Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/ce53d40968be780ba464e280a4c02e2b382ffed1.roa
File:                     ce53d40968be780ba464e280a4c02e2b382ffed1.roa (raw, json)
Hash identifier:          cySJECg0PvabBSScqhxKi/739Ik3T36L1nsVrVq6two=
Subject key identifier:   83:B5:CD:A7:D4:98:72:1F:5B:E3:C4:FF:13:9F:E9:7A:47:EF:95:DC
Certificate issuer:       /CN=110ffe8bd3f7bccba5757ca761cd3de7c664f23a
Certificate serial:       2E01
Authority key identifier: E7:EB:E8:6F:B0:6C:56:64:07:FF:8C:21:FE:B2:09:66:99:12:9D:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110ffe8bd3f7bccba5757ca761cd3de7c664f23a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/ce53d40968be780ba464e280a4c02e2b382ffed1.roa
Signing time:             Thu 01 Jul 2021 06:35:31 +0000
ROA not before:           Sat 01 Jun 2019 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     267841
IP address blocks:        45.163.29.0/24 maxlen: 24
                          45.163.30.0/24 maxlen: 24
                          170.239.154.0/23 maxlen: 23
                          2803:31a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11777 (0x2e01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110ffe8bd3f7bccba5757ca761cd3de7c664f23a
        Validity
            Not Before: Jun  1 03:00:00 2019 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=ce53d40968be780ba464e280a4c02e2b382ffed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:b8:7b:ed:63:8b:a1:22:a4:96:86:93:3d:
                    77:b6:74:7c:77:56:08:ef:e3:4a:5c:db:5a:25:bf:
                    6b:1b:53:46:0b:42:4e:af:e0:45:f8:77:fa:bf:0c:
                    12:d4:da:87:2c:4c:03:be:29:f7:e6:5d:9d:d9:34:
                    28:ad:84:4b:4b:d8:7d:4d:f3:be:b9:9b:8f:6d:59:
                    6b:8f:a0:95:ad:8f:2b:a6:94:57:69:ad:8b:00:72:
                    09:f5:5a:db:0b:70:d4:11:43:90:8c:1b:30:9e:1e:
                    ab:06:cc:92:88:b4:8b:db:5e:87:2e:01:76:a1:65:
                    c6:9a:a5:8e:30:a2:7f:09:00:ab:e3:7d:af:f4:da:
                    90:39:a3:9f:b7:aa:9f:a5:d8:d1:2c:e3:61:ab:2f:
                    6d:0d:95:ef:1e:af:9c:ef:d7:e6:b3:cb:d0:31:4d:
                    c6:40:69:f5:fe:4e:f3:1d:02:24:fa:24:17:4e:30:
                    c0:29:04:09:2c:e7:8f:d6:33:fa:e9:7b:b9:4e:6f:
                    21:3f:26:18:51:bb:f8:65:4a:91:99:a6:81:13:1d:
                    4b:c2:85:08:68:8a:f8:ff:e3:26:3e:f6:f5:b8:dd:
                    3d:01:44:2b:1c:12:dd:3c:da:23:b8:82:31:5d:b5:
                    a1:06:b2:45:aa:3c:5f:76:fb:b9:d9:45:ce:62:60:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B5:CD:A7:D4:98:72:1F:5B:E3:C4:FF:13:9F:E9:7A:47:EF:95:DC
            X509v3 Authority Key Identifier:
                keyid:E7:EB:E8:6F:B0:6C:56:64:07:FF:8C:21:FE:B2:09:66:99:12:9D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110ffe8bd3f7bccba5757ca761cd3de7c664f23a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/ce53d40968be780ba464e280a4c02e2b382ffed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebe5fc9f-4587-42f0-8347-bf0db40efbeb/110ffe8bd3f7bccba5757ca761cd3de7c664f23a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.29.0-45.163.30.255
                  170.239.154.0/23
                IPv6:
                  2803:31a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:a4:71:da:c7:64:b2:32:d5:13:5d:e7:53:dd:5c:f6:d4:
         29:14:e7:3c:0e:6f:a8:f2:06:44:08:ec:d1:bc:e4:0b:a4:c0:
         3a:7e:35:e2:0d:8a:a5:9c:30:d8:2b:84:fd:34:ce:37:7c:54:
         ff:d3:1f:d5:f5:da:d4:f8:1d:26:46:0a:52:39:f3:f9:61:3d:
         f7:d0:56:05:a6:9d:db:13:cf:88:db:e3:61:8c:0e:cd:bf:74:
         58:22:fd:40:e5:1d:77:01:95:61:8f:5e:56:19:b1:55:13:7b:
         d4:52:9c:88:69:01:96:b0:73:58:6f:10:a8:a2:38:1a:5c:84:
         99:79:ef:2e:85:b0:0b:89:bb:2c:2a:f1:47:93:72:cf:31:13:
         fb:9f:61:d1:33:aa:ec:1d:b8:74:b9:72:f2:2f:70:33:9e:52:
         3f:5d:0b:10:d9:95:69:00:6b:8e:eb:79:bb:b4:57:52:2e:1d:
         7d:f2:6f:08:5e:50:6a:a9:ab:a9:62:73:db:79:4d:e8:9b:99:
         3f:78:f7:6f:a8:58:d8:27:46:45:e1:31:0c:52:2b:18:d3:ba:
         c2:02:ef:88:c5:2d:c2:95:4f:ed:cc:25:2b:c5:f3:79:2b:89:
         13:98:84:76:9f:4a:a8:2e:f2:9a:fc:e8:b1:c5:f4:94:29:9a:
         02:38:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org