Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/c842ac7a26d011112006429ef4e52c374b025c16.roa
File:                     c842ac7a26d011112006429ef4e52c374b025c16.roa (raw, json)
Hash identifier:          ba8HpbLHJZW/7n7905aFBRxtGKdXNSFRLxQxcNuv84E=
Subject key identifier:   4E:A9:76:36:16:32:BA:E0:D6:DB:ED:91:20:5C:8E:E8:9A:6C:65:7E
Certificate issuer:       /CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
Certificate serial:       0CEC24
Authority key identifier: C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/c842ac7a26d011112006429ef4e52c374b025c16.roa
Signing time:             Wed 24 Mar 2021 14:34:23 +0000
ROA not before:           Wed 24 Mar 2021 14:34:23 +0000
ROA not after:            Tue 24 Mar 2026 14:34:23 +0000
asID:                     61503
IP address blocks:        45.160.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846884 (0xcec24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
        Validity
            Not Before: Mar 24 14:34:23 2021 GMT
            Not After : Mar 24 14:34:23 2026 GMT
        Subject: CN=c842ac7a26d011112006429ef4e52c374b025c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:6a:e4:a9:67:7e:af:76:e9:de:5a:49:46:
                    aa:20:59:77:8b:af:ce:aa:66:f7:27:7d:b4:0c:aa:
                    e3:ab:13:6e:b7:2b:d7:79:ac:b9:d4:05:ac:5d:f8:
                    c7:b5:79:87:18:06:0e:bf:e6:a2:b8:39:0d:30:54:
                    15:02:01:4b:76:a4:5a:b9:04:f1:35:86:78:9a:fd:
                    d6:e0:27:69:98:0a:e6:a0:0c:ed:40:00:6a:32:3e:
                    e7:95:c5:62:a3:49:7d:09:a7:bc:0a:d6:e4:f8:cf:
                    cb:b0:66:cf:1e:2e:ad:6d:bd:2a:27:88:2b:6e:74:
                    98:13:db:a7:7c:44:46:60:e8:2d:9a:d5:0b:2c:31:
                    ec:15:27:b5:76:ef:c3:4f:80:a9:12:e9:7c:b9:02:
                    aa:39:9c:53:c6:70:2c:52:4b:22:2f:13:89:a0:00:
                    72:00:e9:e1:92:6e:6b:62:c9:81:9f:2a:f3:21:2a:
                    94:6d:1d:0a:41:ba:a3:a5:c0:d9:2b:d2:a4:cd:ff:
                    82:20:ce:87:a9:31:ee:90:a8:04:a9:0e:e1:24:45:
                    e6:af:52:3e:a0:f0:26:05:a5:61:1a:8a:bf:1a:a6:
                    74:f3:58:d9:d5:0e:46:b2:99:1c:23:6f:3d:ed:f9:
                    02:51:e5:11:0d:7f:e2:72:9c:da:2a:07:fa:af:fa:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:76:36:16:32:BA:E0:D6:DB:ED:91:20:5C:8E:E8:9A:6C:65:7E
            X509v3 Authority Key Identifier:
                keyid:C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/c842ac7a26d011112006429ef4e52c374b025c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:57:64:23:4b:93:37:9e:21:c2:c7:f1:06:8c:74:6b:16:05:
         9c:a7:57:86:88:d0:b3:0f:cf:2a:4a:37:25:69:b2:08:a5:00:
         9c:bb:d5:8e:a5:42:2f:9e:ce:6a:d6:3d:3d:ab:2f:be:ff:76:
         c5:eb:ca:5e:99:dc:56:d8:c2:b4:bb:22:48:ad:7c:d5:25:23:
         71:a8:05:02:ae:a2:09:c7:24:48:e1:e6:15:7a:ae:d8:75:7a:
         2a:a4:c5:37:e2:78:74:44:28:8b:98:44:59:7f:16:8f:77:da:
         64:1c:92:43:19:82:71:c7:c1:aa:ff:cb:4c:f8:88:6c:62:f3:
         a0:ad:ff:3d:d2:64:ef:46:a2:7b:eb:5f:04:38:f4:71:3c:54:
         8e:09:20:a7:28:23:57:f2:1f:bb:3d:36:cd:12:6b:66:19:71:
         d7:47:5c:50:f1:2e:6d:b7:87:8a:1a:e7:2d:ca:98:20:cc:77:
         a6:07:a1:dc:7d:90:28:23:91:ca:1b:0a:6a:81:b7:7e:20:fc:
         a2:18:ae:35:17:e6:19:71:d4:4a:d5:50:15:c2:5b:a1:1a:47:
         03:3a:df:c7:6c:9e:0f:55:40:7f:9e:a6:1a:fe:b1:69:c3:4f:
         e0:4f:9e:5e:32:5b:8b:56:c0:4f:1f:86:e8:a2:32:49:3f:25:
         bc:62:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org