Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/c916ad191d20751537fa3d83af8d9df731b500db.roa
File:                     c916ad191d20751537fa3d83af8d9df731b500db.roa (raw, json)
Hash identifier:          qG7kLDU9py7WodxYc4mUk75FMIQ4/ZQfe7G1ZzyKBf8=
Subject key identifier:   C9:CE:99:FB:BC:E8:E5:C7:E7:ED:91:88:0E:78:28:69:0B:35:2E:FE
Certificate issuer:       /CN=106bdbba30a216f7b3c1f887e3f4a00e30cecd6d
Certificate serial:       0C5939
Authority key identifier: 3A:4D:F1:61:8B:D6:A1:45:37:11:F6:21:1F:F5:D3:F7:CD:64:00:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106bdbba30a216f7b3c1f887e3f4a00e30cecd6d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/c916ad191d20751537fa3d83af8d9df731b500db.roa
Signing time:             Wed 24 Mar 2021 14:33:21 +0000
ROA not before:           Wed 24 Mar 2021 14:33:21 +0000
ROA not after:            Tue 24 Mar 2026 14:33:21 +0000
asID:                     266878
IP address blocks:        45.239.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809273 (0xc5939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106bdbba30a216f7b3c1f887e3f4a00e30cecd6d
        Validity
            Not Before: Mar 24 14:33:21 2021 GMT
            Not After : Mar 24 14:33:21 2026 GMT
        Subject: CN=c916ad191d20751537fa3d83af8d9df731b500db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:fb:71:67:36:db:cf:4d:04:69:69:8b:dd:
                    40:9f:af:de:f4:c2:3e:fd:78:40:50:3c:0e:97:4e:
                    5e:69:c2:75:fa:b4:0f:0a:1c:ed:b8:fb:95:33:78:
                    16:6a:09:58:5c:ef:54:22:6b:18:2e:e4:0b:04:4b:
                    74:c1:68:1b:77:e3:27:44:10:e1:a3:21:17:e8:1b:
                    37:2c:ad:c8:2a:e1:ec:8f:55:1b:d3:6b:e2:70:4d:
                    c4:cf:c9:44:22:a2:45:05:77:a9:be:c4:c3:2f:3c:
                    9a:ed:f1:8b:ba:57:40:3e:f4:e5:d5:ef:37:23:ac:
                    98:9d:19:a7:bb:20:18:78:5b:77:a7:e3:83:9e:87:
                    87:5c:6a:24:fb:16:14:1f:f3:6b:ef:f4:7e:7a:30:
                    4f:d3:3a:39:ea:9f:88:7a:5b:3b:4e:88:33:58:50:
                    88:66:f4:06:fc:65:98:73:9c:2c:c4:4c:bf:a5:ce:
                    b3:c8:93:74:ea:35:1d:a6:be:2b:ca:96:94:df:40:
                    a6:df:dc:a5:f8:92:6e:b6:5f:77:03:49:0d:02:9e:
                    17:77:f5:99:b3:6a:7b:9e:0c:05:e3:b2:14:de:d7:
                    99:49:cd:42:7c:0a:48:f8:c8:00:5b:1a:61:c6:82:
                    db:bb:40:c3:5a:e5:18:67:ef:79:9f:03:ed:96:e9:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CE:99:FB:BC:E8:E5:C7:E7:ED:91:88:0E:78:28:69:0B:35:2E:FE
            X509v3 Authority Key Identifier:
                keyid:3A:4D:F1:61:8B:D6:A1:45:37:11:F6:21:1F:F5:D3:F7:CD:64:00:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106bdbba30a216f7b3c1f887e3f4a00e30cecd6d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/c916ad191d20751537fa3d83af8d9df731b500db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/106bdbba30a216f7b3c1f887e3f4a00e30cecd6d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:0e:be:8f:00:70:23:37:4b:a4:7a:b5:3c:ac:8f:57:f5:
         16:28:89:6a:3d:31:61:c5:20:99:7c:7d:8c:3a:bc:9d:c4:e8:
         bb:40:7f:ae:a4:d6:60:a1:9a:26:b5:36:f0:45:d3:cd:26:23:
         cd:f0:c5:a3:cf:f4:ee:25:fb:d7:97:90:0c:e8:bf:32:90:5e:
         4b:4c:d7:ea:65:90:32:9c:f3:79:63:d7:86:2b:69:47:60:81:
         e7:d0:76:ca:b2:41:6c:d7:5a:a6:51:d7:4a:eb:46:1c:2f:2f:
         30:a5:ca:10:dd:5f:a5:67:ef:ab:e9:6c:d8:e9:11:cc:eb:85:
         78:ce:92:cf:31:8f:f3:a6:58:7c:ad:56:40:7c:49:46:89:35:
         18:97:88:9e:14:93:b9:26:7d:b8:48:a5:76:fd:43:85:f4:40:
         2a:dc:71:53:7d:db:f0:57:27:6f:80:22:68:fc:83:8e:cf:ae:
         2b:2f:42:96:dd:e9:d6:5d:7d:26:7c:0d:64:ae:d5:b1:dc:f4:
         10:52:93:9d:8c:66:f3:fb:49:c3:30:47:99:c7:32:11:ff:e1:
         07:36:e8:fd:67:b8:b9:1e:4f:1e:02:1f:6a:7b:d4:15:ea:63:
         b0:d7:54:c0:eb:b2:38:64:4e:b5:e6:41:78:93:b2:60:31:1d:
         a5:45:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org