Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/2f77eece2fcec4b465a80752c0840a9ede756d42.roa
File:                     2f77eece2fcec4b465a80752c0840a9ede756d42.roa (raw, json)
Hash identifier:          VyNmtqVasm3RyzmVfBYodo/vaarbtEaREoAUTdadduw=
Subject key identifier:   E7:35:E8:3B:2B:25:39:D6:94:65:91:8D:36:B0:21:77:EF:4E:6C:38
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0CFF8E
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/2f77eece2fcec4b465a80752c0840a9ede756d42.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851854 (0xcff8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=2f77eece2fcec4b465a80752c0840a9ede756d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:23:2a:3d:8f:02:11:58:b5:d3:e9:a1:83:
                    e8:45:f0:9f:3a:62:4f:1b:9e:c6:c9:ac:66:fe:77:
                    4a:d7:52:a0:40:c1:5f:98:7d:e9:ea:bc:d7:01:83:
                    b3:b1:75:eb:65:35:be:5f:df:1e:f2:f1:8d:d7:79:
                    94:d1:9b:e5:0e:2b:38:93:44:43:50:15:42:7d:c0:
                    bc:f9:8e:2c:d2:fb:7c:2e:27:9e:87:dc:64:49:46:
                    3c:7f:66:88:db:8d:d7:3a:ab:83:b3:e3:f7:0c:cc:
                    52:a6:a7:6d:1b:d6:e5:e3:84:8e:90:c7:8c:bb:85:
                    05:f5:d9:29:bb:cf:e3:a4:55:0f:40:f1:4d:04:01:
                    47:de:44:8a:ac:2e:d8:12:c1:af:1d:f7:d1:64:c9:
                    a8:fb:73:a9:d2:52:98:b2:1e:54:db:6e:c5:99:9c:
                    01:8e:7f:21:fc:e8:9e:64:b1:6a:45:92:28:9d:f5:
                    36:ad:12:00:13:26:d7:42:5e:04:f1:40:10:e3:1d:
                    08:8d:6f:c6:07:35:a0:dc:08:cc:59:11:4f:4b:e3:
                    6c:f1:b1:26:a0:5e:dc:66:d7:43:d0:a4:71:a6:c5:
                    e4:02:c9:cb:32:85:a1:33:49:20:6c:ea:3a:18:76:
                    80:94:aa:e5:05:b6:ff:d7:e0:ef:f8:6a:ec:87:07:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:35:E8:3B:2B:25:39:D6:94:65:91:8D:36:B0:21:77:EF:4E:6C:38
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/2f77eece2fcec4b465a80752c0840a9ede756d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:01:e2:29:30:4a:64:b4:a7:2f:78:cf:7d:71:9a:71:3c:
         c1:08:1d:7f:db:25:80:e3:ca:23:e0:e9:5b:72:26:4c:50:2e:
         b9:42:47:29:71:8a:33:01:c3:62:0b:eb:4d:ea:ef:01:42:d7:
         00:d4:af:6c:c9:cc:9a:16:5c:5f:99:57:c0:41:7f:45:c5:64:
         45:16:d9:b4:69:69:a2:d7:6b:23:6a:16:8a:6b:80:76:b5:3d:
         3f:7c:d5:59:5d:f3:1d:04:38:57:66:61:9d:1c:42:bc:5d:c5:
         e7:52:0f:f8:eb:84:21:5d:57:9a:7c:47:9b:08:9f:77:ca:31:
         76:4e:53:fc:6d:ba:f5:f5:8e:fe:09:46:ea:2b:e4:a7:4f:be:
         35:e7:fa:00:53:28:2f:d1:43:e0:f9:f9:60:15:7c:2d:82:61:
         49:73:fd:b1:30:9d:92:d1:03:51:95:56:59:58:19:6b:39:28:
         6f:83:d1:39:4f:95:97:e2:a6:c0:93:d7:6e:10:0e:28:05:5f:
         4f:e3:be:df:1c:e2:dc:b2:fb:cd:7f:31:7b:a3:21:07:eb:77:
         60:2b:ac:34:21:55:3f:fd:c6:2b:fc:3d:f3:4d:c3:63:e9:b1:
         c1:87:df:c8:a9:26:91:30:48:b7:06:88:6d:6d:9f:67:9e:f3:
         1b:b0:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org