Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/1b73200a7617df8cc9eda93b77afb3df15b029e5.roa
File:                     1b73200a7617df8cc9eda93b77afb3df15b029e5.roa (raw, json)
Hash identifier:          CXl8C7j4BPdxkZuIFo6Ff1TejJvH4rdxtZPn4zWInxQ=
Subject key identifier:   32:B5:B9:C1:B8:55:6C:0F:9F:9B:56:E6:5F:D4:F8:03:A6:E4:FC:39
Certificate issuer:       /CN=8e04677b51c6fee610279bb07461734e534b699e
Certificate serial:       25E5E2
Authority key identifier: 5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/1b73200a7617df8cc9eda93b77afb3df15b029e5.roa
Signing time:             Fri 16 Feb 2024 07:30:12 +0000
ROA not before:           Fri 16 Feb 2024 07:30:12 +0000
ROA not after:            Sun 15 Feb 2026 07:30:12 +0000
asID:                     267782
IP address blocks:        45.171.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2483682 (0x25e5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e04677b51c6fee610279bb07461734e534b699e
        Validity
            Not Before: Feb 16 07:30:12 2024 GMT
            Not After : Feb 15 07:30:12 2026 GMT
        Subject: CN=1b73200a7617df8cc9eda93b77afb3df15b029e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:d8:25:d6:c4:4d:77:e6:c0:08:22:c3:e2:
                    9e:a7:a7:a0:c2:d8:5d:c9:db:56:4b:ac:94:62:6f:
                    b4:fe:21:ee:3e:21:90:46:4d:9d:e8:4f:d4:ec:5e:
                    7e:59:8c:b6:45:c0:6c:30:a3:6b:bb:63:b1:cc:b9:
                    cd:4a:ff:8d:6f:d5:0e:8f:84:c5:83:57:77:96:98:
                    d2:0e:83:ac:dd:d7:4c:92:fe:88:e8:43:38:6d:9a:
                    2f:98:63:84:a4:5d:df:ed:1d:4e:8c:bc:df:bc:18:
                    a0:66:2f:9e:20:3e:50:49:1e:2f:53:0f:da:0e:08:
                    7b:06:8e:36:f2:01:85:9e:15:58:f5:b7:aa:bf:58:
                    e0:3f:f7:e6:6d:1a:d0:8e:06:1f:c8:ca:77:33:2b:
                    62:b7:9e:4c:4f:77:fb:53:0d:c3:be:6f:d4:b2:3b:
                    96:1e:60:5f:92:e9:4c:b8:48:69:ed:bd:ca:3b:b1:
                    94:dd:fd:38:17:df:1b:48:8b:2d:d8:f7:48:bb:fc:
                    9b:f6:26:d8:b9:e6:48:5f:84:44:42:6b:7a:29:8f:
                    55:65:1e:56:59:38:79:7e:5e:29:42:18:10:92:48:
                    47:f2:b7:4e:a5:ba:94:fb:a0:4f:fe:5e:d8:0e:1d:
                    6c:18:1d:72:67:15:75:49:83:fc:99:3b:c1:73:4c:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:B9:C1:B8:55:6C:0F:9F:9B:56:E6:5F:D4:F8:03:A6:E4:FC:39
            X509v3 Authority Key Identifier:
                keyid:5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/1b73200a7617df8cc9eda93b77afb3df15b029e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:3a:ae:62:ca:91:ad:c5:63:be:2e:e5:60:73:bc:44:6c:
         9d:6f:8c:14:2f:4c:5e:83:03:5d:45:98:bb:05:29:22:9d:1d:
         cb:ff:ca:39:88:9b:0d:c4:12:fd:3f:f9:c1:4d:d1:c2:8f:0f:
         19:4b:f4:85:b5:2b:29:02:d9:d9:d7:01:e1:56:e3:b3:0b:2b:
         08:f3:db:de:8e:a5:5c:99:bf:fa:85:ef:b2:c7:d5:52:86:ab:
         c1:37:3c:2e:5a:a6:99:f6:d7:af:fc:38:d7:47:15:dd:34:96:
         86:a5:4f:44:a5:9d:16:21:34:4a:59:b7:c3:d9:17:fe:60:51:
         4c:51:78:fa:3e:e4:b8:84:d2:d0:e1:8b:e3:d6:2a:96:79:33:
         47:e2:f2:71:a5:44:b8:45:67:b7:e7:5c:31:8b:93:01:81:21:
         63:45:33:eb:35:8e:8b:23:7c:54:a2:7d:1b:f7:9c:e0:8e:04:
         b3:fb:c2:d3:df:71:eb:4f:21:95:7c:9f:63:59:de:5e:ba:6a:
         ca:3b:83:3a:08:63:39:11:ba:36:b3:f5:50:dc:55:bb:ee:b7:
         a8:93:4a:92:8b:b4:c2:c3:1b:85:b2:4c:99:73:73:14:8a:e7:
         4f:06:20:73:38:a8:f7:21:4b:1d:8a:94:10:37:46:1c:c5:fe:
         81:33:cc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org