Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/9e859aad90a443c7cabbd7359f0692e2f7c29598.roa
File:                     9e859aad90a443c7cabbd7359f0692e2f7c29598.roa (raw, json)
Hash identifier:          gksghQ5Kc89OPSx0iF9nEZxQ6F46ns/O/qBwuLslbMo=
Subject key identifier:   0D:A7:92:66:86:53:46:60:18:52:79:71:AE:9B:A7:E6:60:29:C9:A5
Certificate issuer:       /CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Certificate serial:       156C0C
Authority key identifier: C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/9e859aad90a443c7cabbd7359f0692e2f7c29598.roa
Signing time:             Thu 23 Mar 2023 21:15:06 +0000
ROA not before:           Wed 22 Mar 2023 21:07:24 +0000
ROA not after:            Sun 23 Mar 2025 21:07:24 +0000
asID:                     267815
IP address blocks:        45.173.72.0/24 maxlen: 24
                          45.173.73.0/24 maxlen: 24
                          45.173.74.0/24 maxlen: 24
                          45.173.75.0/24 maxlen: 24
                          2803:b060::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403916 (0x156c0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beb9fd789670f1c0912cb57347edb76d8534d3
        Validity
            Not Before: Mar 22 21:07:24 2023 GMT
            Not After : Mar 23 21:07:24 2025 GMT
        Subject: CN=9e859aad90a443c7cabbd7359f0692e2f7c29598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:44:e2:4d:06:1e:76:65:ea:4f:e7:9c:57:
                    e6:2f:66:a4:94:a8:7e:bd:39:fd:f1:91:ba:64:e5:
                    0c:6b:72:5b:2e:21:74:43:b1:21:c7:79:8c:66:6a:
                    99:7d:5e:0f:92:d4:de:2a:63:61:04:81:47:13:18:
                    78:9e:05:a3:40:35:49:3a:5f:d2:f5:b5:9f:7a:da:
                    66:4b:27:15:65:07:19:0e:1c:c3:1a:29:5a:57:a7:
                    aa:7d:7d:41:5a:c0:b5:56:85:15:16:b1:67:e6:ab:
                    f7:bc:8c:6a:9b:cf:fe:cc:71:2f:c3:f4:74:ca:ec:
                    ae:a2:85:73:75:4b:7f:e2:eb:0a:e9:6f:b0:dc:12:
                    3b:04:a5:53:d2:c0:35:6c:da:5e:9b:06:ba:51:12:
                    ab:29:a5:88:56:41:b9:00:b2:13:2d:59:d7:2c:2f:
                    f2:fc:90:69:a8:72:53:77:88:64:e3:b3:02:ad:d1:
                    b9:e9:25:d2:e8:29:ef:9c:bb:0c:67:e2:be:f4:d9:
                    ab:f0:9f:93:44:20:27:c8:2a:0b:3c:90:5b:84:e7:
                    56:27:eb:76:5a:e2:5a:e7:48:c3:b9:cd:53:36:cd:
                    17:f3:46:c6:75:31:27:fd:6c:9d:81:b9:33:bd:4e:
                    8d:b2:df:3c:cf:9b:a5:e0:31:d9:31:55:89:49:0b:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A7:92:66:86:53:46:60:18:52:79:71:AE:9B:A7:E6:60:29:C9:A5
            X509v3 Authority Key Identifier:
                keyid:C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/9e859aad90a443c7cabbd7359f0692e2f7c29598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/62beb9fd789670f1c0912cb57347edb76d8534d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.72.0/22
                IPv6:
                  2803:b060::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:e5:bf:05:3a:92:f4:2a:44:44:03:2a:ee:83:d5:70:6a:
         f5:3e:d0:d9:29:63:03:52:9a:67:26:fc:b4:64:dc:f2:97:59:
         9b:85:5b:96:5e:b4:49:ad:9e:f1:f7:c1:97:d9:ef:d4:49:a5:
         0b:c4:b8:82:98:13:78:91:c0:67:9e:81:68:a1:8e:76:82:aa:
         99:b9:45:07:40:9b:72:46:cd:6c:aa:d3:43:3a:85:40:d3:65:
         9f:6d:c1:91:c6:da:79:b3:76:a3:d4:c9:4b:86:c2:e7:0d:07:
         cc:1d:84:26:c4:ce:4a:01:0f:f5:d2:50:e6:ec:5b:20:7d:57:
         dd:da:75:21:13:d8:fa:df:6e:8e:e7:bd:3f:76:5c:12:10:53:
         cc:cb:32:4c:b7:15:de:16:d4:c2:01:29:a4:0c:0b:3c:82:92:
         dd:8d:1c:9e:cc:4a:c0:0c:96:78:9a:54:ce:6d:70:79:86:a2:
         59:20:ea:74:67:01:99:4b:ef:dd:82:ab:a0:50:28:1b:1e:45:
         28:46:6c:07:b8:5f:79:7b:00:58:d1:9e:94:38:a6:9c:99:fb:
         b7:60:f7:63:80:a2:aa:25:85:e5:74:9a:76:40:ec:cc:c1:3f:
         5e:7b:19:e7:54:b7:9a:ea:5a:2b:4c:7f:65:a7:17:87:d5:7b:
         3f:0d:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org