Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4d2941cbb559f6c92b37fd2ca5b767ad455bfcbe.roa
File:                     4d2941cbb559f6c92b37fd2ca5b767ad455bfcbe.roa (raw, json)
Hash identifier:          0RhL0vX57287M7fhkulVPhfPJPmI7gdnnkCvk2VAc30=
Subject key identifier:   BD:95:69:0A:B3:A6:8D:06:C9:50:97:EE:CE:9A:3C:57:F8:CB:9D:25
Certificate issuer:       /CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
Certificate serial:       0E17CF
Authority key identifier: D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4d2941cbb559f6c92b37fd2ca5b767ad455bfcbe.roa
Signing time:             Wed 24 Mar 2021 14:31:41 +0000
ROA not before:           Wed 24 Mar 2021 14:31:41 +0000
ROA not after:            Tue 24 Mar 2026 14:31:41 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923599 (0xe17cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Validity
            Not Before: Mar 24 14:31:41 2021 GMT
            Not After : Mar 24 14:31:41 2026 GMT
        Subject: CN=4d2941cbb559f6c92b37fd2ca5b767ad455bfcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:f3:7f:aa:ce:4b:f5:50:3a:52:fe:54:e8:
                    85:26:8a:da:8d:43:bc:a0:2f:1e:e7:2e:29:4e:9a:
                    94:cf:b8:fc:d1:5b:73:06:52:ad:a2:94:5a:48:15:
                    fd:91:6c:de:e4:e2:e0:a3:74:15:0b:6e:b7:a1:6a:
                    bc:1f:85:cc:e4:48:84:ac:27:8c:00:bd:c0:44:f6:
                    ab:b1:36:d8:c9:45:d5:e2:8e:d3:21:6c:60:8a:cd:
                    8d:e6:3b:9c:6e:24:ad:06:a1:ae:a6:57:89:05:32:
                    d8:e1:44:b9:a4:82:ee:ab:9c:6a:7c:18:15:14:74:
                    9b:bd:57:3b:3b:b4:53:3d:11:3d:49:0b:26:c5:5c:
                    1d:7b:ea:18:5a:b1:61:58:7d:c4:35:2f:20:fb:74:
                    8c:a8:8c:cf:8b:e5:07:dc:98:b2:1b:89:a2:86:9b:
                    92:92:76:4d:25:9d:bc:c4:a0:43:01:8a:05:1e:ab:
                    f2:20:6f:98:63:9d:e3:3a:ea:a5:22:02:b2:49:95:
                    48:1f:7d:11:44:c1:6a:10:57:23:ad:2c:93:d6:23:
                    c2:ba:52:12:f4:2c:4a:98:cf:fa:e5:92:9b:c8:8f:
                    df:e9:11:c7:41:35:8b:c5:32:b6:19:0a:fa:0c:80:
                    a7:9b:f5:2c:6f:21:c7:d7:0a:5e:19:7f:c5:fa:49:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:95:69:0A:B3:A6:8D:06:C9:50:97:EE:CE:9A:3C:57:F8:CB:9D:25
            X509v3 Authority Key Identifier:
                keyid:D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4d2941cbb559f6c92b37fd2ca5b767ad455bfcbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:55:90:74:74:30:08:a7:53:22:c9:f6:d8:07:31:6d:e2:
         7b:e2:6c:36:16:d4:14:e2:ad:c7:0e:8f:20:6d:46:79:29:97:
         ee:87:cd:73:dc:a5:2f:06:78:11:8e:5b:c3:57:30:bd:33:fa:
         d0:ba:b7:c8:91:ba:30:00:0a:8b:27:6b:82:09:1b:ac:fe:99:
         e5:2b:46:30:8c:33:fc:8f:8d:d3:50:37:12:76:83:99:a2:0e:
         48:ab:5a:63:b8:93:27:9c:b6:b8:b4:0e:5e:94:23:15:42:76:
         f8:a8:e6:77:98:17:65:0d:e1:5b:fb:b5:c7:de:95:a3:08:71:
         b0:e6:c5:19:b2:0a:a1:c5:6e:f5:70:1c:a4:74:4d:03:25:3b:
         7c:44:3e:0f:17:01:47:85:c3:19:f0:71:89:ad:ac:ff:9a:b7:
         04:b8:ae:76:37:18:c1:5b:6b:17:d8:92:c7:69:a9:40:cb:5d:
         a1:00:ac:d8:d3:d9:5e:0c:5e:51:ed:7b:ad:91:1d:c8:0e:11:
         46:cf:b2:e1:23:22:97:f6:a2:3c:ea:07:79:b8:58:11:e1:e6:
         21:d4:ed:e5:a3:51:ec:ad:99:12:9c:10:2d:08:7b:e4:a6:1b:
         87:4a:36:f0:28:19:c8:fb:dd:ec:ac:1e:af:d9:09:d8:16:3a:
         88:f4:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org