Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/d0b87a1e4eb5a273213a3966e072af3986c5bda5.roa
File:                     d0b87a1e4eb5a273213a3966e072af3986c5bda5.roa (raw, json)
Hash identifier:          skGLkTvFmP4r7VyYEXjZPVsa07sG9QW909fUBo3rL3A=
Subject key identifier:   BB:6C:49:75:C8:BB:1A:BB:4A:0C:E9:25:6D:B3:9E:DA:71:15:45:CE
Certificate issuer:       /CN=52c2dea9e81fdad8d5d4689c106fde720d220299
Certificate serial:       0B27C7
Authority key identifier: F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/d0b87a1e4eb5a273213a3966e072af3986c5bda5.roa
Signing time:             Wed 24 Mar 2021 14:38:13 +0000
ROA not before:           Wed 24 Mar 2021 14:38:13 +0000
ROA not after:            Tue 24 Mar 2026 14:38:13 +0000
asID:                     265695
IP address blocks:        45.5.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731079 (0xb27c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c2dea9e81fdad8d5d4689c106fde720d220299
        Validity
            Not Before: Mar 24 14:38:13 2021 GMT
            Not After : Mar 24 14:38:13 2026 GMT
        Subject: CN=d0b87a1e4eb5a273213a3966e072af3986c5bda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:19:2a:1c:28:01:0e:b5:ae:a1:6c:67:8c:
                    b8:5a:2e:de:74:ed:13:3a:ab:0c:db:60:21:dc:c7:
                    58:f6:d5:21:91:8d:4f:30:c1:18:2d:fb:91:bc:08:
                    7c:b7:dd:c0:fb:60:be:69:45:24:2e:6f:49:e0:19:
                    c6:09:16:e9:91:36:49:d4:f6:71:27:5c:cc:6f:16:
                    38:77:e7:09:69:91:70:e0:ea:67:f2:4a:a6:18:27:
                    c7:d3:d0:43:62:3c:38:9d:d9:60:93:5b:0a:fb:ca:
                    67:23:9c:eb:c9:c0:ed:8e:16:0a:88:e3:78:8c:7d:
                    e7:5e:21:73:23:31:3a:4e:01:7d:3f:5f:92:8f:d6:
                    76:c1:fb:05:6b:15:65:2c:7c:14:e0:0f:90:32:7f:
                    72:26:f9:fb:6f:c7:87:fa:32:49:da:f9:07:5e:59:
                    fd:0e:ea:a8:d9:ad:25:8d:ce:3c:18:74:9a:24:d2:
                    ae:1b:52:2c:52:38:02:a1:22:31:ef:5d:ac:33:e7:
                    0a:88:d1:4e:85:d4:b5:6e:cd:3d:66:0f:14:d9:7a:
                    74:1e:3b:7d:9e:d3:61:84:dc:63:75:16:05:ec:d7:
                    1a:a2:39:fd:c0:0b:77:fe:89:9d:8d:a3:b1:20:32:
                    32:b2:15:26:71:48:fb:f7:86:38:4a:30:2f:b4:52:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:49:75:C8:BB:1A:BB:4A:0C:E9:25:6D:B3:9E:DA:71:15:45:CE
            X509v3 Authority Key Identifier:
                keyid:F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/d0b87a1e4eb5a273213a3966e072af3986c5bda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:1b:bd:3a:c5:22:d3:f4:e9:07:9f:e4:01:a7:ad:05:b5:9c:
         42:1e:6f:7b:cd:aa:7a:c6:5d:df:6d:c3:2e:52:22:15:4b:62:
         f3:04:0d:6f:b0:45:c8:33:04:01:82:17:7a:3b:27:9f:af:6e:
         f6:c4:3f:17:83:52:f4:68:6d:22:77:f3:1b:e8:23:23:7e:db:
         c3:c4:e5:90:87:41:bd:75:09:a1:bc:65:26:80:94:f4:25:70:
         c5:99:f9:0e:9f:3c:da:be:7f:34:8a:9b:d6:2d:47:7d:bf:6d:
         92:13:79:05:26:c2:80:12:ee:59:b6:34:35:fa:7d:aa:76:14:
         6c:f4:ec:2e:e1:ff:e3:7c:dc:f4:69:f8:8a:66:aa:ae:5e:82:
         59:4a:d0:e3:a5:84:47:79:c8:5f:4c:14:0f:f5:94:10:4a:01:
         8d:c0:8a:9e:a7:0e:18:2f:a7:4f:ab:3e:51:f9:8c:8b:e3:07:
         3a:ef:9d:69:ef:78:61:90:a7:2c:be:74:fe:6b:84:b8:7f:c3:
         5a:e9:56:8c:d0:8b:88:b8:94:b2:dd:59:5f:de:60:28:b9:13:
         c1:da:a9:ac:12:96:c0:67:e2:58:30:32:fe:e5:80:33:c9:12:
         84:d0:9e:8f:92:62:6b:ba:59:e5:db:ec:3d:7b:dc:13:8e:64:
         4c:fc:3e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org