Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5af43a-c33e-42e2-b503-13e6b4d0841e/4b82a6219bd126793f7c36a43fff29ad1ea0ed47.roa
File:                     4b82a6219bd126793f7c36a43fff29ad1ea0ed47.roa (raw, json)
Hash identifier:          tGaM0Oky5KeJFeRBsfXhgQWMBbwbUCyHnjvpdsJXPHU=
Subject key identifier:   21:78:AD:40:C1:02:28:D4:56:0F:CF:7B:3F:9E:5D:D4:87:DD:82:93
Certificate issuer:       /CN=8a5a664ed6a54562320247a046ca30a16f7e9cee
Certificate serial:       0C3011
Authority key identifier: 90:2C:2A:C4:E9:1C:45:C6:1E:78:17:10:04:20:57:3A:9D:2F:D9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5a664ed6a54562320247a046ca30a16f7e9cee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5af43a-c33e-42e2-b503-13e6b4d0841e/4b82a6219bd126793f7c36a43fff29ad1ea0ed47.roa
Signing time:             Wed 24 Mar 2021 14:41:01 +0000
ROA not before:           Wed 24 Mar 2021 14:41:01 +0000
ROA not after:            Tue 24 Mar 2026 14:41:01 +0000
asID:                     267780
IP address blocks:        45.171.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798737 (0xc3011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a664ed6a54562320247a046ca30a16f7e9cee
        Validity
            Not Before: Mar 24 14:41:01 2021 GMT
            Not After : Mar 24 14:41:01 2026 GMT
        Subject: CN=4b82a6219bd126793f7c36a43fff29ad1ea0ed47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:41:32:20:3d:d2:16:33:61:bc:67:bc:57:92:
                    f4:37:79:89:0a:e1:a6:c3:34:26:d6:48:9b:fd:63:
                    46:1f:15:b5:5f:74:4b:5a:2b:28:a3:40:75:8e:08:
                    8c:62:5c:69:bc:87:7a:0b:e5:31:54:17:47:11:00:
                    f7:6d:c3:24:17:9c:80:e2:17:af:74:c8:16:e6:a0:
                    9e:26:7a:e9:3b:2b:c9:1f:c0:60:b6:49:d8:51:2a:
                    a2:38:2f:d6:eb:46:c5:1a:d1:8e:10:a2:c5:b6:cc:
                    7a:d8:3e:28:d7:5f:98:49:d2:1f:ec:78:bf:73:ef:
                    27:e9:34:dd:46:eb:f6:fb:50:8e:a7:9d:80:79:80:
                    dc:13:88:70:81:53:09:c6:71:55:7b:ed:15:9b:62:
                    64:7e:38:a0:85:ca:a9:ca:92:7b:e0:13:79:5b:34:
                    ac:0a:c0:09:d1:2a:fb:c6:e4:31:d2:2d:d6:8d:93:
                    95:6e:53:9b:9b:0e:89:b3:0a:e4:b6:d0:28:b7:45:
                    7f:4c:7f:38:73:11:97:27:8c:49:c1:20:b5:39:04:
                    fa:e2:b9:ac:57:f3:cf:2c:84:e2:c6:34:17:bf:35:
                    15:0e:07:4d:1b:e5:89:c6:23:b0:b9:2e:56:ad:35:
                    fd:12:2f:af:d3:81:8a:b9:0f:92:81:5e:44:a2:c0:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:78:AD:40:C1:02:28:D4:56:0F:CF:7B:3F:9E:5D:D4:87:DD:82:93
            X509v3 Authority Key Identifier:
                keyid:90:2C:2A:C4:E9:1C:45:C6:1E:78:17:10:04:20:57:3A:9D:2F:D9:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5a664ed6a54562320247a046ca30a16f7e9cee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5af43a-c33e-42e2-b503-13e6b4d0841e/4b82a6219bd126793f7c36a43fff29ad1ea0ed47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5af43a-c33e-42e2-b503-13e6b4d0841e/8a5a664ed6a54562320247a046ca30a16f7e9cee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:87:93:42:69:9e:1d:17:8f:0c:cc:29:96:36:48:1c:b0:9b:
         5b:ed:a6:a6:0d:d0:e3:87:60:e9:87:b0:e5:fc:0b:88:14:72:
         c7:01:62:03:47:49:85:3b:32:68:3f:f3:e1:29:55:4a:57:0a:
         a8:5a:7d:c6:fa:46:51:de:c6:78:fa:6e:da:4e:95:bf:02:ed:
         65:38:e9:a2:35:e0:bd:73:a6:5e:b6:3b:3e:b6:a8:92:9a:95:
         c3:dc:ad:77:8a:1f:17:b7:7e:a0:6f:3c:b1:b0:fc:86:b0:7d:
         06:1d:41:14:30:1d:0d:ad:6d:81:33:c1:ea:34:aa:e2:9f:f8:
         af:2e:5d:ac:2f:bb:46:f6:45:8a:4e:4c:19:3b:fa:e7:ef:fa:
         43:c9:35:3f:5e:93:1f:af:d4:4d:41:bd:b9:50:38:ec:3f:d5:
         e7:8f:95:43:c0:81:ad:c4:96:e0:57:85:c4:32:49:17:59:6c:
         c5:3f:86:71:ea:15:81:78:2a:b8:f7:b1:df:c5:b2:76:11:fb:
         a4:62:9e:cd:3a:21:a8:21:ca:35:6d:5c:a3:80:42:03:9e:fd:
         d6:df:d1:24:55:01:d0:4c:9f:d6:b3:0b:65:b9:88:c8:01:93:
         2c:a9:98:97:b3:14:1a:05:cd:79:df:ca:95:ad:fd:29:28:26:
         0a:7a:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:41 2023 by rpki-client on console-fra.rpki-client.org