Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/02bf76588b89498894d771066fbae3374f338e4c.roa
File:                     02bf76588b89498894d771066fbae3374f338e4c.roa (raw, json)
Hash identifier:          kSO1KAXPAGtKnhbTwOsnX30b+LHPyr9SyvNd+4XMcNg=
Subject key identifier:   17:5B:15:01:93:4C:17:89:77:44:04:1F:C0:F4:8E:64:41:27:16:3D
Certificate issuer:       /CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
Certificate serial:       0CF12B
Authority key identifier: C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/02bf76588b89498894d771066fbae3374f338e4c.roa
Signing time:             Wed 24 Mar 2021 14:34:23 +0000
ROA not before:           Wed 24 Mar 2021 14:34:23 +0000
ROA not after:            Tue 24 Mar 2026 14:34:23 +0000
asID:                     265703
IP address blocks:        45.160.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848171 (0xcf12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
        Validity
            Not Before: Mar 24 14:34:23 2021 GMT
            Not After : Mar 24 14:34:23 2026 GMT
        Subject: CN=02bf76588b89498894d771066fbae3374f338e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:74:5d:3f:3d:01:cf:3f:5f:39:08:24:2c:
                    0a:d5:2c:81:7a:be:26:93:6a:be:9a:b8:32:db:74:
                    17:62:a1:e8:c1:9c:da:4d:5b:1b:87:a5:30:0a:d2:
                    ef:bd:98:12:b9:fb:5f:e2:88:e1:22:5a:08:f5:8a:
                    dd:69:75:6f:54:74:3d:d8:fa:97:ee:7a:2e:20:d8:
                    5f:88:fb:12:95:7d:4f:e5:59:cc:e4:fe:14:07:64:
                    45:63:c1:82:71:26:26:80:0c:25:18:c6:38:f4:cb:
                    cf:7b:86:b4:a1:07:f0:6c:3f:8e:e4:e6:fb:b0:da:
                    e5:b1:67:60:68:4c:bc:16:98:af:b3:ee:ef:4d:0f:
                    d2:c7:80:40:3a:e7:7a:66:9f:e6:dd:61:d9:de:60:
                    89:39:54:9a:00:cb:c0:4e:49:c4:6c:b2:3d:85:b5:
                    3a:5b:ce:54:8f:e7:e9:8f:12:0b:87:d9:7d:4c:50:
                    21:41:d7:1f:42:12:6a:20:d1:42:ac:af:35:5d:fc:
                    d8:7b:e3:e2:ce:cd:a1:36:07:6d:87:3f:02:87:60:
                    59:89:98:69:91:ed:19:17:bb:de:f8:f8:7f:8b:d1:
                    79:db:e0:fa:98:c7:e9:c0:b7:31:74:a8:ea:05:9c:
                    5d:93:1a:e5:26:18:d9:82:38:8c:1d:f9:01:60:da:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5B:15:01:93:4C:17:89:77:44:04:1F:C0:F4:8E:64:41:27:16:3D
            X509v3 Authority Key Identifier:
                keyid:C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/02bf76588b89498894d771066fbae3374f338e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:00:04:60:b9:ce:a9:d5:78:50:68:90:c5:70:68:0c:dd:
         c6:c4:a3:67:e1:01:a4:70:f9:04:15:16:49:77:f2:b1:29:0d:
         fc:ac:eb:c0:8f:8a:67:a6:c3:61:4c:d3:38:17:d8:c9:9c:00:
         46:ce:cf:83:cd:77:13:a5:61:58:92:bf:61:d7:a3:a7:43:ad:
         31:90:f6:e1:9e:ae:b5:cc:70:24:45:ce:9d:ad:43:d2:75:dd:
         4c:5a:96:3d:d9:69:ae:b8:0e:83:c6:53:c0:0c:c2:a9:49:14:
         63:70:56:cf:d1:0d:22:c8:6e:50:af:0e:27:1b:3d:e3:f2:26:
         ae:36:6c:7b:c1:9e:55:15:55:98:18:2f:52:c6:62:80:23:b8:
         ae:1d:65:0c:70:f0:ba:f5:90:15:bd:9f:e1:88:cb:a5:28:95:
         f4:56:1d:2e:68:47:29:5c:48:49:ea:92:d9:2e:70:19:0b:88:
         95:b7:ff:89:78:10:1c:ab:0c:7b:2c:d0:02:aa:78:cd:8b:3a:
         7b:c5:ee:b8:0a:ec:d1:08:04:66:18:a7:0f:f8:30:11:b5:79:
         42:79:b7:57:0e:15:e5:61:82:50:51:07:48:2c:64:43:79:b0:
         42:95:9d:40:46:ad:d1:3d:7f:fe:0a:46:bd:3b:7f:33:d7:b0:
         6f:71:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org