Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/f763fa20cb91d42ff0a3b80e08531956b6ca8a58.roa
File:                     f763fa20cb91d42ff0a3b80e08531956b6ca8a58.roa (raw, json)
Hash identifier:          YKVFQNMiz0E/tIRkrm6FgJUlIJN0EUvk4qmMeWLKoAg=
Subject key identifier:   05:ED:51:4D:BA:08:24:43:0F:21:55:D2:EC:66:8A:E3:CD:9C:83:7D
Certificate issuer:       /CN=10d9b55586f192607b1feb6a096fc7f49882367d
Certificate serial:       0B6BA2
Authority key identifier: 54:84:9F:80:D9:90:D3:08:42:6D:3C:02:E4:6D:91:76:D9:A9:F7:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10d9b55586f192607b1feb6a096fc7f49882367d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/f763fa20cb91d42ff0a3b80e08531956b6ca8a58.roa
Signing time:             Wed 24 Mar 2021 14:33:52 +0000
ROA not before:           Wed 24 Mar 2021 14:33:52 +0000
ROA not after:            Tue 24 Mar 2026 14:33:52 +0000
asID:                     61503
IP address blocks:        45.181.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748450 (0xb6ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d9b55586f192607b1feb6a096fc7f49882367d
        Validity
            Not Before: Mar 24 14:33:52 2021 GMT
            Not After : Mar 24 14:33:52 2026 GMT
        Subject: CN=f763fa20cb91d42ff0a3b80e08531956b6ca8a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:b5:ae:92:10:d1:36:96:4f:a1:f5:12:da:
                    35:26:9f:da:af:85:62:b6:7c:a1:87:d0:e7:11:3d:
                    72:77:7f:68:31:f6:d7:a4:3a:95:8d:df:ce:41:f8:
                    52:89:bd:d6:6b:e1:de:96:3b:04:ed:10:47:ef:6e:
                    9b:28:fd:29:13:c5:1f:4f:0c:e0:40:62:b2:85:bd:
                    e6:fb:63:54:39:8d:3e:0e:e2:e3:df:ce:2d:86:69:
                    3e:9d:e0:81:37:aa:94:b1:bd:e1:1a:d5:cf:ab:aa:
                    4f:ac:e7:34:96:ea:00:32:3b:06:94:33:01:44:c7:
                    30:64:04:0c:1b:71:d3:81:2c:bd:b8:d5:ed:55:7c:
                    fb:65:82:c2:09:4d:6b:eb:30:d0:54:ef:70:a9:7d:
                    43:93:6c:21:4f:c4:ce:1a:0d:ce:b0:8a:e8:ae:3c:
                    b3:32:55:28:ee:cd:9c:21:f1:3f:86:4d:fa:4f:f0:
                    dc:d8:f8:26:6a:36:f9:1d:55:9e:6f:48:90:f9:40:
                    ec:e6:c5:19:cc:3c:e6:72:12:b6:dc:34:2c:af:19:
                    ff:4c:35:a4:ed:24:71:f9:b2:dc:67:8b:cb:e9:4b:
                    85:41:bd:f6:57:e0:5d:9c:4a:d4:b4:b5:83:fa:8d:
                    cd:8f:a4:9d:ef:0a:94:02:47:4a:8b:47:49:d1:ed:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:51:4D:BA:08:24:43:0F:21:55:D2:EC:66:8A:E3:CD:9C:83:7D
            X509v3 Authority Key Identifier:
                keyid:54:84:9F:80:D9:90:D3:08:42:6D:3C:02:E4:6D:91:76:D9:A9:F7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10d9b55586f192607b1feb6a096fc7f49882367d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/f763fa20cb91d42ff0a3b80e08531956b6ca8a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/10d9b55586f192607b1feb6a096fc7f49882367d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:36:db:57:a3:b4:11:35:52:13:fc:d8:8b:a0:14:07:d2:94:
         f1:80:7c:2a:55:bf:c2:94:50:15:73:f6:95:0b:05:f8:9e:bd:
         be:c7:2a:41:87:44:4b:cc:1b:89:e4:fc:50:e5:3d:84:2f:1c:
         8f:fd:50:61:a9:d2:65:7c:7e:e2:16:9b:9b:40:db:3b:98:aa:
         bf:89:ae:97:a1:a1:f7:1c:64:68:93:97:69:eb:6e:6c:62:fd:
         a3:a4:29:8b:5a:e3:ed:7c:ab:a9:4b:6e:69:d1:a2:0b:50:62:
         60:6b:80:6e:f1:15:70:b4:1a:01:f8:ef:e1:8d:86:82:04:ee:
         3f:52:e7:14:1a:b7:08:fe:70:c4:a9:8d:15:ef:df:c4:a9:ed:
         da:e2:c8:02:a9:1e:f7:1f:cc:cd:f9:0f:19:4b:98:4a:51:24:
         27:98:17:32:b8:13:c1:95:f5:28:78:e8:4e:27:cc:29:05:cc:
         5c:e3:78:4f:ff:00:2b:c5:5d:d6:32:eb:c9:45:92:34:b4:ba:
         5f:c3:0a:52:f6:56:ce:17:0c:be:5a:96:d3:60:29:50:5c:6c:
         3c:7d:9c:c2:8a:fb:5b:74:71:2c:ac:41:5a:0e:37:33:2d:22:
         31:f1:dd:4d:3c:ba:49:d9:c5:6c:91:b4:8b:85:9d:0f:28:d0:
         8a:81:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org