Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/00160be984b70b5d8fe908d83eb3611a601e0059.roa
File:                     00160be984b70b5d8fe908d83eb3611a601e0059.roa (raw, json)
Hash identifier:          GpMHO2Z5AUBNJM5c/FE/+y1YfHvNghsJ4mWe5hlIBnU=
Subject key identifier:   D0:BC:7A:42:17:93:B0:00:8C:A9:31:06:F5:17:DB:0B:A2:DD:8C:D3
Certificate issuer:       /CN=fa9527b858846f6022832bad81d0fc8bc215515f
Certificate serial:       0C55DF
Authority key identifier: 9F:56:40:B0:FE:BF:7D:87:6E:0B:34:7D:4A:0E:A0:68:B2:8B:4E:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9527b858846f6022832bad81d0fc8bc215515f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/00160be984b70b5d8fe908d83eb3611a601e0059.roa
Signing time:             Wed 24 Mar 2021 14:31:22 +0000
ROA not before:           Wed 24 Mar 2021 14:31:22 +0000
ROA not after:            Tue 24 Mar 2026 14:31:22 +0000
asID:                     266896
IP address blocks:        45.239.107.0/24 maxlen: 24
                          2801:11:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808415 (0xc55df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa9527b858846f6022832bad81d0fc8bc215515f
        Validity
            Not Before: Mar 24 14:31:22 2021 GMT
            Not After : Mar 24 14:31:22 2026 GMT
        Subject: CN=00160be984b70b5d8fe908d83eb3611a601e0059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:47:1b:19:1d:5f:2f:b9:6c:24:c9:a2:d8:ac:
                    70:e3:c6:2b:a1:eb:78:77:7b:1a:e0:08:5d:ee:b2:
                    08:39:56:94:73:74:ae:bb:6d:6d:f4:6f:11:2f:b6:
                    56:e1:43:fb:ed:6f:e1:2b:1e:a9:87:58:72:73:bb:
                    01:99:91:97:89:7c:ed:b3:49:91:a2:4b:19:85:ea:
                    24:0e:4e:a5:00:ac:42:86:c0:9e:6f:07:54:65:df:
                    8d:5b:bd:93:88:b6:d9:95:8a:a5:7d:3c:9e:d4:30:
                    ef:71:a8:c6:b6:e5:c9:94:76:f1:8b:00:41:d4:33:
                    9e:44:32:b7:03:a3:4a:1e:08:3c:99:ab:74:3f:78:
                    7e:b5:bd:7b:84:4d:62:82:97:7f:43:b5:03:3d:fe:
                    c7:a0:1e:39:41:ec:9e:86:a2:68:32:33:03:c7:d3:
                    c6:65:48:1c:f5:16:e7:7b:cf:7d:52:91:c6:a1:0a:
                    92:8c:57:aa:5e:83:81:c4:3e:b3:2b:71:d3:36:95:
                    b6:25:b2:09:ce:64:d7:02:ac:1c:d1:04:f4:b9:7f:
                    0d:82:b1:25:e1:44:0d:50:80:f9:3c:b4:ab:77:2b:
                    d0:6b:90:95:d6:51:39:97:00:65:9b:79:09:7e:40:
                    1e:bb:54:1a:6b:72:52:5c:ab:6f:d5:10:a6:0c:25:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BC:7A:42:17:93:B0:00:8C:A9:31:06:F5:17:DB:0B:A2:DD:8C:D3
            X509v3 Authority Key Identifier:
                keyid:9F:56:40:B0:FE:BF:7D:87:6E:0B:34:7D:4A:0E:A0:68:B2:8B:4E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa9527b858846f6022832bad81d0fc8bc215515f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/00160be984b70b5d8fe908d83eb3611a601e0059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef834c18-3ac5-4b5c-9286-2c8337d2575a/fa9527b858846f6022832bad81d0fc8bc215515f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.107.0/24
                IPv6:
                  2801:11:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:c4:ac:60:c2:85:17:e3:a5:af:3e:0b:eb:e1:ae:e1:47:
         fb:38:e4:d7:ef:b3:c0:aa:0d:d5:4d:76:b5:04:86:97:06:2e:
         18:29:b6:c3:b0:8a:1f:96:05:05:a9:c7:43:0f:6a:8a:d2:69:
         61:8c:d7:83:09:9f:d6:d3:16:42:4e:5b:5e:a5:56:c1:69:5f:
         bf:ad:96:73:2c:f0:42:a4:6f:2c:8a:df:9b:02:d7:31:0f:63:
         57:f5:03:21:08:ab:50:48:16:6b:e8:fa:b3:d8:50:0a:ee:b5:
         d8:4f:28:5e:06:7b:45:a2:2b:f7:25:34:b2:be:67:5f:2b:04:
         4d:62:dc:8c:ed:56:71:28:e9:ce:54:a5:1b:c1:c1:69:27:f2:
         1e:a6:59:83:c9:6c:13:67:2e:f5:b3:c1:4e:18:86:d0:41:11:
         1c:7c:0b:b7:35:71:06:f7:0d:f0:4f:0a:ca:db:b0:1b:d4:50:
         cf:92:8a:99:7e:4f:ea:62:3e:61:34:94:97:2b:3c:a9:13:2b:
         f3:da:c5:7a:44:b9:46:f0:7d:59:65:90:62:60:e9:f1:37:9c:
         a3:f9:db:57:bb:6c:74:7d:d3:7e:8d:1a:de:24:a6:cf:23:05:
         dd:f9:91:fd:96:a0:9e:11:a2:84:c2:6d:08:cc:ac:f8:4a:48:
         78:15:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org