Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/4b345681ff3d5ea4ee9d164029a96ee399544d9e.roa
File:                     4b345681ff3d5ea4ee9d164029a96ee399544d9e.roa (raw, json)
Hash identifier:          Tz/gfhzbg1ZOPvisfNXjloilK8Vvsyz7evGOB8OJXRI=
Subject key identifier:   5C:AB:CD:B9:B7:91:F3:0F:49:82:AF:3B:D0:3D:11:F4:09:5B:C9:1C
Certificate issuer:       /CN=689a1db6d155180fadc9fecd92d7dd06e68bb024
Certificate serial:       0BA7F9
Authority key identifier: 52:F6:D1:46:3E:E4:1D:F5:35:6B:80:1A:7C:DD:AA:2B:42:D2:F9:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/689a1db6d155180fadc9fecd92d7dd06e68bb024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/4b345681ff3d5ea4ee9d164029a96ee399544d9e.roa
Signing time:             Wed 24 Mar 2021 14:33:46 +0000
ROA not before:           Wed 24 Mar 2021 14:33:46 +0000
ROA not after:            Tue 24 Mar 2026 14:33:46 +0000
asID:                     269774
IP address blocks:        45.181.78.0/23 maxlen: 24
                          45.182.116.0/24 maxlen: 24
                          2803:d60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763897 (0xba7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689a1db6d155180fadc9fecd92d7dd06e68bb024
        Validity
            Not Before: Mar 24 14:33:46 2021 GMT
            Not After : Mar 24 14:33:46 2026 GMT
        Subject: CN=4b345681ff3d5ea4ee9d164029a96ee399544d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:a7:23:11:bd:04:ec:fd:f3:b0:51:00:f1:
                    d4:d7:72:57:e3:b5:5b:33:8f:bc:17:e6:f9:fa:e5:
                    f7:94:56:bd:bd:1f:76:0c:c2:ab:6e:63:7e:3e:87:
                    d1:4c:b4:82:cf:07:ba:8e:01:6c:6e:cb:88:e4:4a:
                    92:0a:2c:77:82:d9:aa:b5:6b:2a:3c:ee:39:71:53:
                    e7:c1:71:19:46:aa:7d:b0:0a:c3:d9:fa:6f:3a:13:
                    c6:ac:c0:d8:9e:45:de:96:b2:e9:ec:54:03:1f:5e:
                    4f:0c:97:a4:75:73:3d:f6:0f:4f:1e:27:34:d1:13:
                    0a:22:67:9f:b5:0a:bc:3d:ba:13:21:01:5a:87:8e:
                    3b:a7:ae:39:38:cc:4e:f2:78:1d:1e:f0:97:8c:cc:
                    5d:6a:5c:38:2c:20:8a:be:d1:3c:9a:db:93:37:66:
                    41:ab:7f:87:93:c6:8a:11:a3:64:b7:80:52:51:db:
                    a9:ca:16:b0:cd:71:cb:6b:4c:a4:dc:b2:0b:93:ab:
                    ca:01:6c:49:94:2c:09:6b:a2:b0:bd:aa:81:03:d9:
                    e2:a6:3f:01:8b:d1:d4:fa:04:0e:ec:8f:9c:c6:42:
                    b9:a0:13:a6:e6:27:e8:fd:8a:58:4c:82:da:49:55:
                    3b:eb:6e:d2:2c:82:90:08:3e:bd:e7:67:e8:8c:3f:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:CD:B9:B7:91:F3:0F:49:82:AF:3B:D0:3D:11:F4:09:5B:C9:1C
            X509v3 Authority Key Identifier:
                keyid:52:F6:D1:46:3E:E4:1D:F5:35:6B:80:1A:7C:DD:AA:2B:42:D2:F9:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/689a1db6d155180fadc9fecd92d7dd06e68bb024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/4b345681ff3d5ea4ee9d164029a96ee399544d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a3115290-a0bd-433d-abd6-d356cf21a542/689a1db6d155180fadc9fecd92d7dd06e68bb024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.78.0/23
                  45.182.116.0/24
                IPv6:
                  2803:d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:c1:75:52:37:01:e4:54:fc:47:79:99:7f:35:db:4d:d8:
         89:e4:fe:50:53:fd:ac:a9:8a:08:9f:59:b1:68:33:ef:c5:46:
         06:ab:76:dd:8b:89:17:9b:29:e2:b9:bb:f5:eb:be:ea:50:03:
         1f:e2:31:e9:0a:07:75:06:ad:67:00:f9:f1:b7:ed:aa:99:31:
         3b:8f:52:9e:50:08:b1:19:cc:e8:ce:ab:b8:b8:92:26:d5:86:
         90:25:e5:f1:46:44:e4:e5:c5:63:36:98:43:14:88:c2:35:cb:
         be:c5:b8:89:37:07:c8:63:ad:b3:3f:ea:e6:ab:ed:7b:b2:98:
         ba:5e:59:f5:b0:b9:f3:33:e5:ce:33:e3:2a:35:04:29:2d:70:
         b4:bb:31:57:75:7a:ba:aa:cb:4b:2f:aa:e8:45:52:3c:a1:44:
         5a:0b:31:fa:bb:8b:ce:68:bf:87:39:f9:05:32:1c:21:6e:a0:
         37:b2:d1:dc:87:65:7e:43:e7:75:51:ea:ee:d9:7e:dd:9c:82:
         89:b8:0d:b2:18:21:0e:e5:92:67:ce:cc:a8:0b:ef:b2:11:b6:
         e5:60:f4:fe:1d:17:79:8f:bb:9d:9f:d3:16:9d:ca:ea:0d:b0:
         17:be:40:07:6e:0f:96:79:5c:9b:33:6d:aa:dd:e2:1d:9b:54:
         ce:39:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org