Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/cbf70db12e81af29af99653767602556d5294d6a.roa
File:                     cbf70db12e81af29af99653767602556d5294d6a.roa (raw, json)
Hash identifier:          0+YptHjMqlsCUgCZKAYtSq4qrQhORV8CtEcz0QDsU2s=
Subject key identifier:   F1:B8:A9:49:2D:D6:43:47:63:DE:FB:AE:4F:9F:58:EA:28:4C:DD:5E
Certificate issuer:       /CN=39605400f52ffbae019f2c7f2d49fab6ba3e9a71
Certificate serial:       07049D
Authority key identifier: 4A:E3:00:06:7C:D2:4E:28:A1:26:7E:B1:AD:C7:40:08:82:22:20:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/cbf70db12e81af29af99653767602556d5294d6a.roa
Signing time:             Fri 11 Aug 2023 20:03:04 +0000
ROA not before:           Thu 10 Aug 2023 20:03:04 +0000
ROA not after:            Mon 11 Aug 2025 20:03:04 +0000
asID:                     3816
IP address blocks:        45.71.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459933 (0x7049d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39605400f52ffbae019f2c7f2d49fab6ba3e9a71
        Validity
            Not Before: Aug 10 20:03:04 2023 GMT
            Not After : Aug 11 20:03:04 2025 GMT
        Subject: CN=cbf70db12e81af29af99653767602556d5294d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:23:34:b2:f7:5c:2e:2f:f3:b4:ff:97:86:
                    95:01:3e:6b:35:dc:83:ec:66:72:7f:7c:1f:79:a4:
                    26:8d:bb:1d:21:a5:13:b6:29:14:8a:02:17:41:22:
                    a7:56:cb:63:3e:ca:1e:7c:03:11:4e:a7:63:e8:10:
                    78:9a:cf:d3:4d:a0:20:a0:ef:a4:78:9d:79:09:d6:
                    dc:3f:c0:f9:2e:48:6d:d5:1a:19:e6:b8:97:c8:93:
                    33:cd:e9:55:f9:8d:9a:97:5a:15:a6:3c:93:2f:4d:
                    ab:9b:99:90:2a:7d:c2:ae:ff:cd:85:ea:42:22:be:
                    8b:b4:9d:22:cd:f5:1f:99:e3:23:e9:32:e4:b6:1c:
                    0b:bd:90:9c:ed:86:36:f7:61:56:c5:49:8c:13:51:
                    13:d0:4a:6b:38:bd:f7:12:41:42:e2:83:28:9e:2b:
                    09:63:a9:d8:2b:bc:dc:d5:9c:7d:e1:82:38:b8:8d:
                    ca:15:30:e1:04:35:6a:75:df:b5:bf:09:c0:00:26:
                    f3:b2:ff:97:b8:7d:a3:e8:83:42:14:1b:4e:0a:ae:
                    81:62:44:fe:8e:5e:9c:8d:c3:80:27:00:16:86:b3:
                    a6:0b:b3:f7:9f:9d:9d:2a:50:30:d5:29:62:c6:21:
                    4b:42:ce:cc:eb:a6:bf:e1:47:69:7b:7a:ae:11:14:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B8:A9:49:2D:D6:43:47:63:DE:FB:AE:4F:9F:58:EA:28:4C:DD:5E
            X509v3 Authority Key Identifier:
                keyid:4A:E3:00:06:7C:D2:4E:28:A1:26:7E:B1:AD:C7:40:08:82:22:20:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/cbf70db12e81af29af99653767602556d5294d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:ac:2e:b1:bc:62:25:27:30:76:12:61:31:aa:e4:31:02:
         8c:d7:5b:be:88:d1:45:bf:16:bc:58:79:13:1c:54:e7:d6:ed:
         25:ed:c6:dc:37:c9:81:0b:8b:de:f2:fe:14:82:26:36:6a:f9:
         23:11:57:d6:82:b1:40:c0:f0:f7:92:17:15:1b:cc:e9:44:4a:
         6e:b4:ba:56:83:6b:9d:2a:73:f2:26:14:87:69:cd:56:db:06:
         63:47:fd:24:21:d8:66:bc:8a:8f:bc:65:64:d6:c0:8a:a1:13:
         28:c7:9e:eb:a1:f6:78:4d:74:e2:65:07:8f:a6:9e:d8:e2:31:
         55:58:47:b7:21:58:37:c0:5e:44:60:97:08:df:eb:51:26:37:
         45:1d:44:c7:91:e2:aa:d7:b2:7c:6f:7a:2a:2e:e5:14:7a:30:
         5c:9a:4b:02:89:44:3d:33:f3:fa:bf:95:60:38:87:d3:cb:96:
         d6:18:46:ce:2a:0e:4e:91:c8:ad:3b:00:c8:87:85:c8:eb:a6:
         f4:e6:f6:1a:ec:b8:af:0d:c4:cf:6e:21:ab:59:79:d8:ae:3c:
         59:7f:ed:2f:38:0c:d4:09:53:29:d5:73:51:ac:7a:99:bc:89:
         48:63:25:20:8a:1a:40:ff:4c:cd:00:32:6a:e2:be:69:b4:f5:
         86:b2:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org