Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4041b16e04277e7f96a95837fecc495b95a2c90e.roa
File:                     4041b16e04277e7f96a95837fecc495b95a2c90e.roa (raw, json)
Hash identifier:          U7JpECvExonnHFakLZi/XO/7jpYN9hGPiqKSxp5h2ug=
Subject key identifier:   12:E0:F0:B4:35:4D:9A:7C:1F:C0:4B:4E:13:2F:D9:E7:91:CF:18:0E
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0D0417
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4041b16e04277e7f96a95837fecc495b95a2c90e.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853015 (0xd0417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=4041b16e04277e7f96a95837fecc495b95a2c90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:4f:87:ad:6a:84:d5:c8:e4:e7:a3:5e:32:
                    f9:3e:4c:92:3c:e8:ec:b5:96:85:4c:61:a7:cf:20:
                    cf:2d:9e:93:1d:c9:97:be:03:0e:8b:eb:ce:21:5e:
                    61:b6:72:66:f3:13:af:20:18:2f:73:0b:62:c3:d4:
                    38:16:32:f8:57:da:60:06:15:b7:a1:a4:b2:11:f9:
                    c4:71:35:c5:77:6a:a4:46:53:4d:e8:79:9d:ee:39:
                    95:07:b0:f9:ee:22:3f:84:a3:f7:2e:34:0e:d1:94:
                    7a:d5:cc:b1:b6:89:8f:63:24:8c:5f:50:cd:59:2c:
                    b1:8d:22:02:38:08:2d:14:0b:bc:72:9e:9c:47:16:
                    86:e7:5f:4e:d1:27:e3:63:ed:20:7e:78:bd:eb:0f:
                    36:e1:cf:d6:30:9e:1f:81:69:7e:17:6c:48:eb:ec:
                    b4:dc:63:60:fa:7c:ed:f1:48:7a:d7:07:ef:51:96:
                    3a:02:20:ad:3b:0d:32:2c:7f:f5:72:9f:77:3e:6a:
                    cc:da:f6:98:f5:1c:47:56:84:a0:66:09:6d:f4:71:
                    11:e2:48:27:2b:7f:be:78:51:39:34:b5:a8:7e:28:
                    56:7f:4c:e5:6b:a8:40:f7:db:4d:ad:68:89:88:4f:
                    ff:a0:ee:40:3b:54:11:b0:80:e6:f6:f0:c2:f7:f0:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:F0:B4:35:4D:9A:7C:1F:C0:4B:4E:13:2F:D9:E7:91:CF:18:0E
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4041b16e04277e7f96a95837fecc495b95a2c90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:4c:e3:5d:a2:9a:f9:e5:a5:ef:6f:0a:63:09:b5:b6:90:
         1f:c9:c5:fe:0d:70:8b:ab:65:e9:a9:ca:4b:52:38:c5:7b:58:
         48:c2:d5:7a:f7:60:1c:61:a3:e2:30:1a:d0:11:f5:7a:4d:35:
         c9:74:2e:7a:3b:32:6b:b6:17:ab:d3:e5:15:59:ff:b2:07:c5:
         f2:d0:1d:42:ad:4e:48:7c:79:31:4a:da:e7:ad:56:dc:cc:dd:
         a4:b3:df:a8:25:6a:c5:f9:fc:cf:7b:b9:79:8a:fb:d3:48:2d:
         12:dc:28:8b:1a:5f:b5:bd:75:51:eb:3c:42:d9:76:ea:6a:37:
         1e:1e:b7:8d:11:74:03:78:c3:1d:ac:5d:70:8c:47:d6:de:3c:
         c6:f0:20:81:84:29:84:47:51:db:24:4d:c7:38:50:1f:8b:74:
         cc:82:25:81:29:cf:69:e2:17:5e:b2:0c:ec:9d:88:32:05:e0:
         24:8f:0f:88:e9:91:ae:e7:9c:8f:2e:4d:a7:90:9b:d3:e6:4c:
         fd:6a:ca:3b:4b:42:82:8b:f8:10:41:12:b5:17:c8:62:9b:5e:
         b8:8f:65:7a:77:2f:1c:77:6a:03:52:c6:84:5f:be:a2:cd:eb:
         c2:d0:de:62:f7:1f:df:26:57:55:63:d4:33:1c:29:6d:10:ba:
         a5:ad:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org