Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd4c2e3f-1f67-4c6b-a16a-7b55bc869b23/7ba1ade70fbf70abad0ed2217e8dfb9e284dcf52.roa
File:                     7ba1ade70fbf70abad0ed2217e8dfb9e284dcf52.roa (raw, json)
Hash identifier:          /e9dlWKR9GCKULXyl7Mddwg2Yq+UNafsGpJ1600ah3k=
Subject key identifier:   BA:6F:01:BF:17:C8:F8:95:A3:F0:C0:55:F3:B0:86:EE:39:B8:D2:25
Certificate issuer:       /CN=8fafb72ad86903953b98683f7b0d07a42adcf979
Certificate serial:       0C3EE5
Authority key identifier: 44:E0:4A:8D:EE:1C:32:62:4B:4C:A1:FF:03:73:2B:EE:E5:EC:E5:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fafb72ad86903953b98683f7b0d07a42adcf979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd4c2e3f-1f67-4c6b-a16a-7b55bc869b23/7ba1ade70fbf70abad0ed2217e8dfb9e284dcf52.roa
Signing time:             Wed 24 Mar 2021 14:33:40 +0000
ROA not before:           Wed 24 Mar 2021 14:33:40 +0000
ROA not after:            Tue 24 Mar 2026 14:33:40 +0000
asID:                     266855
IP address blocks:        45.239.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802533 (0xc3ee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fafb72ad86903953b98683f7b0d07a42adcf979
        Validity
            Not Before: Mar 24 14:33:40 2021 GMT
            Not After : Mar 24 14:33:40 2026 GMT
        Subject: CN=7ba1ade70fbf70abad0ed2217e8dfb9e284dcf52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:15:6e:7a:17:fe:ca:7b:8e:94:72:cf:7a:
                    56:98:18:cf:29:ae:42:62:e7:de:63:ce:ac:59:00:
                    ec:a5:d2:d8:cf:20:1b:24:ce:bc:fd:c9:52:1f:99:
                    14:b0:d9:7d:50:4e:55:5e:bb:df:47:5e:93:e4:79:
                    c6:9d:31:7c:56:3a:7f:36:6b:90:6b:e9:e2:7e:5b:
                    b6:56:26:ab:8c:b5:b6:14:96:77:99:a1:45:12:01:
                    28:cc:98:cb:4f:0e:ae:77:19:19:c7:ae:bc:34:f5:
                    fa:dd:6b:f5:2f:9f:b7:00:0f:d4:7e:26:11:c3:1c:
                    8a:fb:48:f0:7a:42:16:25:81:74:29:3c:0a:63:6f:
                    30:50:d3:fb:68:73:cf:0b:84:1a:43:cb:c7:b0:f0:
                    50:1e:cf:8b:e4:d3:91:a6:82:a6:d8:0b:51:a2:5d:
                    2a:26:01:4b:53:b9:df:e7:4c:ca:88:f4:f0:6a:e7:
                    0e:0f:3f:5c:de:1e:63:dd:cb:8c:1c:6e:19:d6:39:
                    44:79:84:04:da:a5:4e:87:23:5b:a8:49:73:0f:1a:
                    1c:7c:4d:ad:58:91:dc:9c:b9:ef:0f:25:22:eb:ae:
                    c5:42:a5:28:bb:86:04:02:80:5b:e6:91:c7:07:5d:
                    7d:fd:3e:94:23:31:76:2b:ac:c8:83:53:98:f2:1d:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:01:BF:17:C8:F8:95:A3:F0:C0:55:F3:B0:86:EE:39:B8:D2:25
            X509v3 Authority Key Identifier:
                keyid:44:E0:4A:8D:EE:1C:32:62:4B:4C:A1:FF:03:73:2B:EE:E5:EC:E5:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fafb72ad86903953b98683f7b0d07a42adcf979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd4c2e3f-1f67-4c6b-a16a-7b55bc869b23/7ba1ade70fbf70abad0ed2217e8dfb9e284dcf52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd4c2e3f-1f67-4c6b-a16a-7b55bc869b23/8fafb72ad86903953b98683f7b0d07a42adcf979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ef:e0:93:22:a9:ae:e2:02:9e:e5:36:45:65:6b:84:a0:ee:
         e8:5d:1e:aa:c8:03:07:9f:30:9e:dc:9b:c9:b6:bb:87:5f:50:
         ac:9f:0e:62:6a:a5:8f:97:64:de:7e:dd:ce:0b:ca:d9:a9:da:
         5f:e3:db:e3:75:35:6a:ef:b6:00:7b:50:ad:4e:19:8f:ac:d6:
         2d:ac:aa:ac:9d:58:3b:34:19:81:6a:a2:be:28:a6:7e:2a:f4:
         4b:c5:79:85:04:b3:03:0c:78:59:9c:32:d5:c5:c2:14:8c:f1:
         82:8d:44:1a:14:8e:6e:42:f4:e4:7f:b1:a9:5c:55:39:f9:bc:
         34:28:2b:e7:25:1c:07:db:08:2d:35:f4:a8:29:ed:3c:74:0d:
         99:59:b1:f3:87:86:be:49:53:ab:90:b3:6c:ff:3d:30:09:7a:
         90:f1:c3:5d:79:47:0e:67:9c:27:34:0f:75:e1:65:13:bd:26:
         bd:10:10:80:eb:a9:77:4a:77:36:ee:b0:6f:55:47:5e:d7:04:
         a4:bf:5e:8a:54:23:a5:3a:62:2e:e6:9c:5a:13:51:48:bf:3d:
         4f:7f:81:8c:ee:bc:03:18:3a:02:10:c6:4b:29:ae:78:49:6b:
         cb:97:52:a0:2a:55:93:28:9e:53:4e:0f:f1:ec:a5:85:e9:c2:
         e4:ce:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org