Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/6e9fec8292484f1a15ae67c7e170c01cbebaf930.roa
File:                     6e9fec8292484f1a15ae67c7e170c01cbebaf930.roa (raw, json)
Hash identifier:          Q/KG2MskymJC6g7lJFKQicOfxyk4YTtT5W6WmP/pHbc=
Subject key identifier:   59:64:2A:E4:EA:F3:97:50:34:1F:9B:56:5A:B8:7C:8D:C5:27:7A:7C
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0D077D
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/6e9fec8292484f1a15ae67c7e170c01cbebaf930.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853885 (0xd077d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=6e9fec8292484f1a15ae67c7e170c01cbebaf930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:a6:27:c3:0d:c7:1b:f1:44:87:fb:47:56:
                    a7:aa:8c:55:5c:f9:66:ae:59:2e:81:25:35:51:76:
                    8c:11:47:a8:85:95:c1:5c:32:92:d4:5c:0b:e4:00:
                    f2:79:2a:e3:e1:e1:76:a8:c2:97:92:ef:7a:45:77:
                    e2:d1:b6:ce:33:f1:ca:44:22:47:d7:ed:4c:86:0e:
                    60:45:ab:0d:f5:41:7c:30:8a:d5:3a:97:f5:42:dc:
                    c0:b3:4b:44:ff:9a:0f:d6:7f:3d:3c:31:5a:2f:74:
                    de:b1:31:aa:f2:71:2e:90:e5:90:56:61:2f:58:de:
                    5c:d0:5a:ed:e2:2f:af:e9:07:f0:1b:b3:d0:a1:06:
                    3e:dc:db:7c:77:9c:e7:5b:b0:13:b9:e0:a0:82:4f:
                    df:b1:3f:d6:df:f8:26:81:d5:ac:de:96:88:b7:64:
                    6e:f4:1f:ce:b4:77:d4:99:66:a2:50:2a:5b:a5:75:
                    9d:e1:55:90:6c:40:14:4f:d2:93:7c:a6:1e:e6:25:
                    e3:05:d3:7b:13:70:e5:c2:10:3f:47:23:82:b4:54:
                    5b:4e:e7:5c:b9:3e:c8:1c:78:b2:6f:96:33:63:4c:
                    f1:2f:15:f3:6d:e5:23:c0:62:7f:1b:9c:a7:b8:a0:
                    77:55:2e:10:00:54:f4:92:db:01:49:17:94:10:42:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:2A:E4:EA:F3:97:50:34:1F:9B:56:5A:B8:7C:8D:C5:27:7A:7C
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/6e9fec8292484f1a15ae67c7e170c01cbebaf930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:65:59:ed:45:ff:e4:fc:52:6c:67:43:d3:f3:b7:5f:bb:ef:
         6d:96:6f:69:1c:f0:3c:73:db:cc:dd:05:c3:ce:28:0c:ba:af:
         28:fe:73:be:04:2a:ac:24:29:c1:9a:bc:68:7c:f6:af:7a:74:
         f2:6f:c4:d0:92:f4:99:56:b8:45:8e:d9:2a:b4:6c:17:f5:c0:
         63:a6:e4:f0:f1:f8:15:1e:c8:ec:02:ba:61:89:53:f1:a8:bb:
         2a:0f:af:eb:28:62:2d:dc:ca:d6:27:08:bd:87:34:58:f1:8e:
         9f:59:9c:5e:f3:69:5e:f4:f5:fb:c9:63:9a:57:e9:05:fb:58:
         40:dd:7c:f0:8b:17:40:4f:c9:7b:bb:13:a9:39:6a:5d:5b:0b:
         8c:87:ce:61:bf:dc:a7:47:60:bd:00:53:b1:e7:6b:2e:39:00:
         fe:d7:a1:7c:ba:16:f3:89:f0:f4:b4:01:37:df:42:d8:ea:d8:
         3e:34:f4:2a:bf:0c:fb:c5:1c:3b:88:66:33:1b:ba:9c:57:6a:
         cd:c0:a3:1b:13:6a:f3:32:87:61:61:86:35:d2:e0:91:db:2c:
         da:fb:ea:f0:74:d3:de:2f:a9:9c:fe:22:56:a3:d1:c8:73:9f:
         82:9d:5d:2b:ba:fa:de:3b:10:95:e8:ce:13:cb:90:ff:98:bd:
         a0:bb:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org