Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/7472069889ecd02c532b6565e413eb075314430c.roa
File:                     7472069889ecd02c532b6565e413eb075314430c.roa (raw, json)
Hash identifier:          cMaKvCwhdR+ss/Wzc3DNuZ3xyJnsjQhYpMVEdMK/vgU=
Subject key identifier:   02:A9:1E:17:D7:F4:3E:54:B2:EE:EF:44:AE:62:C5:1A:2A:BD:22:BD
Certificate issuer:       /CN=8a5b0be2b83d31931f58011a4ff6a710bbccd0aa
Certificate serial:       0B9744
Authority key identifier: 06:37:D9:3C:2F:AB:14:CB:DF:82:2A:F0:DC:67:51:1A:2A:BF:9D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/7472069889ecd02c532b6565e413eb075314430c.roa
Signing time:             Wed 24 Mar 2021 14:46:42 +0000
ROA not before:           Wed 24 Mar 2021 14:46:39 +0000
ROA not after:            Tue 24 Mar 2026 14:46:39 +0000
asID:                     269734
IP address blocks:        45.180.240.0/24 maxlen: 24
                          45.180.241.0/24 maxlen: 24
                          45.180.242.0/24 maxlen: 24
                          45.180.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759620 (0xb9744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5b0be2b83d31931f58011a4ff6a710bbccd0aa
        Validity
            Not Before: Mar 24 14:46:39 2021 GMT
            Not After : Mar 24 14:46:39 2026 GMT
        Subject: CN=7472069889ecd02c532b6565e413eb075314430c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:76:24:48:34:60:3d:79:e5:13:96:b6:43:
                    dc:c4:e3:dd:6f:4a:9a:4a:a2:d0:46:54:50:bf:7f:
                    76:cc:03:69:42:c8:01:38:c6:af:6f:97:99:2d:d0:
                    3a:11:5c:fb:14:3f:ad:7f:ff:05:5c:72:40:56:a9:
                    fb:91:ec:f9:a1:dd:e0:d5:c7:8f:26:50:64:c8:79:
                    2b:cb:3d:b5:5a:6c:0f:ee:be:8e:82:52:b3:b3:12:
                    ec:05:cd:85:d2:f8:0f:e9:cc:da:75:1d:f0:42:e0:
                    c2:fb:b2:f7:61:d7:ba:8d:f6:0c:f6:01:e5:50:2c:
                    e8:42:5a:17:4b:b7:f1:b6:92:4a:cd:c1:a1:cc:ae:
                    97:78:21:1b:73:56:90:c0:5e:26:4f:21:cc:df:e0:
                    c1:9b:e1:7b:b1:ca:9c:ed:67:d9:0b:07:54:87:2d:
                    19:2b:92:cf:14:de:f8:aa:39:d9:6f:80:6e:e4:2c:
                    11:f5:ec:64:b0:40:35:06:50:70:27:7b:84:35:d1:
                    ab:4f:13:29:c1:59:32:f4:b4:61:40:83:ee:dc:33:
                    ad:c7:5c:82:fc:c2:af:70:44:c2:d2:72:d9:e8:3d:
                    04:ca:9a:8b:d0:0f:b6:c3:5f:4e:5b:79:38:8b:6a:
                    54:9c:1b:4d:2b:54:7c:21:e7:d1:6b:57:03:c0:d4:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A9:1E:17:D7:F4:3E:54:B2:EE:EF:44:AE:62:C5:1A:2A:BD:22:BD
            X509v3 Authority Key Identifier:
                keyid:06:37:D9:3C:2F:AB:14:CB:DF:82:2A:F0:DC:67:51:1A:2A:BF:9D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/7472069889ecd02c532b6565e413eb075314430c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:19:cd:49:1e:de:eb:a3:63:7a:2f:47:b2:f2:9c:44:d0:73:
         95:75:fd:ba:7e:93:4e:17:0a:00:e2:5b:66:47:40:23:46:4e:
         a5:e3:fe:f8:64:79:8f:86:32:a4:2e:ab:dc:b8:e4:29:e3:c2:
         55:b7:18:e5:76:4f:9d:6f:35:fd:34:0e:0a:af:6f:2c:4a:ea:
         9e:2e:85:b8:7b:b2:75:0d:54:94:51:1b:f6:7f:e2:ec:5b:60:
         50:64:ec:38:56:d3:86:cf:42:8d:5d:b2:09:3d:a8:2b:7e:06:
         72:52:90:67:d2:4b:da:a9:58:78:a8:55:4d:e2:12:04:cc:cc:
         92:e8:e6:90:33:46:cc:c5:dc:d6:5d:50:67:72:4a:d9:4e:af:
         75:a3:20:6d:1e:d4:d6:13:46:8b:46:52:c3:eb:e9:6d:e0:28:
         13:09:4f:66:71:64:55:80:98:51:62:4f:69:e3:33:c6:09:f3:
         cd:30:00:8e:91:0b:d1:83:eb:59:a8:da:c3:b1:2a:7b:dd:ee:
         47:62:80:fa:7d:82:32:33:7a:07:26:a0:6d:31:07:a7:7c:66:
         0d:4f:29:43:b4:50:c2:74:f8:ce:da:5b:2f:b1:d0:8e:d7:11:
         6a:0b:1c:df:ab:15:91:38:5e:8b:74:b7:8f:3c:2f:e9:6d:78:
         34:6f:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org