Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/ee8995b86426e4433099c2fc1bbcbe1583c6b4e5.roa
File:                     ee8995b86426e4433099c2fc1bbcbe1583c6b4e5.roa (raw, json)
Hash identifier:          IvVWkWG9p820H+dxt7IbXbyh/pWLKywzNphdhEkx/h8=
Subject key identifier:   FE:60:08:29:A9:1F:5A:33:8A:38:1E:40:00:94:4F:E3:BE:E4:DD:1F
Certificate issuer:       /CN=639b361009f26cf93180d6f26a1524716c25477c
Certificate serial:       064194
Authority key identifier: 3B:1E:46:00:3B:4B:E1:AD:EB:B0:82:8F:B1:59:84:78:0B:8D:B1:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/ee8995b86426e4433099c2fc1bbcbe1583c6b4e5.roa
Signing time:             Wed 24 Mar 2021 22:49:59 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     269858
IP address blocks:        45.189.196.0/24 maxlen: 24
                          45.189.197.0/24 maxlen: 24
                          45.189.198.0/24 maxlen: 24
                          45.189.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410004 (0x64194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639b361009f26cf93180d6f26a1524716c25477c
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=ee8995b86426e4433099c2fc1bbcbe1583c6b4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:4e:64:3d:37:c0:1c:68:db:33:6d:2e:63:
                    f6:8a:c2:1f:01:aa:e3:7c:a8:10:0d:ea:f8:41:ff:
                    a5:f4:73:f0:61:f3:3a:13:7b:55:2d:ae:7a:aa:34:
                    dc:34:8e:70:be:da:14:42:6f:1e:1c:d9:13:a9:ea:
                    a0:f2:85:a6:60:54:2e:27:c2:8a:c2:41:51:43:2f:
                    f9:eb:4e:c8:5b:71:df:00:17:76:31:a1:90:eb:5e:
                    61:ab:b6:46:0d:33:da:d4:ed:ff:6d:2b:90:95:f6:
                    d7:10:aa:1e:d0:97:ef:00:18:37:e2:59:e6:4d:1b:
                    5b:5e:f7:0f:06:ba:a6:be:3e:3f:17:66:b6:6b:94:
                    cd:95:7e:ff:57:8f:1a:ff:93:9a:d0:e1:15:c2:4c:
                    e0:bb:77:aa:a1:72:51:10:58:a9:f7:60:d5:a9:6a:
                    2e:4d:f9:11:96:a6:8f:8e:a7:39:a3:a9:b1:55:1e:
                    fd:6a:35:74:19:51:b4:f3:54:36:bc:4b:c5:a2:77:
                    94:0a:d5:89:b0:09:7c:1f:1a:0c:e0:05:38:4f:82:
                    59:d9:88:e2:87:7e:a2:5f:32:3e:28:bd:8a:ad:57:
                    aa:b0:60:07:ca:8b:ef:b9:8a:92:e7:03:01:01:1d:
                    4f:3e:68:6c:12:49:ae:02:a1:59:84:1d:1e:f3:98:
                    83:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:08:29:A9:1F:5A:33:8A:38:1E:40:00:94:4F:E3:BE:E4:DD:1F
            X509v3 Authority Key Identifier:
                keyid:3B:1E:46:00:3B:4B:E1:AD:EB:B0:82:8F:B1:59:84:78:0B:8D:B1:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/639b361009f26cf93180d6f26a1524716c25477c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/ee8995b86426e4433099c2fc1bbcbe1583c6b4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7b4f3a4-e861-4466-ba22-89756cf72482/639b361009f26cf93180d6f26a1524716c25477c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:74:59:5f:02:5f:05:3a:35:6b:7d:27:95:52:9d:38:fa:20:
         46:e4:50:41:64:14:0f:ae:7a:18:2b:dd:71:8f:53:0d:7c:ed:
         2f:9e:5b:b3:ee:e2:04:d1:de:d4:ae:0c:fb:a6:f2:79:08:41:
         73:7a:7f:2c:db:72:a1:90:d6:f8:96:52:b8:7c:77:67:3e:5f:
         37:7d:f5:3d:7e:ba:53:50:22:8e:f9:a8:b5:0e:f6:c2:13:bd:
         ea:cc:b9:8f:cd:ec:e0:f8:26:80:4b:2a:56:a3:be:8a:0e:18:
         37:d6:65:77:2d:6d:01:15:9a:04:e9:76:a6:e7:f9:10:bf:ff:
         be:94:72:76:ab:a7:53:d3:df:cc:c2:02:f1:74:25:42:3e:3b:
         fe:f3:f7:bd:a0:b5:48:76:a4:4a:66:90:2e:3c:57:85:76:09:
         f7:bd:eb:84:12:7c:16:22:71:e1:7e:53:48:74:e8:d2:9b:82:
         3b:84:a5:cb:05:69:98:b9:97:87:f6:dc:47:5d:79:f5:7f:76:
         73:87:61:63:65:5f:4d:58:19:e2:3d:11:1d:05:ef:67:5f:ba:
         54:7b:40:17:5d:20:23:76:72:b4:30:d7:0e:c6:13:8d:93:d0:
         30:cf:59:fe:d8:ff:4c:f1:6c:d0:f1:82:cc:98:e2:bc:52:58:
         e9:b2:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org