Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/b092033a5625ccade839c6f1a4b7f140292c26fa.roa
File:                     b092033a5625ccade839c6f1a4b7f140292c26fa.roa (raw, json)
Hash identifier:          Gi8r3eWf5l7xUHSTvbkaRj+1gpvQvbtUf19E2BXTzz0=
Subject key identifier:   73:17:1D:62:49:98:3F:AB:02:40:9D:F5:B7:87:3D:BC:FF:3B:C9:A0
Certificate issuer:       /CN=d4d5ca46da5dbbcf109b53a8f6a6be440251a74e
Certificate serial:       0CCFF1
Authority key identifier: FC:BE:DE:EA:9E:EF:C5:A5:AD:AE:63:FB:D3:54:EA:B2:A1:61:6F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/b092033a5625ccade839c6f1a4b7f140292c26fa.roa
Signing time:             Wed 24 Mar 2021 14:39:00 +0000
ROA not before:           Wed 24 Mar 2021 14:38:58 +0000
ROA not after:            Tue 24 Mar 2026 14:38:58 +0000
asID:                     266856
IP address blocks:        45.239.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839665 (0xccff1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d5ca46da5dbbcf109b53a8f6a6be440251a74e
        Validity
            Not Before: Mar 24 14:38:58 2021 GMT
            Not After : Mar 24 14:38:58 2026 GMT
        Subject: CN=b092033a5625ccade839c6f1a4b7f140292c26fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:d7:87:3d:a6:89:22:a4:de:0a:b4:89:d9:
                    49:ab:80:d8:0c:2e:01:2e:c3:c1:83:7e:5d:1c:45:
                    37:f3:b0:ff:b4:f1:6b:53:dd:bd:f1:7c:b4:60:a1:
                    e6:60:91:f1:d1:07:53:a2:61:c0:2e:4e:c7:21:9e:
                    2d:3e:e0:d8:30:32:12:5e:a7:c7:8b:09:8f:9b:c5:
                    a7:fc:91:93:68:a5:87:95:e3:fa:eb:8d:8f:83:81:
                    84:c4:5f:7a:ef:ff:82:18:84:58:c8:b8:e1:4b:d3:
                    25:cb:9b:02:ae:c0:ad:6e:f0:95:a5:16:2d:fb:2b:
                    82:49:14:8a:5b:f4:66:c7:2f:21:4f:b5:2f:9a:38:
                    72:40:1c:f2:3b:ee:57:90:c6:69:7c:21:ee:33:07:
                    21:bd:0f:d2:5b:e8:bf:1c:4f:ea:fb:6c:cc:30:99:
                    82:69:c7:ba:1b:19:89:9e:c4:2b:de:3d:2e:a8:41:
                    6d:34:6c:44:bc:4c:61:61:8c:ad:35:2b:4e:bb:99:
                    16:46:60:1c:2c:8f:aa:db:82:01:1f:21:00:b1:23:
                    15:2e:51:55:8b:32:c1:73:fb:38:5d:2d:f2:af:c1:
                    74:5d:db:38:9e:f6:0f:c3:ca:23:40:7e:57:66:8b:
                    10:a4:9e:17:07:45:20:73:a3:a0:02:7e:06:76:c2:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:1D:62:49:98:3F:AB:02:40:9D:F5:B7:87:3D:BC:FF:3B:C9:A0
            X509v3 Authority Key Identifier:
                keyid:FC:BE:DE:EA:9E:EF:C5:A5:AD:AE:63:FB:D3:54:EA:B2:A1:61:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/b092033a5625ccade839c6f1a4b7f140292c26fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f63a14ce-1539-471c-aa1f-f712570b3eb0/d4d5ca46da5dbbcf109b53a8f6a6be440251a74e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:18:24:07:66:3a:2a:7e:05:23:ca:dd:99:f8:7f:16:6b:a4:
         56:f6:43:6a:69:20:fd:28:0b:3a:1a:f1:e4:02:fb:a1:4c:38:
         c6:81:65:bc:39:0e:54:77:98:42:42:d5:61:f1:4e:89:05:bc:
         cf:92:43:0b:5d:b0:1b:b8:12:1a:8d:18:59:f5:00:15:86:7d:
         f4:c7:d7:d6:32:9b:a9:f4:f9:4b:c3:b3:df:26:29:2e:c8:cb:
         15:b6:87:d0:ba:4c:f2:ce:b9:5c:32:5e:b3:06:73:ba:4a:96:
         fc:6c:0c:9c:1d:cc:ee:b6:88:2d:ee:7e:1f:0a:a8:0f:21:e1:
         74:12:09:2b:42:02:96:71:d1:69:3e:35:eb:e5:27:e3:dd:cc:
         48:1f:1f:00:fc:6a:bf:9c:a2:3b:da:10:1d:96:63:10:ab:5e:
         7a:d3:b9:8e:f8:a9:8e:cc:24:e6:0d:e2:33:f4:8e:6d:af:69:
         cd:d1:9f:65:c9:a8:ce:26:80:11:08:3f:bd:98:a3:02:34:84:
         fc:57:8a:2d:29:af:f2:18:8b:eb:58:52:da:8b:37:aa:e4:94:
         fa:1e:bc:a5:ba:8a:76:7c:28:ce:57:08:50:84:61:cb:f0:93:
         1d:89:b8:d9:ab:d4:ce:dc:1a:86:5c:9f:64:19:88:42:05:bd:
         cc:e2:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org