Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/b6cd101a6f8e6fd8fcb786ead38c12f1da2225b2.roa
File:                     b6cd101a6f8e6fd8fcb786ead38c12f1da2225b2.roa (raw, json)
Hash identifier:          TfENFqmeAtoE8ynYirpshUBCXfQbOOvox+LMFPRRGAg=
Subject key identifier:   37:0B:34:64:4E:BF:17:07:23:ED:53:68:3A:6B:E2:70:F0:3E:05:9B
Certificate issuer:       /CN=070040b1836f3353fb7f260224621c2deb277eb0
Certificate serial:       0D4C79
Authority key identifier: 23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/b6cd101a6f8e6fd8fcb786ead38c12f1da2225b2.roa
Signing time:             Wed 24 Mar 2021 14:41:03 +0000
ROA not before:           Wed 24 Mar 2021 14:41:03 +0000
ROA not after:            Tue 24 Mar 2026 14:41:03 +0000
asID:                     266672
IP address blocks:        45.71.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871545 (0xd4c79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070040b1836f3353fb7f260224621c2deb277eb0
        Validity
            Not Before: Mar 24 14:41:03 2021 GMT
            Not After : Mar 24 14:41:03 2026 GMT
        Subject: CN=b6cd101a6f8e6fd8fcb786ead38c12f1da2225b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:a2:3a:90:6a:22:d7:46:61:fb:f6:7b:07:
                    24:bc:97:3e:5e:3d:2f:71:e6:c8:08:33:99:14:c5:
                    30:23:a5:7e:09:ef:9b:79:86:c0:30:bc:70:a1:c6:
                    f2:1c:8b:fb:cc:36:a2:63:64:2c:b2:08:48:0b:c4:
                    d4:ab:c7:e0:e2:6f:fd:f2:a8:a6:70:32:7d:ff:00:
                    4a:e7:5c:f9:51:5a:31:86:6c:ca:44:57:93:04:48:
                    fc:b7:20:ce:74:d1:56:d9:85:c0:bf:b6:d4:05:72:
                    79:39:7a:cb:7e:8c:da:0b:59:b5:2b:79:0f:47:02:
                    22:88:f1:79:d9:c6:9a:bd:dc:48:34:cd:27:f7:8c:
                    0e:cb:12:bd:e2:19:a8:d3:75:97:32:cc:b0:50:2c:
                    d5:c4:bf:76:f5:4e:ba:58:74:86:64:34:b7:51:86:
                    b9:63:31:30:8d:6e:8e:56:f3:fc:51:40:40:32:c3:
                    1a:ae:71:a4:92:b3:19:62:66:ec:41:3b:9b:fe:27:
                    08:51:b6:f4:03:82:48:c8:7c:13:9c:ae:6e:84:a8:
                    15:57:0f:5a:03:4c:42:34:a0:d1:13:3a:7f:e6:72:
                    22:79:95:25:29:da:e5:6d:57:64:39:db:0e:38:b5:
                    fa:5a:f9:d1:c9:7b:01:0e:20:41:ef:30:f2:56:13:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0B:34:64:4E:BF:17:07:23:ED:53:68:3A:6B:E2:70:F0:3E:05:9B
            X509v3 Authority Key Identifier:
                keyid:23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/b6cd101a6f8e6fd8fcb786ead38c12f1da2225b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/070040b1836f3353fb7f260224621c2deb277eb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:fb:74:96:8f:44:4b:57:36:2e:60:f8:7e:7a:f5:55:5b:cd:
         ed:9b:04:fa:6f:ab:c8:57:ab:7d:d9:d7:9d:a0:4f:6a:bd:6a:
         8c:3f:24:de:8e:1c:dd:a7:b0:1e:42:e5:b3:34:b8:7c:cf:4a:
         de:74:7b:a7:0c:1b:b8:39:b6:14:00:92:02:75:b7:eb:6a:d0:
         b1:60:91:64:03:bd:9b:e1:ca:c0:84:4f:f5:aa:63:76:9d:b8:
         3a:f3:66:7b:2f:cf:8c:4c:dc:0f:5f:9a:4f:56:f1:7e:d8:3f:
         4d:6b:14:48:aa:50:f8:75:89:ff:ac:44:fc:82:36:8e:76:1c:
         01:e8:d3:9c:f7:fb:a0:d4:5b:04:03:e6:b0:ed:fe:90:26:f9:
         4f:02:f4:0c:8c:a3:12:6b:e8:24:70:90:77:25:9b:70:50:9b:
         a2:59:37:08:44:05:76:c9:aa:bf:ca:5f:32:d9:54:2d:9b:ef:
         1a:28:f2:1f:6e:40:1e:37:88:41:d3:41:2b:d1:e5:6a:59:3a:
         b0:bb:39:f6:22:aa:55:01:d0:fc:42:74:b9:eb:27:c6:51:22:
         9d:3e:c8:78:14:94:9d:d9:ab:25:b2:92:bd:6c:ff:d7:be:6b:
         b3:25:46:14:c1:4a:ad:c7:21:dd:4d:2d:71:ca:db:09:9d:a7:
         95:86:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org