Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/dc97f813a937ca5ddb1c240536b87183d30f8906.roa
File:                     dc97f813a937ca5ddb1c240536b87183d30f8906.roa (raw, json)
Hash identifier:          NvjGbMPPou9OkLUtFHMoXm/CMJnYBaHU9PZkt22nGKU=
Subject key identifier:   6B:2D:06:D2:40:08:F9:02:6C:1F:DC:BC:EB:01:C2:52:9D:5F:EC:F0
Certificate issuer:       /CN=10d9b55586f192607b1feb6a096fc7f49882367d
Certificate serial:       0B6DEC
Authority key identifier: 54:84:9F:80:D9:90:D3:08:42:6D:3C:02:E4:6D:91:76:D9:A9:F7:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10d9b55586f192607b1feb6a096fc7f49882367d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/dc97f813a937ca5ddb1c240536b87183d30f8906.roa
Signing time:             Wed 24 Mar 2021 14:33:52 +0000
ROA not before:           Wed 24 Mar 2021 14:33:52 +0000
ROA not after:            Tue 24 Mar 2026 14:33:52 +0000
asID:                     269733
IP address blocks:        45.181.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749036 (0xb6dec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d9b55586f192607b1feb6a096fc7f49882367d
        Validity
            Not Before: Mar 24 14:33:52 2021 GMT
            Not After : Mar 24 14:33:52 2026 GMT
        Subject: CN=dc97f813a937ca5ddb1c240536b87183d30f8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:55:ab:a0:ad:78:69:7a:36:25:e6:b4:aa:
                    cd:23:8e:84:a9:5f:c0:96:b0:7d:5d:c3:ca:87:47:
                    61:b5:f6:d8:f0:69:cd:33:ba:6d:bd:78:c5:d8:32:
                    46:c8:b4:71:f5:d9:9c:8e:42:ca:95:f6:d6:cb:8c:
                    6c:76:4f:ec:1c:7d:92:68:29:92:00:c5:08:7a:52:
                    52:23:ae:cf:6d:68:26:bf:23:4e:1f:65:7b:39:45:
                    92:cf:30:4e:a6:b5:96:4d:81:07:2f:ae:c0:f9:82:
                    1f:cf:30:91:8e:dc:bd:c2:f4:6b:19:2f:55:7f:54:
                    99:be:93:11:b3:11:ee:1d:7c:c6:75:85:7b:1c:23:
                    88:03:53:3b:b6:30:24:bc:0e:d9:32:bd:40:d3:01:
                    d0:9b:56:37:4f:6b:8e:cc:7c:25:2a:c1:27:7f:39:
                    30:b7:e8:45:9a:7a:05:93:62:b1:3f:24:be:a4:e5:
                    5f:93:14:fd:5c:9d:53:92:00:60:57:2f:2e:bf:18:
                    ba:d5:42:08:57:96:e3:e9:a2:8a:88:f7:64:4a:b0:
                    80:f1:22:5b:a9:5f:6f:20:47:0a:d6:81:33:ce:65:
                    63:cd:c0:0a:00:8c:27:d4:35:ee:71:44:f3:d2:a5:
                    98:8f:9b:19:fc:ba:23:71:9b:c4:fe:ba:de:83:a1:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2D:06:D2:40:08:F9:02:6C:1F:DC:BC:EB:01:C2:52:9D:5F:EC:F0
            X509v3 Authority Key Identifier:
                keyid:54:84:9F:80:D9:90:D3:08:42:6D:3C:02:E4:6D:91:76:D9:A9:F7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10d9b55586f192607b1feb6a096fc7f49882367d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/dc97f813a937ca5ddb1c240536b87183d30f8906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/10d9b55586f192607b1feb6a096fc7f49882367d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:71:c5:1a:75:4c:af:6e:30:c2:ca:92:b2:03:39:90:15:ce:
         6c:d9:3e:22:ad:6a:2e:91:9b:f6:a4:af:48:94:44:2a:78:a4:
         be:d5:d9:a0:29:24:47:6e:bb:d7:73:ee:5e:b4:49:18:25:31:
         9d:10:5a:9a:b1:f1:57:5d:68:79:7c:69:99:01:31:11:c0:59:
         a2:11:f4:a9:90:db:ba:ca:a9:1d:e1:cf:bf:0f:5a:cd:01:10:
         07:28:46:26:91:b5:ac:42:06:44:e6:f1:bc:a3:15:58:ec:0c:
         3a:d2:1c:f9:59:7a:98:f8:a1:00:c0:6e:b6:95:e6:ee:28:f4:
         75:8c:59:6d:7c:e6:c8:24:dd:a4:7b:05:c0:37:b6:e0:25:e5:
         44:06:30:76:b2:b8:00:ea:df:c9:18:53:6a:ea:74:a9:6d:fd:
         f2:21:87:3e:2e:99:24:25:2a:a1:4c:3c:98:66:e2:76:33:07:
         06:40:32:26:48:37:a8:4b:1e:45:f3:90:49:57:3d:3d:de:8f:
         cb:46:07:01:ff:14:52:13:14:a7:40:b2:85:bc:5e:e8:e5:3b:
         4a:a2:6a:f1:21:d6:3f:12:43:94:5c:99:6f:39:72:15:81:ff:
         f4:e0:87:a7:24:61:13:af:8c:4c:52:45:57:06:d0:54:14:b7:
         a3:95:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org