Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/7e028456f75e4945037ccd7864bae3317d88fe58.roa
File:                     7e028456f75e4945037ccd7864bae3317d88fe58.roa (raw, json)
Hash identifier:          b9goXOkMQ6aKlYZV7/XrtmdsX9vTKYadJQRh8RBQSvU=
Subject key identifier:   D3:3C:9D:25:BE:6E:5B:62:68:E1:29:C8:EE:E8:89:93:D1:78:A3:6A
Certificate issuer:       /CN=a5925846ddd27521ce64527a50820075bbf1e5b7
Certificate serial:       05AC08
Authority key identifier: 77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/7e028456f75e4945037ccd7864bae3317d88fe58.roa
Signing time:             Wed 24 Mar 2021 14:31:17 +0000
ROA not before:           Wed 24 Mar 2021 14:31:16 +0000
ROA not after:            Tue 24 Mar 2026 14:31:16 +0000
asID:                     267798
IP address blocks:        45.181.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371720 (0x5ac08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5925846ddd27521ce64527a50820075bbf1e5b7
        Validity
            Not Before: Mar 24 14:31:16 2021 GMT
            Not After : Mar 24 14:31:16 2026 GMT
        Subject: CN=7e028456f75e4945037ccd7864bae3317d88fe58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:66:bc:39:cc:ae:fb:8e:49:e5:44:89:d5:
                    78:0f:e5:cf:c2:e6:96:88:cb:c9:17:d6:92:99:0e:
                    33:03:75:6a:9b:6b:23:c5:12:cf:79:f0:97:fd:b5:
                    82:19:8b:78:61:41:ff:c1:81:2f:00:3d:b6:bc:99:
                    01:c1:d4:06:59:f3:1b:f0:56:c1:5c:b4:20:08:2b:
                    1d:cd:e0:11:8e:3b:4d:11:ef:e7:f2:f3:58:1a:a3:
                    c1:4c:18:62:76:1c:d4:26:7e:b2:90:a1:43:91:92:
                    51:ec:1d:cc:3d:e8:ea:84:16:95:9e:49:f2:7b:dc:
                    1a:27:fd:dc:88:2b:a8:cd:5d:c2:10:57:d2:2b:14:
                    69:4b:69:eb:f3:5a:d4:c1:e9:94:3d:49:5b:b1:25:
                    53:47:2e:68:8e:28:be:7a:f0:11:f0:0e:c5:1b:45:
                    7c:6d:fa:cb:2b:57:a4:bc:d5:60:10:eb:fd:dc:a4:
                    2b:f7:63:6d:ca:85:1a:77:ec:60:e5:a0:78:c5:07:
                    84:02:c5:74:33:08:a0:8d:0d:cc:f6:15:21:04:82:
                    f9:8b:1d:e2:c9:77:fd:27:26:52:69:e6:d7:5d:66:
                    5a:83:de:72:a8:fe:0b:29:96:d6:a1:70:32:08:2f:
                    3f:5f:82:70:b1:b6:d0:b7:09:05:9f:65:fe:5e:8f:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:9D:25:BE:6E:5B:62:68:E1:29:C8:EE:E8:89:93:D1:78:A3:6A
            X509v3 Authority Key Identifier:
                keyid:77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/7e028456f75e4945037ccd7864bae3317d88fe58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/a5925846ddd27521ce64527a50820075bbf1e5b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:ae:48:5b:37:e4:62:f0:02:b8:2a:53:d5:12:aa:fa:4c:
         a0:4c:4d:55:d5:49:fd:59:a6:b7:5d:e3:2e:1b:4c:45:05:3a:
         f7:14:f0:6d:5e:a4:c7:52:07:37:f3:4b:45:63:64:ae:0b:98:
         ed:79:41:7d:2d:16:81:42:cf:85:24:5e:a8:f1:05:2a:3c:1f:
         13:e6:ec:e3:01:16:b3:ea:73:15:ba:5b:8b:83:f3:30:af:e2:
         2d:f4:61:58:7f:4f:b1:e2:1f:b6:64:62:0e:69:bb:f7:c3:31:
         04:6d:ba:fd:fb:ba:71:68:77:d8:ff:8a:cf:54:73:10:a8:5d:
         c9:e9:39:12:09:9b:47:00:e9:4d:f6:dc:ed:d5:52:b5:9b:9a:
         08:95:96:92:68:a7:73:b5:7a:37:08:34:f9:ea:57:ea:ea:80:
         52:08:e3:85:75:d3:95:8b:6e:1f:7e:4e:0b:16:06:70:c1:93:
         bd:0c:b8:26:86:21:0e:95:04:11:ff:80:39:b0:01:67:8a:0f:
         6b:14:91:c5:32:04:4c:0f:00:24:7f:17:01:44:23:40:26:d9:
         2e:08:71:0d:13:93:38:60:19:b4:f8:dd:ad:29:ae:0e:2c:29:
         dc:ec:4c:ee:18:da:c4:d7:48:1b:10:82:eb:e5:34:c3:9d:68:
         14:f7:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org