:82:12:a3:3a:01:94:b7:
         f4:f5:ca:42:84:86:77:28:d5:a3:c9:ea:7a:9b:93:c4:5a:2e:
         95:15:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org