Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/708f643ff4a3b783482ff0089e0eb6cab8907ba6.roa
File:                     708f643ff4a3b783482ff0089e0eb6cab8907ba6.roa (raw, json)
Hash identifier:          aQuaNWrFhzFtCna5rFTOlaisnhe7hQRQnGvlGC51CY8=
Subject key identifier:   DB:7B:E9:34:E9:3A:D8:4D:09:64:84:4C:D1:97:B5:2E:7E:5C:CD:78
Certificate issuer:       /CN=03aaadb7546060b6b539ba158e64a006f10378b7
Certificate serial:       0F689E
Authority key identifier: 46:A7:DA:36:33:5B:6F:4B:1C:4F:AB:B8:B3:29:F0:B9:90:6F:80:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03aaadb7546060b6b539ba158e64a006f10378b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/708f643ff4a3b783482ff0089e0eb6cab8907ba6.roa
Signing time:             Sun 31 Mar 2024 13:06:29 +0000
ROA not before:           Sun 31 Mar 2024 13:06:29 +0000
ROA not after:            Sat 31 Mar 2029 13:06:29 +0000
asID:                     272141
IP address blocks:        45.171.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009822 (0xf689e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03aaadb7546060b6b539ba158e64a006f10378b7
        Validity
            Not Before: Mar 31 13:06:29 2024 GMT
            Not After : Mar 31 13:06:29 2029 GMT
        Subject: CN=708f643ff4a3b783482ff0089e0eb6cab8907ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:be:01:8c:10:a1:88:5d:29:76:b1:99:5a:
                    f8:16:06:48:31:44:c4:36:6f:0c:2e:c2:19:dc:26:
                    5f:a3:01:3c:60:d9:2b:70:43:58:37:8c:bc:d9:56:
                    ed:f6:da:ef:53:81:34:a0:37:63:98:81:0e:da:16:
                    31:4e:cf:d6:ca:6b:95:6e:e1:9e:a7:cf:55:a1:3d:
                    ad:da:2d:cb:43:9a:c1:a0:9b:2c:8c:18:c4:e7:99:
                    d1:7c:31:54:06:3d:fc:96:9e:5b:03:b3:bb:a7:42:
                    59:90:59:22:3d:13:b0:2a:e5:e8:32:9a:84:1f:f5:
                    9c:32:76:8e:4e:7a:6f:f8:5b:e9:fb:42:22:a6:e8:
                    4f:91:13:0f:8c:f4:5d:da:e2:1c:bf:0a:97:35:94:
                    62:d6:17:59:21:af:8b:6f:e4:e4:42:81:8c:3d:d3:
                    37:6a:22:42:17:13:11:1d:9e:71:ef:d8:45:23:22:
                    30:e2:21:7b:39:b7:01:b0:1a:bc:5f:df:da:0d:24:
                    f3:ab:92:c6:be:35:bb:a0:c7:ef:92:b7:2c:49:ca:
                    66:59:07:f5:28:77:bb:1b:d5:e7:e5:ed:b5:7e:ea:
                    79:7a:a8:b0:4f:83:1f:92:80:f6:c7:73:eb:3b:a5:
                    d0:0b:85:21:bd:78:05:76:3f:e2:3b:91:9c:a9:3c:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7B:E9:34:E9:3A:D8:4D:09:64:84:4C:D1:97:B5:2E:7E:5C:CD:78
            X509v3 Authority Key Identifier:
                keyid:46:A7:DA:36:33:5B:6F:4B:1C:4F:AB:B8:B3:29:F0:B9:90:6F:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03aaadb7546060b6b539ba158e64a006f10378b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/708f643ff4a3b783482ff0089e0eb6cab8907ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/03aaadb7546060b6b539ba158e64a006f10378b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:03:86:4f:da:f6:c4:91:66:a9:2d:cf:a7:a7:74:ac:07:
         6f:81:c4:62:ae:c4:c6:66:3d:55:63:4f:bb:51:03:5b:40:ff:
         e2:c2:87:68:b2:e9:9c:64:9a:6f:cc:14:26:9f:4b:36:78:0a:
         cb:eb:e1:e0:1f:2a:11:cf:b8:38:7d:96:84:d0:90:58:aa:4b:
         d5:0d:79:78:63:75:d3:ba:aa:7d:0c:35:64:b8:01:5b:be:3a:
         1a:ea:cb:c4:70:92:fb:91:29:6f:d1:69:5c:08:8b:42:45:c4:
         e1:60:8b:70:e8:3d:2e:36:85:64:22:f8:05:0d:66:22:5a:e6:
         83:d7:fc:c3:b1:6c:26:32:c7:48:7e:3c:14:2b:2c:9e:c3:44:
         65:08:44:d2:69:ca:51:f5:1e:f9:d5:52:f0:9a:90:26:9e:79:
         a0:09:d3:89:12:73:31:89:b3:59:21:70:5b:76:83:9c:3e:94:
         cb:ab:c4:78:fa:fc:2a:13:f0:a6:40:f0:5f:57:ed:1a:90:ff:
         eb:6a:cc:21:45:2e:23:39:d8:3b:2a:0c:2b:d5:4d:36:93:b1:
         7f:93:b3:e5:cf:04:69:78:2b:97:9f:54:cf:18:7f:2b:eb:c3:
         e5:64:6e:eb:87:14:88:74:a2:f3:78:ba:01:60:58:e7:fe:09:
         0b:fa:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org