Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/b130177cd99263007fba7db58bc729c5faaa71c1.roa
File:                     b130177cd99263007fba7db58bc729c5faaa71c1.roa (raw, json)
Hash identifier:          EONW1V3l5pwnKYxcKtgWuoDFuU3zLT2YVMe2Ed8+TI8=
Subject key identifier:   42:77:BA:4D:71:19:9B:2E:FE:10:03:B7:B1:21:3A:0A:13:D5:E5:EC
Certificate issuer:       /CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
Certificate serial:       21B59A
Authority key identifier: 78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/b130177cd99263007fba7db58bc729c5faaa71c1.roa
Signing time:             Thu 06 Jul 2023 04:30:27 +0000
ROA not before:           Wed 05 Jul 2023 04:30:27 +0000
ROA not after:            Sun 06 Jul 2025 04:30:27 +0000
asID:                     52468
IP address blocks:        45.71.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209178 (0x21b59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
        Validity
            Not Before: Jul  5 04:30:27 2023 GMT
            Not After : Jul  6 04:30:27 2025 GMT
        Subject: CN=b130177cd99263007fba7db58bc729c5faaa71c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2a:b8:15:01:fb:20:5d:93:c4:c9:3b:36:c1:
                    e9:cc:72:6b:57:0f:9f:45:68:e9:67:76:79:21:ae:
                    11:1d:0e:4d:41:d6:d2:4d:1b:77:5d:f0:c2:be:b5:
                    45:9b:c4:57:1e:48:14:cb:94:e2:68:ed:cd:39:03:
                    1b:04:5b:08:97:5e:86:ff:f0:e6:4d:25:c2:76:a1:
                    c3:ba:7b:9c:d8:da:71:8c:a0:2b:56:e0:43:4a:f8:
                    40:ba:2c:6c:ac:c0:e2:8d:b9:cc:a8:e2:95:12:20:
                    b6:19:ee:90:52:e5:ea:6d:cb:38:ee:7e:36:b9:5b:
                    f6:06:61:7b:f3:6f:5e:31:af:1f:4d:ab:2e:18:30:
                    d0:e5:b2:67:bb:bf:b4:e3:b6:ca:0c:5f:0f:72:5f:
                    f0:37:01:b5:8e:2b:74:47:81:a8:f0:58:00:a4:19:
                    4d:cf:11:22:82:b6:14:74:f1:1a:4d:5d:db:63:0c:
                    73:76:cb:59:af:cc:f3:01:67:17:98:9d:3a:ad:12:
                    54:c9:ab:de:4a:c2:b8:95:c8:9a:57:0c:65:40:c6:
                    06:70:c2:6e:a2:60:b2:23:50:e9:db:e2:dd:fc:8b:
                    37:be:ac:53:39:8d:43:31:f4:cc:f4:dd:5f:e5:0d:
                    50:dc:6a:05:d0:f4:38:7d:2a:ee:76:5c:8a:b2:8e:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:BA:4D:71:19:9B:2E:FE:10:03:B7:B1:21:3A:0A:13:D5:E5:EC
            X509v3 Authority Key Identifier:
                keyid:78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/b130177cd99263007fba7db58bc729c5faaa71c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/c63b81088b8ee19ee848e7230778ed21342ec0fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:bc:44:ba:57:cf:6b:37:da:c2:6d:14:ac:57:1d:c8:b0:f8:
         15:e8:59:21:55:fa:02:78:02:30:f3:e3:8e:6b:b3:10:a1:31:
         3f:a2:cd:47:a3:23:94:a2:5e:37:48:ee:bc:dc:37:91:08:b0:
         a3:19:ae:ff:00:91:38:03:e2:62:c1:fa:84:0f:79:5e:40:de:
         f2:8c:e9:8f:90:10:88:26:50:fa:27:bd:46:e1:08:75:f7:a5:
         3e:9d:3d:88:ea:89:c9:13:5e:c0:da:d6:55:df:99:64:6f:51:
         de:64:78:f2:d9:99:76:3a:26:97:27:41:36:57:4f:0c:c4:ab:
         20:74:7e:04:6c:18:f4:55:0c:64:d8:b3:c6:49:e1:81:d6:35:
         44:44:58:32:bd:49:2a:fa:2e:79:8c:68:20:2f:8c:ba:75:2f:
         0a:35:1b:47:1d:5c:33:a9:0a:50:e8:4a:3c:89:fd:2e:bb:41:
         85:51:39:8b:88:54:f8:21:9c:83:e8:02:64:9d:6f:78:19:8b:
         8b:ae:70:bc:72:ea:96:ad:66:72:d8:2c:7c:57:81:62:df:26:
         0b:9a:95:c3:98:4e:8a:8d:23:59:eb:23:ec:0b:01:ed:a8:50:
         cc:81:55:7c:56:0a:6e:e3:6d:b2:3c:4b:c9:bb:af:74:60:ed:
         00:cf:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org