Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/e2b5670549cb485c3abceab6e1eb09983294d225.roa
File:                     e2b5670549cb485c3abceab6e1eb09983294d225.roa (raw, json)
Hash identifier:          2tkF9i5+3lFm9RkkYox3o1vnYLweMXoXrXI8Gou6DcM=
Subject key identifier:   9F:A9:4F:C6:9B:2A:FD:B9:C3:07:9D:7F:BB:6C:77:E1:43:C8:00:D3
Certificate issuer:       /CN=18c2a58dc82a5c82d83cd62f612e3aa933bbc288
Certificate serial:       0BDF58
Authority key identifier: 48:73:BE:93:B1:75:3E:B7:3E:6F:AD:3C:02:44:0E:22:77:8C:FB:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18c2a58dc82a5c82d83cd62f612e3aa933bbc288.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/e2b5670549cb485c3abceab6e1eb09983294d225.roa
Signing time:             Wed 24 Mar 2021 14:33:10 +0000
ROA not before:           Wed 24 Mar 2021 14:33:10 +0000
ROA not after:            Tue 24 Mar 2026 14:33:10 +0000
asID:                     266851
IP address blocks:        45.238.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778072 (0xbdf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c2a58dc82a5c82d83cd62f612e3aa933bbc288
        Validity
            Not Before: Mar 24 14:33:10 2021 GMT
            Not After : Mar 24 14:33:10 2026 GMT
        Subject: CN=e2b5670549cb485c3abceab6e1eb09983294d225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:ef:d8:ef:7b:1f:dd:94:22:23:5a:d4:8b:
                    2e:66:78:e8:0f:b0:38:1c:1b:41:a8:93:59:cb:6e:
                    58:1f:bf:4d:1e:3c:ac:14:0d:51:30:50:37:f2:00:
                    32:b4:51:c0:3b:6e:50:be:26:ff:cc:e8:1b:d8:f9:
                    12:5d:86:be:75:62:6a:11:7d:99:ee:55:bc:8e:98:
                    b1:ed:a8:bf:67:ed:02:76:96:33:3f:96:49:ad:df:
                    a0:97:bb:64:8b:33:21:ab:d8:09:38:56:1b:d1:01:
                    8e:10:7e:d3:56:cc:47:10:b7:b5:a7:76:24:7f:d4:
                    59:b6:a3:66:f3:ae:c9:ee:bd:2a:3f:9c:f1:aa:27:
                    20:4a:a7:a2:73:65:33:bd:c3:9c:2d:9a:f8:d0:d4:
                    50:68:49:f9:59:e3:fc:43:12:5c:96:ca:6a:15:c2:
                    15:c2:10:b9:cb:f7:9b:af:a6:6b:dc:f0:26:9e:f7:
                    22:62:6c:8b:b3:5a:6f:b0:35:8b:69:db:12:44:5d:
                    31:5d:29:4a:54:bd:47:90:70:f0:43:3c:4d:37:12:
                    8f:2c:35:84:94:40:ac:8a:1d:11:8a:69:1f:0e:6f:
                    89:b2:f1:b2:5e:9e:c6:5c:79:f2:bd:21:ed:06:a0:
                    3d:0b:c6:e3:10:16:3a:7f:67:57:15:a7:20:c1:3f:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A9:4F:C6:9B:2A:FD:B9:C3:07:9D:7F:BB:6C:77:E1:43:C8:00:D3
            X509v3 Authority Key Identifier:
                keyid:48:73:BE:93:B1:75:3E:B7:3E:6F:AD:3C:02:44:0E:22:77:8C:FB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18c2a58dc82a5c82d83cd62f612e3aa933bbc288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/e2b5670549cb485c3abceab6e1eb09983294d225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df40316f-da3d-4df2-a8d8-bc4ecf9b88d3/18c2a58dc82a5c82d83cd62f612e3aa933bbc288.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:1c:98:1f:1c:aa:d7:0c:d9:8f:e5:9c:01:9d:43:c8:b3:
         ab:9f:99:2a:ab:31:23:3b:68:e7:c1:f8:71:f0:3f:18:1f:1b:
         5f:b5:ca:05:3a:6e:9c:70:10:c6:4e:5a:b1:d5:a8:1e:8c:9e:
         ec:4e:8d:84:e5:7e:11:61:63:96:66:79:5d:e9:df:c4:c4:39:
         af:70:76:ca:c8:b4:27:f6:f5:3b:7f:55:68:6d:cc:e6:0b:89:
         36:92:96:71:01:49:1f:d4:15:67:45:91:d6:9b:ce:b2:99:3a:
         5a:0b:b5:8b:df:98:9e:97:95:a6:1a:11:5f:0e:9b:42:8d:db:
         bb:63:64:38:20:af:81:d1:2a:f1:88:f2:e3:87:dd:48:92:3b:
         37:7d:96:9d:76:b8:f0:84:aa:14:31:28:ee:bf:39:0a:de:19:
         3a:b8:0b:dc:f8:c2:40:e1:f0:97:37:1e:ac:7c:7f:a5:f5:cc:
         61:5b:d7:03:de:85:d5:c4:02:81:c5:40:68:e5:76:8c:a2:79:
         cf:19:5f:23:38:3d:87:0d:24:1c:37:d2:59:9c:b0:6b:4d:90:
         b2:d9:98:fb:0e:e7:8d:52:24:f0:7d:0b:67:ec:70:18:7b:62:
         ea:32:79:9f:42:72:79:74:c4:2a:cb:9e:a4:9a:54:f6:77:6f:
         58:e1:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org