Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b735221fae997264351366726c75baa59f0951b9.roa
File:                     b735221fae997264351366726c75baa59f0951b9.roa (raw, json)
Hash identifier:          8T54OH+CK5t2KnAc79tmWlsyiZOX2KnPtwUn6z2fqMQ=
Subject key identifier:   B0:9D:B9:97:CF:CD:0D:55:CB:A2:78:9E:03:CE:3F:B2:C7:60:44:C8
Certificate issuer:       /CN=b0e5e35584d82ee017f3248e331868334b2ae7b7
Certificate serial:       0BE226
Authority key identifier: BF:A6:74:94:70:54:88:15:BD:46:A3:30:6E:85:E7:8A:83:49:1F:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e5e35584d82ee017f3248e331868334b2ae7b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b735221fae997264351366726c75baa59f0951b9.roa
Signing time:             Wed 24 Mar 2021 14:34:46 +0000
ROA not before:           Wed 24 Mar 2021 14:34:46 +0000
ROA not after:            Tue 24 Mar 2026 14:34:46 +0000
asID:                     266860
IP address blocks:        45.238.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778790 (0xbe226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e5e35584d82ee017f3248e331868334b2ae7b7
        Validity
            Not Before: Mar 24 14:34:46 2021 GMT
            Not After : Mar 24 14:34:46 2026 GMT
        Subject: CN=b735221fae997264351366726c75baa59f0951b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:4d:82:15:9e:f1:07:3b:15:a1:2d:c1:f7:
                    61:58:7e:ca:1b:54:68:72:11:09:f8:19:fa:7e:4b:
                    32:e2:8c:1c:15:9a:30:7a:32:84:bb:08:f9:e1:81:
                    dc:f0:9b:76:cf:cc:0f:7a:21:c8:e3:ad:80:ad:a3:
                    bc:f8:49:ea:ce:a1:ff:aa:46:c6:b4:62:49:43:ae:
                    bb:c4:cd:3f:9d:3b:6a:a0:e4:14:50:cf:fe:39:ad:
                    8b:1f:68:a5:44:a2:ad:cf:05:1d:a1:92:52:bf:75:
                    69:3b:52:52:d2:47:3e:59:41:ee:15:ee:4f:8e:ed:
                    82:d6:f3:52:e4:47:9b:a2:07:c7:f9:e3:db:0b:ba:
                    42:d8:98:08:f6:29:3c:8c:76:50:34:6d:e2:60:cc:
                    83:b5:8a:df:a7:10:4e:6d:e2:78:d0:15:1b:8e:e0:
                    14:8c:fa:46:5b:b8:bb:07:fc:35:d0:d8:b7:63:cd:
                    00:12:bc:0d:7d:c1:f4:c4:f7:45:d6:b5:96:55:53:
                    f4:94:ff:dd:e8:3c:5a:15:5a:a1:2e:51:19:ad:65:
                    5e:8a:b8:8e:a1:90:be:03:42:7b:d0:7b:54:fc:7a:
                    0b:92:91:17:a4:a0:51:3b:a6:46:9d:44:a9:6d:e3:
                    42:52:d1:37:62:7f:6e:bd:df:f2:be:5b:26:5f:35:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:B9:97:CF:CD:0D:55:CB:A2:78:9E:03:CE:3F:B2:C7:60:44:C8
            X509v3 Authority Key Identifier:
                keyid:BF:A6:74:94:70:54:88:15:BD:46:A3:30:6E:85:E7:8A:83:49:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e5e35584d82ee017f3248e331868334b2ae7b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b735221fae997264351366726c75baa59f0951b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b0e5e35584d82ee017f3248e331868334b2ae7b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:f9:e2:9f:18:d2:3f:73:77:a2:13:e0:f2:7f:ed:f2:fb:
         35:fa:be:d1:41:98:68:0b:52:d7:ca:27:71:e3:10:6e:f0:1c:
         64:fb:e9:8e:eb:50:4a:4a:96:e6:ca:35:d8:32:ae:9c:4f:0a:
         db:e7:97:cc:77:30:38:94:c0:70:55:88:a3:0a:e2:fd:98:fe:
         80:1c:86:25:d7:f0:80:1f:63:7f:25:b1:46:9d:f7:30:d8:df:
         65:6d:4d:07:23:70:eb:a3:37:c2:95:a0:82:9e:af:60:3f:5b:
         13:2a:5e:4b:86:68:04:d9:11:31:06:be:fc:ef:e5:e3:fb:20:
         5c:a2:9c:8e:23:77:de:22:61:a4:29:29:6e:87:86:77:98:64:
         10:90:f1:7f:fd:5e:93:27:a9:16:05:a2:81:33:f3:48:69:4b:
         37:a7:f2:c7:23:e4:d1:aa:26:4a:08:08:31:d2:ff:db:16:c6:
         f0:74:c3:4e:02:f7:6a:76:d1:3b:70:f1:bf:db:ac:cd:82:46:
         47:d8:23:f1:38:7a:5e:c7:ac:f7:17:c3:36:60:02:a3:58:31:
         71:4a:1a:49:37:08:99:6f:13:e6:4f:f9:e3:ae:e5:1b:1b:44:
         d5:c0:bc:82:e1:ae:21:92:df:df:28:57:4b:6f:87:ba:79:56:
         36:10:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org