Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/02789d7176b4275a918667af067b5db4311c7218.roa
File:                     02789d7176b4275a918667af067b5db4311c7218.roa (raw, json)
Hash identifier:          FNs+O2WXAhHLAf1iyv4BNRXw0MeWpE47VrNu3pmoG6c=
Subject key identifier:   CB:D4:12:68:0D:63:03:EE:2C:F0:A1:14:CD:BE:F3:D1:57:F3:A8:B8
Certificate issuer:       /CN=e418781321c8ac19027d1f6b8a8fa133313e5012
Certificate serial:       13B62E
Authority key identifier: DD:02:45:5B:BE:76:8D:76:5B:AB:CF:12:7D:C8:E6:B3:22:E5:E7:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e418781321c8ac19027d1f6b8a8fa133313e5012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/02789d7176b4275a918667af067b5db4311c7218.roa
Signing time:             Tue 08 Feb 2022 04:08:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269747
IP address blocks:        45.182.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291822 (0x13b62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e418781321c8ac19027d1f6b8a8fa133313e5012
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=02789d7176b4275a918667af067b5db4311c7218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:fd:52:e2:91:d2:27:51:03:23:b5:91:e0:
                    b1:a9:5e:2f:e3:39:2d:e7:92:38:e6:c8:b0:c2:53:
                    fa:ac:a6:da:3f:a4:82:44:e3:16:27:6e:54:9f:9e:
                    0a:49:b9:64:7e:28:60:5a:35:7f:fc:0c:f4:35:07:
                    9d:87:b7:44:0e:39:e5:e5:2b:0f:89:ca:e7:f1:f0:
                    22:f3:21:a4:3a:fc:ce:5c:d3:8b:3f:f0:35:9c:00:
                    88:1a:1f:7f:61:6f:25:91:51:70:bf:d2:7f:5e:81:
                    ee:ad:41:83:61:80:ea:b3:3f:5e:6e:7e:f7:50:4b:
                    98:99:34:9d:c0:bc:a1:8a:51:6b:2c:c8:4a:19:bb:
                    cf:51:03:b9:7c:26:09:77:d1:95:fb:09:df:6e:8c:
                    8c:48:29:1b:bb:f1:69:7a:64:dd:c2:da:77:6c:bf:
                    87:99:d8:2e:b8:5e:b4:99:42:ea:a0:8f:6f:1b:ae:
                    21:59:53:04:fd:c6:f6:12:70:7f:25:f7:bd:0e:e0:
                    73:18:3c:bc:7e:6f:1e:44:47:c5:2d:ee:d2:07:95:
                    44:69:fc:df:c2:b7:de:49:27:04:f7:ed:af:b1:41:
                    86:43:89:b7:44:f0:03:09:02:e5:23:bd:04:bb:a6:
                    19:87:d7:36:55:1f:13:d3:0e:3a:d1:6c:92:e9:d8:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:12:68:0D:63:03:EE:2C:F0:A1:14:CD:BE:F3:D1:57:F3:A8:B8
            X509v3 Authority Key Identifier:
                keyid:DD:02:45:5B:BE:76:8D:76:5B:AB:CF:12:7D:C8:E6:B3:22:E5:E7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e418781321c8ac19027d1f6b8a8fa133313e5012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/02789d7176b4275a918667af067b5db4311c7218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/e418781321c8ac19027d1f6b8a8fa133313e5012.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:d8:21:11:f7:66:e3:3d:c5:bb:cc:e3:f6:0c:00:ec:c2:
         b4:10:9d:77:20:5e:34:3c:84:a2:e6:64:99:0b:1c:79:ce:b8:
         57:23:91:a3:89:f6:49:53:25:4b:f0:32:03:83:9c:31:04:e9:
         0d:67:14:cc:80:ce:82:a7:76:c1:d6:f8:84:88:1b:dc:77:8f:
         ae:eb:e7:0f:ef:bb:e8:99:f9:ea:34:40:0d:76:86:b6:32:14:
         a3:ec:2f:a1:90:ee:08:fd:1a:5f:50:34:78:1f:ed:13:43:7d:
         26:ff:0d:e5:8c:fa:f3:20:c2:e7:b8:92:b8:50:e8:a1:10:da:
         e5:36:49:ec:81:3f:a7:c9:1b:ac:54:c3:3b:7a:2d:ec:8e:e5:
         48:fd:94:3d:98:4c:16:28:bc:f0:53:ec:9c:d3:f5:6d:3a:39:
         a8:52:18:c5:0d:7f:9a:68:7c:aa:b5:81:82:ca:53:ab:8b:3b:
         d7:6a:68:02:d9:c2:15:4f:cb:dd:af:32:37:44:54:c5:30:b3:
         f9:4b:c8:41:63:fd:4c:86:9f:b5:4d:d3:7a:66:2c:5e:da:b2:
         17:bd:04:04:7e:87:57:5c:13:63:ce:5d:ef:ba:fa:11:e7:66:
         7d:21:94:60:ce:f3:ce:7a:f7:d5:14:15:33:e3:23:14:b5:64:
         82:fe:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org