Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/3fded06f9c1045244a8ba10a1f78af32b81780d5.roa
File:                     3fded06f9c1045244a8ba10a1f78af32b81780d5.roa (raw, json)
Hash identifier:          BRZxQyv8VRADci1NX5RblKWdCDyKO2o/iQ3m/T5hUKY=
Subject key identifier:   3F:B5:3F:3F:B4:4D:96:88:6D:EC:AB:B5:F4:0F:E0:7F:9D:8C:B1:6D
Certificate issuer:       /CN=7683d32cdb4affaba4c3cf86675e6414d022d8db
Certificate serial:       0C86D3
Authority key identifier: 81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/3fded06f9c1045244a8ba10a1f78af32b81780d5.roa
Signing time:             Wed 24 Mar 2021 14:38:18 +0000
ROA not before:           Wed 24 Mar 2021 14:38:17 +0000
ROA not after:            Tue 24 Mar 2026 14:38:17 +0000
asID:                     266709
IP address blocks:        45.229.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820947 (0xc86d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7683d32cdb4affaba4c3cf86675e6414d022d8db
        Validity
            Not Before: Mar 24 14:38:17 2021 GMT
            Not After : Mar 24 14:38:17 2026 GMT
        Subject: CN=3fded06f9c1045244a8ba10a1f78af32b81780d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:db:4f:1a:1e:9c:8d:54:a8:63:a4:9a:ae:
                    bd:2a:2e:70:aa:b6:e9:50:15:14:d1:b8:65:b5:ea:
                    35:64:0c:ed:ea:ae:ec:9a:28:5f:4b:37:f3:dd:76:
                    9b:ae:c9:4b:0d:9a:61:d9:33:88:eb:d6:25:47:32:
                    ba:d9:8a:b9:5a:4d:c2:28:76:19:67:f6:a8:e2:e7:
                    df:4b:b9:99:73:a8:a1:72:f6:0f:21:a0:3c:e9:5e:
                    18:43:ce:89:95:e8:92:80:a2:74:df:c0:5a:7e:d8:
                    9c:a2:99:99:a7:2e:77:e7:3b:e2:b4:fb:25:87:f1:
                    4e:b1:5d:22:e0:d6:0d:7a:d4:49:66:b1:64:74:ee:
                    63:4c:5f:82:04:a0:84:1f:2c:ac:20:c3:64:a4:81:
                    e8:8d:f6:96:a8:30:4f:61:f0:1e:96:f9:d3:f3:36:
                    c2:39:a6:e6:cf:63:68:1a:9f:af:4f:b3:bb:10:96:
                    81:bf:66:cc:66:6e:ec:85:b9:73:45:5e:eb:7a:fa:
                    af:45:73:af:14:1e:50:ff:38:bf:c2:d1:79:44:95:
                    00:a5:82:45:b3:0b:89:c5:c5:d9:77:63:ec:6d:47:
                    48:c0:dc:c2:45:5b:78:df:02:c6:84:7f:b6:4f:2e:
                    b6:70:dd:7c:62:a3:49:1c:e3:06:43:51:cb:80:71:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B5:3F:3F:B4:4D:96:88:6D:EC:AB:B5:F4:0F:E0:7F:9D:8C:B1:6D
            X509v3 Authority Key Identifier:
                keyid:81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/3fded06f9c1045244a8ba10a1f78af32b81780d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:97:2c:43:69:d2:d7:e8:79:85:4a:76:bd:95:e0:a7:77:
         66:5b:ab:0e:66:84:51:eb:a4:f4:a8:25:01:e6:5c:96:67:1e:
         de:c5:c2:7a:32:a2:60:6a:ba:56:9d:dd:d4:4b:f6:fb:eb:b4:
         88:08:39:fd:b2:a8:ab:53:e2:0c:70:46:01:45:df:98:66:0e:
         a7:cb:36:56:e0:72:54:c8:03:5c:70:b6:9f:88:cb:6d:c9:c2:
         f3:b3:7b:91:68:40:cb:5a:d2:79:98:95:6c:49:91:bd:c3:ad:
         2c:4e:57:a6:44:e5:f5:82:96:80:a1:19:5b:4f:c3:f9:03:23:
         83:d7:95:0d:ac:76:93:f3:44:01:4a:ff:5d:77:bd:6a:25:fd:
         d6:7e:37:66:a6:bd:62:82:a8:8b:0f:86:fc:76:4a:70:84:ee:
         30:45:dc:26:c6:b7:38:85:6b:83:49:c2:dd:50:74:29:32:b1:
         e2:45:4e:a8:04:07:f0:d8:87:c4:a9:e6:42:f6:25:0e:90:6e:
         14:da:6a:55:dc:7a:97:14:69:1e:b6:84:18:5a:f4:24:0e:9b:
         b2:2b:9b:7d:65:7f:88:fa:7e:2d:6d:c9:ea:43:ac:aa:31:9d:
         47:c6:b3:9f:a4:d9:1f:5f:b1:71:39:07:75:8c:fb:a5:1e:d5:
         28:73:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org