Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/05c60783a9938471ff7df436b1ee773e3f5f4ed5.roa
File:                     05c60783a9938471ff7df436b1ee773e3f5f4ed5.roa (raw, json)
Hash identifier:          yLl23PPjF+S1DxsMhnixUdWLbG0F+G238PMZjFBy8mc=
Subject key identifier:   F3:7E:0E:73:39:04:EF:78:77:71:0A:F9:A0:5A:28:B0:35:41:25:8E
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       0D87B2
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/05c60783a9938471ff7df436b1ee773e3f5f4ed5.roa
Signing time:             Wed 24 Mar 2021 14:40:18 +0000
ROA not before:           Wed 24 Mar 2021 14:40:18 +0000
ROA not after:            Tue 24 Mar 2026 14:40:18 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886706 (0xd87b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Mar 24 14:40:18 2021 GMT
            Not After : Mar 24 14:40:18 2026 GMT
        Subject: CN=05c60783a9938471ff7df436b1ee773e3f5f4ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:ae:37:96:21:6c:44:46:9f:67:e4:8e:95:
                    ea:d1:21:29:8d:fc:75:fb:9c:cc:5a:44:6a:4f:7d:
                    d1:57:f8:c4:1e:70:56:95:6a:07:ec:ae:31:60:0d:
                    82:68:9a:40:8a:3e:2d:5f:06:76:87:03:a6:c7:5e:
                    2d:f8:0a:41:97:a9:7b:97:ee:14:30:7c:18:51:5f:
                    20:cd:a3:4c:36:c0:65:45:b4:b8:fe:cc:96:df:18:
                    55:f1:10:14:45:41:b9:44:18:54:41:5e:ef:84:69:
                    b4:1d:5e:cb:20:2c:2b:18:fc:be:a2:6a:cf:c9:18:
                    37:7a:09:7d:89:b9:8f:10:fa:14:c9:57:7b:d0:01:
                    1d:f5:9c:99:0f:09:6a:ae:b4:5b:9c:5b:5e:2b:cf:
                    0d:68:ac:6e:3f:89:9b:2d:e7:7a:80:83:7e:4f:a5:
                    b1:8e:03:6b:3a:ee:83:b7:6c:78:35:af:e4:a3:8d:
                    17:b1:c1:43:ca:39:f3:25:6c:92:98:8e:aa:f9:1a:
                    c8:5d:90:1e:62:46:55:60:24:5d:70:0d:6f:05:65:
                    e8:f6:e9:ec:26:51:bd:ec:d4:59:df:46:0d:1f:0d:
                    3a:0e:4a:38:36:98:4e:f7:4f:8c:6d:6f:86:b1:49:
                    65:51:5c:7a:07:7c:f3:1b:c2:25:8e:e5:05:f9:17:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:0E:73:39:04:EF:78:77:71:0A:F9:A0:5A:28:B0:35:41:25:8E
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/05c60783a9938471ff7df436b1ee773e3f5f4ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:6e:1e:8b:6d:39:d9:19:56:6c:23:02:da:59:d2:ba:77:da:
         84:0d:11:7f:c6:80:b1:b8:98:7f:0f:6b:0e:9f:68:75:2f:46:
         3e:c4:35:20:3a:f0:1e:ee:df:d7:9a:75:62:bd:22:7c:f8:38:
         1d:dc:eb:e2:cc:b5:8d:7e:f8:4c:a6:8a:d9:e1:6d:95:5c:89:
         84:6d:eb:b2:20:f0:28:ad:16:56:4b:dd:f0:2c:62:13:e4:57:
         c4:b3:8d:10:bd:c3:87:80:fb:b6:43:5f:3f:3e:f1:53:26:1e:
         bd:37:a1:64:b2:a9:e3:6f:94:12:9d:b4:40:85:f2:aa:4f:12:
         ea:61:61:a2:ee:95:f3:8d:20:f5:e0:d3:4e:67:06:b1:28:14:
         c5:76:fa:3d:07:98:d2:ff:af:b3:87:6b:b8:81:72:08:f8:b9:
         48:60:7c:7d:0f:2d:4b:f4:94:49:f8:40:dd:d2:f5:0c:ba:66:
         4e:32:26:40:e6:ff:c1:e9:37:50:c5:d2:95:e3:62:1d:be:9d:
         20:d0:d8:44:81:20:b6:93:a0:ea:0e:a6:ac:eb:cd:db:f7:53:
         1b:fd:17:d2:f1:84:ea:99:b8:ab:6e:e0:2f:6d:5a:79:49:aa:
         14:f8:d9:25:6a:6f:8c:2b:50:f0:d2:2e:60:fa:e7:0f:45:af:
         8e:5f:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org