Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/9cad600dd59a2cda3874093eb7bf9873d9983acb.roa
File:                     9cad600dd59a2cda3874093eb7bf9873d9983acb.roa (raw, json)
Hash identifier:          2E92p0njb9joOW7AwX5KYzXPDGFeshmCyLauDNPoTss=
Subject key identifier:   10:A1:48:5F:1D:5F:60:30:96:6C:14:46:02:F5:C6:D6:1D:E9:F9:4A
Certificate issuer:       /CN=12ace2bda69512c114fc039cc4dccc6cd0e96af1
Certificate serial:       0CE277
Authority key identifier: C9:A4:9B:BB:A6:78:7A:0A:F3:72:11:4F:01:6A:7A:DF:9B:86:0C:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12ace2bda69512c114fc039cc4dccc6cd0e96af1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/9cad600dd59a2cda3874093eb7bf9873d9983acb.roa
Signing time:             Wed 24 Mar 2021 14:33:55 +0000
ROA not before:           Wed 24 Mar 2021 14:33:55 +0000
ROA not after:            Tue 24 Mar 2026 14:33:55 +0000
asID:                     263702
IP address blocks:        45.225.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844407 (0xce277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ace2bda69512c114fc039cc4dccc6cd0e96af1
        Validity
            Not Before: Mar 24 14:33:55 2021 GMT
            Not After : Mar 24 14:33:55 2026 GMT
        Subject: CN=9cad600dd59a2cda3874093eb7bf9873d9983acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:cf:09:6b:f4:f8:cd:b8:c3:38:10:93:8a:
                    08:42:e1:d9:4e:d2:b8:44:1b:3e:2a:7b:5b:6e:ac:
                    19:f7:3a:53:5c:37:80:61:81:36:d2:2b:8c:f5:19:
                    bd:33:13:a0:9a:75:92:cf:aa:04:7d:0c:a1:09:fb:
                    88:e3:c3:8d:e1:46:bc:f5:45:e7:a9:e5:6f:f4:2c:
                    24:84:87:ef:fc:b3:fb:41:6a:bd:46:9e:45:83:39:
                    31:c0:42:ee:a9:83:f1:c1:9c:2d:c4:4d:e5:10:7c:
                    12:5c:8e:0d:da:da:3d:69:c8:96:93:1c:88:b1:8f:
                    a8:e0:00:eb:dc:ad:7c:46:10:ff:9b:0b:e8:74:e5:
                    0b:b5:e9:ef:1d:cc:7a:62:ca:dc:63:39:88:37:03:
                    a6:fc:7b:25:53:a0:7a:2d:84:c0:e2:31:84:2d:df:
                    51:38:6b:a8:87:ee:70:f4:b7:59:29:1e:5d:a1:94:
                    dc:98:55:d3:2d:27:bd:af:fd:13:2b:a8:8e:5d:02:
                    79:3f:8c:ab:ec:c8:9f:9d:44:19:6c:98:b8:7a:ed:
                    8a:9e:c1:a8:f3:f7:8d:46:a4:c9:31:d0:0c:38:53:
                    65:3c:14:70:ff:e7:1f:14:af:a1:9b:bb:ba:3c:25:
                    0a:84:d8:e0:4b:11:44:de:0b:5e:90:46:da:0d:c6:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:48:5F:1D:5F:60:30:96:6C:14:46:02:F5:C6:D6:1D:E9:F9:4A
            X509v3 Authority Key Identifier:
                keyid:C9:A4:9B:BB:A6:78:7A:0A:F3:72:11:4F:01:6A:7A:DF:9B:86:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12ace2bda69512c114fc039cc4dccc6cd0e96af1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/9cad600dd59a2cda3874093eb7bf9873d9983acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/12ace2bda69512c114fc039cc4dccc6cd0e96af1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:45:b0:47:94:7c:f4:95:f9:bf:67:1f:4d:de:83:a3:04:
         56:04:c0:6d:8a:2e:48:bf:0b:58:f3:f1:45:3b:34:ce:0e:ac:
         1c:f1:bd:5b:f7:49:5d:07:bb:e9:82:8d:a2:b3:72:35:1a:58:
         4d:6b:6a:32:bc:b5:54:45:46:dd:7d:bf:55:d4:59:51:b1:0e:
         33:6c:ad:c2:57:7c:d6:6a:08:cd:67:45:14:a2:ca:7f:42:61:
         1f:6a:2d:8b:21:ac:92:00:94:42:9e:b9:58:b2:3b:4d:19:b1:
         82:e3:b7:cc:53:b6:af:1f:7f:1f:fe:27:cc:1c:74:cc:eb:93:
         86:06:f9:66:35:d5:59:48:4d:db:e3:16:d4:b6:ff:b9:8f:07:
         7e:9a:f5:93:3f:27:35:a9:95:39:1b:59:c2:52:8f:ab:06:de:
         02:ac:1d:29:66:29:e7:b7:1e:4d:d9:2b:23:6b:13:25:d1:33:
         7f:63:d7:d9:3a:c3:58:d8:e7:80:31:e9:fd:89:a1:48:b5:f6:
         9f:1f:d6:1b:d3:29:2c:ee:a2:5c:d3:68:c8:bb:8d:4a:ae:7b:
         a3:d1:9a:d9:40:28:b1:fa:84:3e:cd:cf:ab:20:bc:58:c1:c7:
         75:e4:c2:48:4b:63:f4:71:e4:05:95:bf:d7:fd:30:de:de:c7:
         9f:62:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org