Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/8ff80ca34059adeffcacd7bf048bc1b232079b9b.roa
File:                     8ff80ca34059adeffcacd7bf048bc1b232079b9b.roa (raw, json)
Hash identifier:          Ot1rZ7mVAfZMYg++wFWKwC2Je2kt1pGucQ6uLl5SSpo=
Subject key identifier:   8E:9A:66:66:60:2D:74:26:E7:9B:26:D4:34:2F:61:AD:30:F9:C3:BC
Certificate issuer:       /CN=070040b1836f3353fb7f260224621c2deb277eb0
Certificate serial:       0D492D
Authority key identifier: 23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/8ff80ca34059adeffcacd7bf048bc1b232079b9b.roa
Signing time:             Wed 24 Mar 2021 14:41:03 +0000
ROA not before:           Wed 24 Mar 2021 14:41:03 +0000
ROA not after:            Tue 24 Mar 2026 14:41:03 +0000
asID:                     264836
IP address blocks:        45.71.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870701 (0xd492d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070040b1836f3353fb7f260224621c2deb277eb0
        Validity
            Not Before: Mar 24 14:41:03 2021 GMT
            Not After : Mar 24 14:41:03 2026 GMT
        Subject: CN=8ff80ca34059adeffcacd7bf048bc1b232079b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:3a:74:ae:04:7e:7d:fc:15:40:17:3d:21:
                    6e:2c:90:fc:63:8a:24:85:37:26:b4:c7:56:5f:64:
                    b4:cd:0a:df:81:89:da:e6:87:a7:59:5a:e6:a3:a8:
                    6c:0c:02:c2:9d:b5:2b:55:1d:dc:8f:28:23:65:ef:
                    a7:c3:72:28:e9:3f:71:d4:97:bc:ab:c6:23:ff:cf:
                    7c:23:69:0e:ca:64:27:2c:30:1c:1a:b0:0f:d6:1a:
                    ce:e9:9e:ae:80:54:5a:48:66:8a:7b:99:59:bb:e5:
                    05:57:68:98:2b:be:6b:95:f4:7c:a8:e7:f8:08:1a:
                    23:89:a3:cd:b3:ed:a5:25:34:48:bf:12:50:85:f6:
                    ae:48:02:b8:e0:45:d5:6d:d5:30:e0:7c:6d:70:ac:
                    b6:17:b0:4e:89:a5:57:af:7a:fd:74:25:47:41:2b:
                    f0:9a:8b:e9:28:c9:4b:78:be:f9:b5:ba:4b:b6:a0:
                    68:4f:a9:18:5e:b4:3e:b1:e0:ef:cb:41:9b:a5:1a:
                    5e:8d:1a:96:03:51:4e:64:4a:2a:e8:45:cd:e9:4c:
                    75:09:51:38:fd:b1:45:69:78:66:d2:74:9d:06:32:
                    94:67:bd:12:d8:94:95:18:ff:88:6a:c2:c7:e4:29:
                    c9:d9:13:aa:33:d3:b3:13:b7:b6:2c:ef:78:94:90:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:66:66:60:2D:74:26:E7:9B:26:D4:34:2F:61:AD:30:F9:C3:BC
            X509v3 Authority Key Identifier:
                keyid:23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/8ff80ca34059adeffcacd7bf048bc1b232079b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/070040b1836f3353fb7f260224621c2deb277eb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:71:da:f9:23:a4:ea:b8:60:5a:ac:15:2b:5c:e9:c3:e6:c6:
         4e:de:46:70:6f:82:a1:92:db:13:bc:1f:30:11:07:9a:12:51:
         67:28:38:a9:45:47:96:14:41:31:24:32:cb:2e:fb:cb:3b:5a:
         cf:ae:9d:b1:3f:62:77:ee:df:bd:91:80:84:fe:31:f7:48:ad:
         d9:af:71:b7:bc:3c:dc:20:42:e0:0e:d4:00:0f:b9:ad:eb:ce:
         f3:4d:b5:8a:27:cf:eb:78:b8:e4:0f:cf:ff:6f:24:d0:d0:b6:
         ae:31:08:20:ff:dd:19:be:31:96:7f:59:e5:d5:00:27:da:48:
         8d:0b:e6:6d:3c:13:46:b7:d3:e3:77:81:53:4d:cc:3d:ad:2f:
         b7:39:18:8e:9b:fb:4e:8f:9d:24:de:88:36:99:c5:5a:3a:db:
         57:a6:08:d2:d5:58:d4:2c:dd:ec:8e:45:6b:b2:a9:79:a3:f2:
         9b:0b:33:e6:f9:a2:b7:11:70:34:e4:45:7b:3d:fd:1b:c9:28:
         0c:e9:43:5b:7f:37:8e:8c:81:41:6a:35:50:90:9c:d9:d8:a6:
         f7:0c:68:ad:a5:81:3e:72:4e:a0:4c:95:f7:25:9a:1e:86:8d:
         0b:b0:96:f5:66:e2:bf:79:37:1d:f0:58:44:d7:fd:fa:1e:31:
         fd:2d:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org