Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/76be501175c9afee5c6aae51cacfe3791dbb7056.roa
File:                     76be501175c9afee5c6aae51cacfe3791dbb7056.roa (raw, json)
Hash identifier:          crOL03733RjEWhxU4XalLg9LSPsv8bYlQ3kDwGw+et8=
Subject key identifier:   DB:EB:80:0E:02:2C:8C:59:BA:FC:81:ED:80:CC:4D:BA:F4:D2:5A:68
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0CFE45
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/76be501175c9afee5c6aae51cacfe3791dbb7056.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851525 (0xcfe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=76be501175c9afee5c6aae51cacfe3791dbb7056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:6b:ee:36:af:fa:a2:d5:1b:88:b4:ea:a7:
                    b1:d0:2e:50:8a:b2:d6:f4:c8:18:17:55:36:b0:f4:
                    07:3b:34:03:83:e5:5f:3c:76:80:c9:aa:86:13:98:
                    10:3b:9e:1e:84:23:14:3d:ad:57:36:c7:33:a1:d8:
                    c3:0d:1b:e1:73:1b:c7:12:e1:ab:ae:d1:26:e1:ef:
                    37:62:58:d9:3e:cc:be:5d:8e:f6:03:4f:90:88:d4:
                    a2:c3:81:74:5c:c2:c8:2c:f4:73:86:8f:07:78:ca:
                    95:29:c8:14:bd:f2:b2:4c:ef:1f:71:5a:d4:d4:69:
                    78:63:3b:59:ab:5b:38:52:cc:57:a6:ea:f7:e4:36:
                    17:8d:37:2c:29:63:9e:3a:f5:0d:b9:6f:82:36:77:
                    f2:e4:07:6c:17:38:da:ec:ab:31:7d:5a:37:44:b4:
                    02:20:a9:17:7d:81:73:0b:e1:b3:b6:b7:1e:89:5f:
                    99:ae:d6:33:92:16:3c:d4:65:c3:43:cb:7c:5c:9f:
                    08:f8:18:f5:4f:23:10:cf:44:e5:02:cf:f8:fb:fd:
                    54:1d:98:ff:97:fe:2d:34:c9:26:e2:4c:02:59:50:
                    76:0d:cf:55:b3:9e:a9:ad:a8:39:82:79:97:05:c5:
                    95:6d:15:d0:6e:c1:38:ef:4d:b6:f8:8d:8c:5b:21:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EB:80:0E:02:2C:8C:59:BA:FC:81:ED:80:CC:4D:BA:F4:D2:5A:68
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/76be501175c9afee5c6aae51cacfe3791dbb7056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:0b:85:10:96:ef:d4:3d:20:af:37:8d:79:f3:26:27:a5:
         be:e8:74:47:aa:56:09:ca:fe:55:dd:a7:d3:9b:d4:f4:33:98:
         b5:50:f9:c8:ae:07:b4:8b:67:3b:0f:de:8a:90:85:da:e4:4e:
         69:ca:9d:92:34:cd:e2:92:b3:96:3f:1c:33:f7:3f:c2:8a:10:
         82:01:30:02:bc:2d:86:0d:47:28:1b:e7:a3:db:c1:df:ab:ce:
         c3:15:dc:12:52:f4:5f:ea:62:c2:31:df:93:07:57:a9:07:31:
         3e:9c:18:72:dd:99:e7:cf:5d:20:6b:89:ce:5c:01:ea:2e:3e:
         3d:76:d8:3c:d2:e1:9c:75:b4:73:8e:e9:77:e7:90:ba:27:6a:
         a8:bc:0b:7f:63:1b:9b:a2:3e:0f:5a:86:50:56:32:d4:19:f9:
         cb:f7:b2:29:fc:1b:ba:ec:4c:fc:48:37:3c:db:bb:04:68:d4:
         03:45:a4:51:d4:66:d3:75:33:ec:ad:6e:8b:bb:ac:62:76:d4:
         4f:32:17:03:7e:f4:ce:90:3d:dd:af:e8:0e:b1:83:f6:ba:46:
         8c:ab:dc:50:9c:1d:43:62:66:6e:07:fa:83:a2:4a:b8:85:fd:
         b8:b4:65:83:a2:db:22:28:63:b1:e9:01:82:c2:a8:d3:c8:18:
         3a:49:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org