Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/661e926244f133bcababe9f96b3de008543e5378.roa
File:                     661e926244f133bcababe9f96b3de008543e5378.roa (raw, json)
Hash identifier:          2Gyqq5Xh0xs5Okcc+Myli/vobsVLJ5/BTa9AafzXClo=
Subject key identifier:   77:7D:69:79:97:96:02:C2:75:90:97:F0:82:0F:61:44:85:89:FF:54
Certificate issuer:       /CN=cb320b79e8976c901f192c3b7778287f392e9486
Certificate serial:       0D388F
Authority key identifier: AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/661e926244f133bcababe9f96b3de008543e5378.roa
Signing time:             Wed 24 Mar 2021 14:34:19 +0000
ROA not before:           Wed 24 Mar 2021 14:34:19 +0000
ROA not after:            Tue 24 Mar 2026 14:34:19 +0000
asID:                     266852
IP address blocks:        45.239.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866447 (0xd388f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb320b79e8976c901f192c3b7778287f392e9486
        Validity
            Not Before: Mar 24 14:34:19 2021 GMT
            Not After : Mar 24 14:34:19 2026 GMT
        Subject: CN=661e926244f133bcababe9f96b3de008543e5378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:26:52:65:0a:42:47:6b:34:f2:f3:11:58:
                    37:c1:23:d1:8f:34:f2:5d:69:e3:93:0e:7d:2c:24:
                    db:29:65:72:be:8f:bb:5c:c4:9c:87:a8:0d:76:47:
                    70:f6:40:5c:b5:36:4e:16:b2:65:4c:b4:d2:04:50:
                    76:a0:cc:4c:bf:d9:0b:01:db:ed:c3:e3:40:0b:9c:
                    a2:06:f3:f2:1c:17:e8:aa:99:7d:e2:f3:5c:a1:ba:
                    4b:5b:e5:a3:bf:90:01:f5:8f:80:d1:b5:33:e3:a9:
                    0b:98:bd:4e:d8:c3:e8:ec:51:32:20:2e:8d:79:f5:
                    e0:dd:66:f6:09:32:ec:0f:a1:21:bb:d2:3a:f1:f7:
                    8c:34:06:8e:df:2e:7b:7a:2b:e3:5a:dd:1d:6f:cc:
                    42:e8:8c:63:fd:e5:f7:e4:3f:08:7e:6b:8f:c8:fa:
                    f0:af:f4:e9:4b:2c:02:d4:30:9e:85:f9:43:16:85:
                    3d:21:19:df:6c:af:8f:df:fb:ea:76:87:c6:79:af:
                    d2:17:e6:b0:24:f0:66:aa:d6:0b:be:8a:b5:3a:aa:
                    28:19:86:03:f0:af:80:b7:a7:a9:bb:1a:f0:6e:99:
                    d9:60:ad:0c:dc:4a:60:e8:33:3f:e8:57:e9:fc:50:
                    7f:f9:bc:8a:34:83:8f:be:67:4c:07:fb:44:6f:ad:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7D:69:79:97:96:02:C2:75:90:97:F0:82:0F:61:44:85:89:FF:54
            X509v3 Authority Key Identifier:
                keyid:AF:95:77:E7:E8:85:BB:2A:53:5B:C9:A4:17:2F:B3:A0:2E:24:6A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb320b79e8976c901f192c3b7778287f392e9486.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/661e926244f133bcababe9f96b3de008543e5378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fece80fb-b8bb-4d10-b4c2-249d801884fa/cb320b79e8976c901f192c3b7778287f392e9486.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:b1:76:14:8c:42:2e:ad:21:1f:00:00:12:79:a7:b8:8e:
         0c:43:09:88:99:1f:89:58:05:c5:3f:2e:b6:b9:fb:3e:05:86:
         f9:27:de:50:9e:b6:b1:33:49:26:85:ab:20:4b:df:9b:d1:71:
         1a:01:bd:7f:69:c4:c5:6c:8f:03:35:23:67:61:0f:73:b1:b3:
         4f:9d:12:60:d7:70:30:91:ae:46:bd:29:1c:72:80:80:75:36:
         d4:fe:54:7a:a1:12:3b:da:62:53:f0:a2:a9:1a:36:b7:41:1e:
         97:6a:75:97:6b:6c:36:79:d7:cc:10:d5:65:84:e5:5b:60:04:
         68:5a:98:22:23:e9:29:8a:2d:d3:4c:fa:bb:9e:e1:c7:4f:b7:
         9a:f6:d6:9d:c9:14:1f:3e:c5:18:46:e9:11:de:6a:f4:ea:46:
         7d:d8:4e:51:df:e9:0f:35:f8:bf:1d:3c:7e:fa:43:62:2a:05:
         c0:74:15:49:18:62:e3:7a:a3:55:08:d6:5c:d3:14:99:8a:11:
         07:b8:2c:fb:5d:99:4f:da:a3:84:a1:ff:00:49:c5:8c:38:b6:
         b2:28:ce:ff:28:e9:29:c3:28:1b:4a:46:37:81:b4:cd:dc:15:
         a0:9b:7b:d3:d8:c6:f4:c4:fc:95:3c:08:c7:b3:e0:67:3a:71:
         e7:6d:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org