Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/ca28600fb93e7bd1f012b8cc04ad7b8a3ac66c6f.roa
File:                     ca28600fb93e7bd1f012b8cc04ad7b8a3ac66c6f.roa (raw, json)
Hash identifier:          ruWL+T0nIbHApuqHTZy2B93XzLxzUk7AlBDnMtd/nVw=
Subject key identifier:   25:72:8D:1A:02:3F:2C:AC:87:FD:3D:90:73:B8:08:F3:DE:2F:AE:06
Certificate issuer:       /CN=f874de583b1a819b42bd42d47f01f80389f5d7aa
Certificate serial:       0C3684
Authority key identifier: 58:9A:42:00:83:C5:DF:4C:B9:2F:34:4F:62:99:6E:B3:89:2F:07:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f874de583b1a819b42bd42d47f01f80389f5d7aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/ca28600fb93e7bd1f012b8cc04ad7b8a3ac66c6f.roa
Signing time:             Wed 24 Mar 2021 14:42:31 +0000
ROA not before:           Wed 24 Mar 2021 14:42:31 +0000
ROA not after:            Tue 24 Mar 2026 14:42:31 +0000
asID:                     265820
IP address blocks:        45.71.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800388 (0xc3684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f874de583b1a819b42bd42d47f01f80389f5d7aa
        Validity
            Not Before: Mar 24 14:42:31 2021 GMT
            Not After : Mar 24 14:42:31 2026 GMT
        Subject: CN=ca28600fb93e7bd1f012b8cc04ad7b8a3ac66c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:87:00:2b:59:de:b0:58:dc:22:18:11:1a:
                    2b:3c:8e:0f:b2:21:0f:bf:a2:0f:f5:d5:61:1a:e3:
                    69:4e:eb:80:95:53:76:4c:7f:39:98:b6:32:d9:39:
                    39:de:b8:ac:59:e9:c7:93:dc:08:7a:5f:fe:31:e3:
                    8f:e4:ea:f2:9e:5b:58:97:68:44:00:b5:24:73:58:
                    73:26:89:2f:a9:ca:ef:2f:b7:bc:02:36:62:08:b3:
                    a8:8d:1e:2a:1d:0f:dc:cf:2b:51:c7:8d:eb:37:7a:
                    84:85:3a:f2:79:98:1e:ae:98:18:20:d9:df:a7:5b:
                    d9:45:d8:a7:5f:a7:e4:4b:5c:91:b7:b8:b4:38:6d:
                    d7:2f:35:58:80:bc:6e:e7:8c:01:7f:77:75:b2:5a:
                    a0:af:9c:1c:b5:c4:d6:7c:2d:68:7e:a4:8f:fa:60:
                    b1:31:03:fe:70:04:3a:b7:63:78:63:b1:e0:94:f1:
                    25:8e:d8:28:bd:dd:b4:0a:37:b6:a2:bc:49:12:78:
                    63:ec:c6:fc:20:5a:66:25:bf:97:37:b8:d8:6e:8d:
                    e9:da:46:d7:e0:eb:81:31:14:cc:3f:43:59:67:18:
                    6a:5e:57:f3:4a:c1:d0:50:dd:91:c0:1e:b3:53:10:
                    29:b8:f9:69:c5:aa:a9:65:57:95:58:74:96:0d:eb:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:72:8D:1A:02:3F:2C:AC:87:FD:3D:90:73:B8:08:F3:DE:2F:AE:06
            X509v3 Authority Key Identifier:
                keyid:58:9A:42:00:83:C5:DF:4C:B9:2F:34:4F:62:99:6E:B3:89:2F:07:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f874de583b1a819b42bd42d47f01f80389f5d7aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/ca28600fb93e7bd1f012b8cc04ad7b8a3ac66c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fab2d3d1-776e-43ed-801b-cbb92a5f3381/f874de583b1a819b42bd42d47f01f80389f5d7aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:41:c2:5d:cf:8e:9d:e5:55:f2:7f:86:4d:0e:1b:29:63:
         75:8b:bb:84:00:66:07:06:5b:a9:f5:ca:ee:77:78:ae:b8:68:
         be:1c:37:66:68:5c:89:e4:05:b5:fc:53:1c:c4:19:65:ed:fb:
         c5:90:6f:11:69:2b:ab:90:40:1d:22:ae:f2:a9:f8:8e:a8:85:
         ac:cc:b3:67:8a:17:39:f0:e3:a9:cc:5c:21:0c:f7:c8:2b:2b:
         1d:a6:a3:d4:79:17:80:60:fd:d5:ea:6a:10:03:78:bf:a7:eb:
         15:19:c6:9d:91:3b:32:b1:02:32:f5:d4:78:69:99:72:e9:72:
         c1:29:37:33:d4:4d:81:6a:5d:95:d2:6f:18:87:3c:5e:1c:48:
         04:fa:f2:2f:1d:fd:3d:60:9b:d7:ce:4c:f0:45:56:b2:06:90:
         a3:2b:67:8d:40:49:f6:86:53:d3:4f:a7:c6:53:7e:2a:ff:6f:
         b6:a7:98:59:08:a0:c8:a9:63:9d:55:8c:44:ca:69:14:53:28:
         7b:b1:25:a9:d1:e0:eb:a5:16:38:db:f6:5b:aa:a8:52:f7:34:
         62:54:d7:53:c3:5c:1b:b4:90:9f:22:d9:47:1b:68:a2:ff:42:
         c3:9f:79:72:c7:fd:ab:55:b9:9d:6d:48:2e:a3:b2:74:a1:ed:
         fc:d6:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org