Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/d85963b62503059ddff7f8f7405b935ce8618d30.roa
File:                     d85963b62503059ddff7f8f7405b935ce8618d30.roa (raw, json)
Hash identifier:          dgiMTgmC3qlwecp+feh9soo/blmFMx9BblZktpO7nGU=
Subject key identifier:   F5:53:B0:9B:CB:8F:F3:8F:57:26:D5:10:E3:A7:B5:9E:F6:29:BC:E2
Certificate issuer:       /CN=d5ab87a22421eb7bd3e47c1d53fb12aced20c8d6
Certificate serial:       06F0B7
Authority key identifier: 78:C0:94:6E:ED:A0:4A:09:62:3E:37:0A:2A:C8:93:50:40:C5:45:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5ab87a22421eb7bd3e47c1d53fb12aced20c8d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/d85963b62503059ddff7f8f7405b935ce8618d30.roa
Signing time:             Wed 24 Mar 2021 14:30:33 +0000
ROA not before:           Wed 24 Mar 2021 14:30:33 +0000
ROA not after:            Tue 24 Mar 2026 14:30:33 +0000
asID:                     265848
IP address blocks:        45.224.104.0/24 maxlen: 24
                          45.224.105.0/24 maxlen: 24
                          45.224.106.0/24 maxlen: 24
                          45.224.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454839 (0x6f0b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ab87a22421eb7bd3e47c1d53fb12aced20c8d6
        Validity
            Not Before: Mar 24 14:30:33 2021 GMT
            Not After : Mar 24 14:30:33 2026 GMT
        Subject: CN=d85963b62503059ddff7f8f7405b935ce8618d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:72:ab:cf:db:71:df:5d:22:f8:90:e6:5d:
                    34:10:08:ef:43:0c:d5:97:6a:41:74:e1:f7:2d:c5:
                    ec:c7:08:e1:39:b7:14:27:cd:48:b8:4d:ef:bd:4b:
                    a9:03:cb:05:d1:f6:a1:19:5c:1c:15:b2:49:e8:d7:
                    51:de:ae:c8:a0:fb:5c:06:4f:cd:71:c8:34:40:72:
                    a7:ee:9b:97:44:da:4c:22:2c:01:be:26:bc:10:63:
                    31:78:37:06:26:16:35:01:d9:63:f4:aa:16:13:62:
                    60:8e:d2:d8:19:90:c1:a6:7c:50:1e:b1:d8:c4:ba:
                    30:b6:ec:e6:07:ca:e0:e8:d8:21:e9:2a:5e:85:f3:
                    e2:6f:65:51:2f:2f:b7:59:f6:06:10:90:03:13:a9:
                    c6:14:9a:23:ba:11:ba:0c:bd:86:81:ec:c1:51:6b:
                    4b:f0:5a:35:7c:3b:9e:8b:aa:05:31:d1:9e:b3:df:
                    22:31:de:ba:a2:b1:5d:0f:db:f6:f6:07:63:e5:38:
                    4a:c1:8f:69:31:96:97:85:6c:07:1f:70:6a:f0:f4:
                    17:e9:da:80:b4:85:ef:14:0c:27:71:13:6a:de:af:
                    43:7d:9b:1e:c1:7f:00:ec:44:19:9e:20:c6:fe:c6:
                    6f:f2:c3:b2:3e:d7:f1:fa:98:2c:22:d4:9c:28:59:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:B0:9B:CB:8F:F3:8F:57:26:D5:10:E3:A7:B5:9E:F6:29:BC:E2
            X509v3 Authority Key Identifier:
                keyid:78:C0:94:6E:ED:A0:4A:09:62:3E:37:0A:2A:C8:93:50:40:C5:45:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5ab87a22421eb7bd3e47c1d53fb12aced20c8d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/d85963b62503059ddff7f8f7405b935ce8618d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/d5ab87a22421eb7bd3e47c1d53fb12aced20c8d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:be:1d:eb:eb:78:5d:10:17:69:a4:60:fa:6a:90:54:b5:
         3c:72:9a:92:f3:73:35:43:a6:3d:f6:e6:ef:ac:44:1b:c0:97:
         3e:40:b2:09:44:64:f4:ad:e7:4d:e6:ba:71:96:57:0a:19:d7:
         d7:90:32:97:4e:4b:fa:43:53:70:19:1c:00:d1:5f:35:84:85:
         5c:41:1e:03:b3:bf:ba:bb:2d:5e:59:7a:10:c7:d4:41:a3:f7:
         fa:24:f2:32:d6:61:7a:7e:3b:f4:f3:bd:e8:d5:c9:cc:9d:8d:
         1c:a2:2b:b0:09:e1:90:82:12:c4:29:02:cf:cb:33:3a:f8:42:
         a8:44:22:9c:d6:df:11:ea:35:a9:47:da:ae:b5:e7:dd:17:6f:
         59:1c:40:8f:b3:79:83:4e:5f:40:ff:d6:0a:31:55:16:a6:a9:
         13:8a:fa:4f:d0:da:bc:99:35:be:ad:9b:8a:19:fd:44:2f:fe:
         38:11:6f:45:58:1c:56:28:e2:83:1b:21:ae:9f:71:4d:8b:5c:
         22:1b:cf:49:03:c4:fe:da:ef:f6:28:49:4f:dd:c1:af:0f:e6:
         84:8a:fb:4e:b1:f6:e4:03:4b:3d:de:04:31:07:32:57:71:0c:
         43:c8:d7:8f:bb:62:fd:b7:d5:6a:ad:ec:e0:5e:bb:27:d0:9f:
         da:d9:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 20:34:03 2024 by rpki-client on console-fra.rpki-client.org