Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e9f9d1bc-f57b-4514-bcee-dfa9335c795b/dbadb5ced02885cbb7e58d7ee8482c205e7d1fbb.roa
File:                     dbadb5ced02885cbb7e58d7ee8482c205e7d1fbb.roa (raw, json)
Hash identifier:          QQWTpraVHLes8s7tGGBflaTB92G5NyEszOyH6mq0g0E=
Subject key identifier:   52:0D:41:3B:D1:71:D3:19:5A:A4:CA:56:EA:EB:F5:24:01:BB:DE:73
Certificate issuer:       /CN=932fc878901fb17f983bab48247c2cc03519283b
Certificate serial:       0C9CBA
Authority key identifier: 40:8D:1B:2D:3C:A7:ED:C4:28:03:4E:45:BE:C8:7B:B8:8A:FF:82:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/932fc878901fb17f983bab48247c2cc03519283b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e9f9d1bc-f57b-4514-bcee-dfa9335c795b/dbadb5ced02885cbb7e58d7ee8482c205e7d1fbb.roa
Signing time:             Wed 24 Mar 2021 14:30:34 +0000
ROA not before:           Wed 24 Mar 2021 14:30:34 +0000
ROA not after:            Tue 24 Mar 2026 14:30:34 +0000
asID:                     267695
IP address blocks:        45.164.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826554 (0xc9cba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932fc878901fb17f983bab48247c2cc03519283b
        Validity
            Not Before: Mar 24 14:30:34 2021 GMT
            Not After : Mar 24 14:30:34 2026 GMT
        Subject: CN=dbadb5ced02885cbb7e58d7ee8482c205e7d1fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:15:e6:4a:9f:b3:e8:b0:8d:fe:df:f2:f2:
                    c3:3c:d2:1b:81:f8:59:75:86:47:de:5c:50:9e:4c:
                    30:f7:64:e6:1f:77:06:46:a7:d6:b2:5b:4e:11:ff:
                    cd:c5:71:ee:38:c5:12:73:63:80:d9:fc:85:2d:b0:
                    16:34:eb:a4:55:be:e5:43:10:f1:c2:9f:a4:b0:8f:
                    22:f0:4b:88:be:b6:5f:a2:88:7a:22:f4:c4:2b:36:
                    b4:fd:81:8f:68:2f:c7:15:ea:e2:09:af:16:25:f5:
                    76:a3:c8:bc:eb:eb:7b:d9:e9:6d:50:62:be:32:96:
                    eb:dc:4f:3f:a3:d8:bc:38:22:45:b2:56:75:c1:15:
                    5f:10:22:a2:41:bf:da:d9:2a:77:71:5f:b8:f3:52:
                    ba:a6:6f:49:e6:d7:fd:23:75:59:59:dc:81:88:b9:
                    1b:e1:62:e7:fd:b8:31:31:e4:45:ee:63:ac:c8:07:
                    e7:c9:3e:49:e1:96:25:b5:df:29:aa:7c:d6:79:bd:
                    28:3b:2a:2d:33:df:e7:8b:ee:cb:03:c6:16:19:3a:
                    5c:f5:69:55:42:f9:51:56:f0:aa:e3:9e:1f:41:8b:
                    3d:42:51:9d:0a:9f:c4:9c:63:cb:fd:f8:c8:25:60:
                    de:07:4e:12:e8:2b:d4:af:ad:73:6e:b8:3b:4d:e0:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:41:3B:D1:71:D3:19:5A:A4:CA:56:EA:EB:F5:24:01:BB:DE:73
            X509v3 Authority Key Identifier:
                keyid:40:8D:1B:2D:3C:A7:ED:C4:28:03:4E:45:BE:C8:7B:B8:8A:FF:82:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/932fc878901fb17f983bab48247c2cc03519283b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e9f9d1bc-f57b-4514-bcee-dfa9335c795b/dbadb5ced02885cbb7e58d7ee8482c205e7d1fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e9f9d1bc-f57b-4514-bcee-dfa9335c795b/932fc878901fb17f983bab48247c2cc03519283b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:7b:7f:f0:49:08:b7:b6:f2:47:5d:e4:65:90:85:f5:13:
         c0:f8:85:0f:5f:52:3b:b3:48:a1:29:42:7e:a8:b4:c2:d9:11:
         77:c9:8f:6d:64:a3:ef:ca:3a:b0:72:8f:74:a3:bc:c0:a3:d0:
         e5:88:0e:80:9f:45:c4:43:2f:09:7e:17:ec:9e:b7:cd:64:ce:
         a9:6d:fb:0a:9f:3a:cf:b7:0d:7d:0a:c2:77:fa:3d:70:44:e0:
         ad:a3:79:19:89:e0:5e:c5:28:41:15:2a:dd:40:92:c0:65:49:
         1e:0e:b1:cc:3b:cc:35:c2:02:fa:df:04:ed:a6:b4:cc:e0:90:
         88:98:dd:65:57:aa:37:51:1c:11:1d:3b:e3:03:14:45:78:b8:
         45:d5:65:46:9d:08:3f:20:65:7a:eb:a0:d9:cf:2d:9b:2a:99:
         d3:d9:e7:14:71:7f:59:9b:a5:3b:f4:96:91:d1:d9:21:e3:a3:
         fa:01:4b:48:f4:0b:d9:40:dc:f7:3b:e4:38:e8:77:63:cd:01:
         ed:6a:71:e0:2b:9b:63:42:67:9e:ed:2e:02:66:c2:86:ea:24:
         09:3a:06:eb:7e:b5:5e:40:f6:4b:85:0c:23:0a:e2:cd:ab:5f:
         95:d1:88:9a:c9:d6:d2:08:d7:04:0a:db:83:6d:05:d6:ff:95:
         45:7c:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org