Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/8e45acbd869897d94d65ebd0bbad666801edee98.roa
File:                     8e45acbd869897d94d65ebd0bbad666801edee98.roa (raw, json)
Hash identifier:          LkSq8qL/Qa4pKAAfwPRYbZnUTNGGRGODzXnZ5jDKVME=
Subject key identifier:   0D:C5:D6:9C:B9:E8:85:3A:7D:22:E4:39:12:E8:4F:FE:09:32:F4:04
Certificate issuer:       /CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Certificate serial:       0D8E27
Authority key identifier: E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/8e45acbd869897d94d65ebd0bbad666801edee98.roa
Signing time:             Wed 24 Mar 2021 14:41:28 +0000
ROA not before:           Wed 24 Mar 2021 14:41:28 +0000
ROA not after:            Tue 24 Mar 2026 14:41:28 +0000
asID:                     27947
IP address blocks:        45.71.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888359 (0xd8e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1b531b01cd5446453179b34a5c11c87131d8df
        Validity
            Not Before: Mar 24 14:41:28 2021 GMT
            Not After : Mar 24 14:41:28 2026 GMT
        Subject: CN=8e45acbd869897d94d65ebd0bbad666801edee98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:0a:c2:a7:fb:c2:fe:48:7f:44:58:95:ca:
                    fb:74:67:f2:cb:72:9f:eb:c4:37:d0:be:ff:3f:bb:
                    60:78:80:a6:31:9c:24:8e:ca:63:7b:61:50:5c:af:
                    2d:b6:44:2b:7d:1d:94:d7:08:96:da:c5:80:f2:29:
                    fe:87:f5:1f:d5:8f:81:15:10:dc:f3:84:d2:bc:7b:
                    d6:48:8b:58:96:a9:03:39:3e:7a:3f:c4:1b:56:33:
                    08:99:38:73:f1:31:a8:3c:f5:be:f2:ad:37:21:b7:
                    8b:62:74:5b:be:3e:2f:b2:d2:2f:00:ad:74:aa:d6:
                    18:9d:47:97:38:e4:47:9e:3c:a2:bd:9b:8b:09:89:
                    d4:7b:82:5f:cc:db:35:57:a5:b4:c2:02:6b:b2:4e:
                    4a:82:50:bd:39:7d:9c:21:31:51:39:a2:fa:63:6d:
                    b3:6e:b2:57:c6:2e:27:f3:15:7f:42:be:3b:13:16:
                    01:69:e0:36:ac:10:18:9a:4f:c3:c1:f1:dc:80:60:
                    9a:f3:6b:10:6c:66:f6:bd:df:f8:62:eb:e7:90:01:
                    73:e7:0d:31:d7:37:0b:0e:7a:a7:d8:39:40:8f:3c:
                    25:41:41:76:b3:04:79:b8:f4:de:ee:af:ab:05:1f:
                    13:26:e1:db:25:e9:fd:50:55:58:5d:3f:00:e1:11:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:D6:9C:B9:E8:85:3A:7D:22:E4:39:12:E8:4F:FE:09:32:F4:04
            X509v3 Authority Key Identifier:
                keyid:E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/8e45acbd869897d94d65ebd0bbad666801edee98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:79:e3:98:6d:8f:a5:7c:14:af:39:ff:4f:0e:1f:49:c5:d3:
         45:bd:f5:d3:a3:17:12:0b:11:f8:d6:29:9e:65:9c:34:c5:4f:
         09:1a:66:56:48:46:42:98:68:be:d6:51:e1:de:0c:83:85:d2:
         d7:26:a8:38:b8:ea:8f:51:6a:fc:52:d0:e6:52:6e:6e:4f:9a:
         17:e3:a8:a2:1d:c7:02:8f:2e:4d:f2:ec:fc:2b:27:99:a2:72:
         4e:aa:63:d4:c6:a6:e6:b5:b2:10:f5:52:13:89:96:83:0f:3e:
         b9:6a:6d:e0:25:6f:c0:f5:ef:20:8c:82:37:65:77:07:df:80:
         6d:60:a4:ac:e9:ba:0f:95:a0:25:d4:32:b5:32:0b:00:0c:2d:
         85:9b:a1:a6:bd:38:03:9a:52:31:cf:1f:b5:fe:93:9e:2b:85:
         84:64:23:d4:23:ec:e8:34:ac:aa:36:fb:f9:4a:21:bf:4b:a1:
         f8:d0:34:75:e5:e9:0b:a9:b3:5e:7d:55:40:b1:e3:5f:8c:ac:
         2e:7b:00:55:49:89:53:e6:00:c9:3c:11:94:c4:15:94:c4:5a:
         d0:8e:94:e7:18:b1:54:d0:8f:5e:91:55:cc:ed:a2:0b:3f:e9:
         6a:64:5c:6c:77:f7:34:06:73:f2:b6:30:56:28:cb:33:23:94:
         0a:49:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org