Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/b575710b916feadec7829a493f4acc5b2bc07e35.roa
File:                     b575710b916feadec7829a493f4acc5b2bc07e35.roa (raw, json)
Hash identifier:          4IcYH4vusFe8tVHV1cqIVDe2QG3p9ukwH71CiwoSLpI=
Subject key identifier:   19:B5:E9:D6:2E:DD:E7:98:BA:24:53:F2:C0:6A:2D:90:24:FD:41:28
Certificate issuer:       /CN=55749e5629796ab0615462147e57520811c115c5
Certificate serial:       0D31CA
Authority key identifier: 6B:51:EB:5C:8E:DA:BC:F6:9D:E6:E2:C8:10:8E:07:B1:47:4A:89:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55749e5629796ab0615462147e57520811c115c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/b575710b916feadec7829a493f4acc5b2bc07e35.roa
Signing time:             Wed 24 Mar 2021 14:36:35 +0000
ROA not before:           Wed 24 Mar 2021 14:36:35 +0000
ROA not after:            Tue 24 Mar 2026 14:36:35 +0000
asID:                     27817
IP address blocks:        45.71.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864714 (0xd31ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55749e5629796ab0615462147e57520811c115c5
        Validity
            Not Before: Mar 24 14:36:35 2021 GMT
            Not After : Mar 24 14:36:35 2026 GMT
        Subject: CN=b575710b916feadec7829a493f4acc5b2bc07e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:96:6d:cb:ea:18:3e:f5:c3:a9:92:cc:ce:
                    10:cb:a3:b2:be:e1:9a:89:3d:3d:f8:11:4f:71:aa:
                    65:7d:f4:63:1c:80:74:ce:f0:7d:d9:57:9f:5c:3e:
                    56:75:e6:c3:78:d4:91:3e:e0:9c:87:47:e3:b3:11:
                    d7:8f:08:f2:00:b4:c5:90:59:21:3e:34:53:57:ad:
                    e7:69:b5:3c:44:c6:7e:7c:83:4d:f9:49:07:46:08:
                    56:ac:1a:d2:5e:d8:fb:4b:d8:d7:d0:ed:cc:55:21:
                    68:18:21:05:2f:9d:c6:3e:d4:9d:55:c4:ae:b2:48:
                    6c:a1:8c:6d:b8:fb:a2:6a:49:b9:d1:5e:b4:8a:1e:
                    56:f3:6a:17:0a:c3:b9:eb:47:5c:2e:8f:d7:83:50:
                    f0:88:39:c7:9b:37:e2:bd:90:1c:b7:72:d6:96:59:
                    6c:20:10:14:a8:f9:ee:ee:cf:68:ee:0d:0d:5b:f0:
                    fb:4c:f1:d6:65:e7:54:2c:eb:9f:18:65:2b:ac:f2:
                    2d:06:65:3f:f2:98:b4:82:f4:de:f4:c5:01:18:9f:
                    81:19:de:ee:86:43:c6:be:42:c3:c5:96:d2:38:4d:
                    72:e9:a6:a3:18:5d:74:09:78:8b:bd:36:d0:c4:32:
                    a8:aa:86:a8:e4:b0:f3:6c:ad:b6:0d:72:f9:e0:94:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B5:E9:D6:2E:DD:E7:98:BA:24:53:F2:C0:6A:2D:90:24:FD:41:28
            X509v3 Authority Key Identifier:
                keyid:6B:51:EB:5C:8E:DA:BC:F6:9D:E6:E2:C8:10:8E:07:B1:47:4A:89:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55749e5629796ab0615462147e57520811c115c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/b575710b916feadec7829a493f4acc5b2bc07e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/55749e5629796ab0615462147e57520811c115c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:68:49:a9:96:3b:00:eb:09:13:c1:9b:6b:6b:47:f0:fd:54:
         17:08:96:9a:cb:ef:bc:0d:8b:79:e8:d6:08:34:eb:3e:10:d2:
         fe:cb:3b:fc:5a:58:96:1f:e4:a6:a3:b0:b1:64:87:99:8f:17:
         f9:2b:69:9a:6c:ea:22:6f:53:5c:e0:da:2d:0d:21:4e:4b:07:
         db:47:df:b4:a5:19:7c:fd:f2:98:c7:41:48:0b:76:b9:37:29:
         47:fc:02:1f:4d:c5:5d:43:42:c0:c3:86:d3:bb:c5:81:cd:6c:
         78:15:ad:1a:c5:93:ae:43:90:78:95:e5:ed:b5:30:9d:f0:b1:
         60:b3:86:b7:32:32:fe:f1:a0:43:6a:cd:95:7e:20:66:b5:4a:
         3e:17:d7:33:e3:f0:43:d2:33:9d:2c:eb:56:40:0a:8c:07:d9:
         18:df:0d:5f:93:0d:e4:e8:46:db:4e:d3:50:fb:45:9e:6c:f1:
         77:67:3c:d0:a4:5e:ec:cb:5f:af:8e:e9:e9:4e:13:51:91:fe:
         68:00:1e:0f:63:4d:2d:99:5c:4a:05:11:70:2d:28:3e:d8:48:
         1f:d3:2c:fe:7a:c1:ae:57:2b:bd:e1:6a:79:73:70:ce:04:20:
         f9:9f:ff:13:ce:f7:eb:ed:de:af:20:c6:93:1b:15:47:63:f0:
         bd:8c:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org