Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/d00cde6cbb037d1577e89debeac30b89ffa392a3.roa
File:                     d00cde6cbb037d1577e89debeac30b89ffa392a3.roa (raw, json)
Hash identifier:          LIoSR/g7MqPGYWgSyU2rRZ2yah1JsVlhYAoiER1kHR8=
Subject key identifier:   B0:F7:3B:A0:95:41:CE:A4:66:8E:A9:2F:7A:AB:4B:BE:0E:57:47:66
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       0DE1E6
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/d00cde6cbb037d1577e89debeac30b89ffa392a3.roa
Signing time:             Wed 24 Mar 2021 14:29:53 +0000
ROA not before:           Wed 24 Mar 2021 14:29:52 +0000
ROA not after:            Tue 24 Mar 2026 14:29:52 +0000
asID:                     265819
IP address blocks:        45.6.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909798 (0xde1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Mar 24 14:29:52 2021 GMT
            Not After : Mar 24 14:29:52 2026 GMT
        Subject: CN=d00cde6cbb037d1577e89debeac30b89ffa392a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:6f:53:c2:62:0d:56:a2:39:ac:95:23:0d:
                    6a:33:60:5a:66:46:bd:87:46:f6:fa:64:89:4f:01:
                    a2:08:06:c3:99:fe:4b:77:69:4d:9b:03:eb:37:cc:
                    ec:21:1c:e2:0b:94:90:68:55:af:e1:1a:4b:46:9d:
                    c0:ca:81:ba:71:ed:b0:90:cf:c5:9b:d9:4a:f0:3e:
                    31:87:6d:b7:23:5d:7f:11:d5:e4:a6:0a:78:d3:17:
                    47:f4:d1:68:bb:a0:a3:49:ad:1a:19:e5:46:56:b0:
                    1c:7b:b7:51:2b:f7:0a:0f:59:ab:5f:98:0a:4f:09:
                    90:bc:4e:00:9a:ea:c3:33:a5:1b:5f:50:f7:da:07:
                    0f:14:4f:f5:69:85:06:ca:24:99:5c:ee:33:e5:57:
                    c0:d2:3e:a4:e5:be:ad:20:cb:70:6c:93:72:b4:4d:
                    bf:c5:6d:1e:7c:01:d8:06:ea:46:29:fb:87:6d:24:
                    8f:a7:4f:40:b6:40:93:0f:bb:f9:a2:73:69:5b:cf:
                    0c:c3:9d:71:fa:96:9f:59:00:48:77:80:d5:aa:ba:
                    30:f5:59:aa:19:b2:68:3b:47:b4:2f:b1:32:9a:37:
                    69:16:d0:93:62:3d:d3:da:86:fe:12:e6:60:04:83:
                    ff:54:61:1c:95:93:2f:e2:cc:01:58:20:d1:1d:c3:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:3B:A0:95:41:CE:A4:66:8E:A9:2F:7A:AB:4B:BE:0E:57:47:66
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/d00cde6cbb037d1577e89debeac30b89ffa392a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:51:e7:49:9e:67:9c:5a:ed:b6:d6:7a:8f:bc:d9:3c:89:a7:
         32:67:b1:58:33:f9:be:0b:08:75:29:e6:79:94:ea:b2:59:85:
         d7:4b:5c:ca:48:ec:22:78:5f:bd:b8:90:7b:8a:b6:4a:85:4d:
         4e:dc:73:b5:7b:09:a0:01:6e:a2:8d:e2:1c:7f:fd:2e:0b:06:
         69:97:0a:68:1c:98:f9:a7:35:f1:e9:b0:00:7c:a8:b6:d0:07:
         b2:08:7b:34:f1:7f:37:10:10:c4:95:c9:71:4c:8d:f1:9c:df:
         17:c7:ed:65:39:c6:69:c8:c5:01:4d:6c:58:6c:8a:97:96:58:
         5b:b3:fd:6a:b8:1f:a1:37:23:74:15:13:5a:5e:d6:22:5e:d5:
         c8:f4:a3:36:70:03:fa:27:6d:e7:22:ef:07:6b:ca:30:33:41:
         b6:cc:45:40:37:7d:b8:54:0a:e4:59:30:29:55:34:da:a3:46:
         0d:87:a8:26:d1:2e:64:6d:58:12:31:c6:f9:13:f2:0e:d7:f2:
         d0:99:81:36:fe:06:0c:76:37:44:05:2d:30:38:ef:fb:3c:cb:
         03:c5:f8:75:24:a8:00:af:ce:87:8b:bc:c1:71:e2:1a:3a:75:
         54:01:67:88:bb:73:b1:2f:6e:88:76:0d:bd:5a:f5:25:07:7d:
         26:99:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org