Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/d9b789df092463610198414a5adfded8e1c59989.roa
File:                     d9b789df092463610198414a5adfded8e1c59989.roa (raw, json)
Hash identifier:          Nh8yH2rnrOGST3GBu+7mQ4ZyT1QadjZHt2XMgOHaRW0=
Subject key identifier:   23:DE:F7:46:C6:E5:0A:84:E4:01:2E:C1:0B:25:56:2A:84:24:96:C5
Certificate issuer:       /CN=c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc
Certificate serial:       0BFB80
Authority key identifier: 1A:80:CF:15:DA:0F:8C:3D:6E:8C:41:BE:19:4D:C6:91:73:AA:0D:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/d9b789df092463610198414a5adfded8e1c59989.roa
Signing time:             Wed 24 Mar 2021 14:32:46 +0000
ROA not before:           Wed 24 Mar 2021 14:32:46 +0000
ROA not after:            Tue 24 Mar 2026 14:32:46 +0000
asID:                     267830
IP address blocks:        45.172.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785280 (0xbfb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc
        Validity
            Not Before: Mar 24 14:32:46 2021 GMT
            Not After : Mar 24 14:32:46 2026 GMT
        Subject: CN=d9b789df092463610198414a5adfded8e1c59989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:af:1e:1f:fa:32:f9:4a:ad:6e:ab:b7:65:
                    fb:de:cc:f3:82:93:21:5b:eb:76:55:a9:85:92:8e:
                    0a:7b:47:7c:01:a3:1a:19:8d:bc:6e:b4:9a:af:27:
                    f8:1c:98:43:6f:fc:9b:45:9c:b3:60:b3:15:7f:15:
                    ff:4e:68:a5:82:d3:09:64:09:75:1f:df:bb:ce:c7:
                    19:bf:51:cf:13:50:69:67:f6:70:aa:08:65:36:08:
                    df:b9:e6:8f:da:9a:b5:2c:cc:1a:65:35:44:6a:bd:
                    b2:2c:b3:42:b8:7d:56:f3:54:f2:d0:1f:9e:92:e0:
                    3e:2f:07:35:2a:90:f1:57:f3:0a:c7:a8:bd:35:2e:
                    6b:b6:0b:94:64:6d:0d:38:13:f3:5e:ab:3c:fd:ad:
                    65:dc:8c:2e:6d:2a:ee:da:10:41:3f:92:77:e0:0d:
                    78:aa:f1:ba:b1:2b:b5:ed:48:6b:b1:dd:8b:08:03:
                    58:8b:82:ab:a2:38:68:46:57:b6:10:a2:85:39:aa:
                    52:99:10:a0:76:23:e5:35:44:21:17:2e:17:64:8a:
                    91:e4:d5:f7:01:d5:df:93:bc:11:6b:21:ae:26:1e:
                    fb:da:f8:b3:f5:f8:f7:fa:e7:8e:78:c6:47:da:3a:
                    30:c6:bb:83:ee:3a:08:67:9d:2a:43:60:11:18:96:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DE:F7:46:C6:E5:0A:84:E4:01:2E:C1:0B:25:56:2A:84:24:96:C5
            X509v3 Authority Key Identifier:
                keyid:1A:80:CF:15:DA:0F:8C:3D:6E:8C:41:BE:19:4D:C6:91:73:AA:0D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/d9b789df092463610198414a5adfded8e1c59989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdc60d5a-4dd2-4618-a091-34c8270a7bc8/c2f22e6f58c6636e9d85a1bfde75a716a46bb9cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:ec:a3:87:1e:ae:9d:1d:a4:18:df:28:bc:24:a9:f3:5e:87:
         a6:b9:b8:4d:52:16:00:f7:70:02:ee:cd:a3:8a:f9:d9:75:23:
         ee:76:d3:46:d8:13:0f:d2:41:0f:71:1d:13:bf:ee:41:63:58:
         06:c2:c7:77:e4:24:97:77:b7:42:ff:d1:8f:e0:6e:28:08:35:
         b1:67:e8:43:ff:58:31:51:b5:5a:07:dc:5c:f8:63:84:4a:9f:
         12:40:eb:d8:db:40:31:d5:15:90:fe:77:6d:8b:c1:42:12:c1:
         5f:23:c6:65:bd:51:7a:88:81:a5:69:29:81:c3:28:fb:47:b2:
         ec:1c:0f:4a:7d:81:f3:52:b3:0c:01:b6:f0:80:da:c3:5a:04:
         d9:77:ff:5a:d1:b3:e3:55:c8:9a:b6:6a:46:05:17:6c:48:5d:
         38:61:56:07:bd:5e:d8:26:a2:a3:bd:6f:9c:8b:2c:e9:e7:1a:
         09:19:ef:50:28:bc:85:ef:8b:d0:c4:28:5d:ed:0d:9f:94:b5:
         24:42:74:c4:32:96:0a:fd:bb:f9:40:e8:06:d3:e6:f1:ee:5d:
         39:ee:2e:e3:b9:af:3b:5e:be:74:a4:af:89:7b:e4:8b:bd:a6:
         a5:27:e2:ce:45:84:af:ef:e7:14:25:31:4d:73:dc:84:03:a4:
         0d:29:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org