Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa
File:                     22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa (raw, json)
Hash identifier:          yPL64i38WTAWGiDmt0cVb/vW/KfPVmu8zC9KKHphRnY=
Subject key identifier:   69:00:68:BE:8B:17:31:A2:75:80:B7:D6:2B:CE:31:D8:60:CD:0B:DE
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       142825
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa
Signing time:             Sun 14 Jan 2024 07:30:04 +0000
ROA not before:           Sun 14 Jan 2024 07:30:04 +0000
ROA not after:            Tue 13 Jan 2026 07:30:04 +0000
asID:                     26506
IP address blocks:        45.227.89.0/24 maxlen: 24
                          2801:114:7::/48 maxlen: 48
                          2801:114:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320997 (0x142825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Jan 14 07:30:04 2024 GMT
            Not After : Jan 13 07:30:04 2026 GMT
        Subject: CN=22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:fa:62:c5:42:d2:6e:46:3c:96:05:22:32:
                    9c:7c:12:06:e7:87:74:70:07:52:e0:f1:81:ba:43:
                    88:7f:2f:34:e2:7e:8a:4b:85:1b:26:bd:54:e7:db:
                    af:e2:dd:3c:93:44:d7:56:d8:af:29:f1:88:d5:fe:
                    92:1d:2f:1f:2f:03:de:ac:6b:e7:80:92:55:69:31:
                    f2:69:bc:d7:f0:36:c6:66:9f:91:75:f9:eb:d2:30:
                    fe:e4:55:25:09:66:43:98:f6:22:c6:b1:d2:d5:e6:
                    aa:24:1c:bc:7f:0b:49:06:ad:27:02:f3:b9:4e:4a:
                    a1:97:3f:80:73:d6:85:86:ae:02:d1:9c:28:d8:5d:
                    1d:bf:9f:88:48:8e:f0:f9:5d:0a:1b:44:f8:6d:aa:
                    9a:a8:1e:dc:b3:3a:8e:cb:eb:fd:f1:7f:04:5f:4a:
                    d8:f4:1d:eb:7f:5b:a2:5f:a5:da:36:fd:90:f3:57:
                    49:b5:a2:a8:37:eb:37:e8:ed:cc:63:74:8c:c7:c9:
                    59:29:06:6e:19:75:de:fe:70:22:1d:0b:a8:5d:d5:
                    86:ff:18:a2:57:34:d6:42:53:76:bd:9e:32:b8:7c:
                    fb:37:2c:10:a4:f9:74:92:71:14:d9:2a:b0:6f:4b:
                    d2:dd:c6:78:43:29:b3:9d:94:db:b7:26:e4:9e:c5:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:00:68:BE:8B:17:31:A2:75:80:B7:D6:2B:CE:31:D8:60:CD:0B:DE
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.89.0/24
                IPv6:
                  2801:114:7::-2801:114:8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:3b:fc:14:f5:4a:4d:74:86:0b:7f:fd:91:de:44:fa:4b:
         f9:57:4b:42:88:0a:46:cb:a4:94:7e:9a:ae:3b:c6:f3:f3:10:
         68:4a:6e:90:c9:42:12:b7:e3:6c:b8:0c:ae:c0:e8:6b:72:67:
         93:dd:06:70:bb:e1:f0:9c:f0:8a:ba:48:8e:b0:0d:89:11:8f:
         22:06:1c:3b:7f:b4:80:b4:bf:b8:5d:33:f6:98:fc:cb:4c:0f:
         5f:c8:40:12:6e:76:ba:b9:1a:c4:44:bb:3b:af:85:87:9f:0e:
         fd:d8:c7:5a:eb:36:95:ad:f9:e6:65:20:aa:74:1e:5a:32:1c:
         6c:81:15:d6:11:5b:56:c1:5e:b1:37:4d:cf:f5:91:6d:57:48:
         04:8f:e4:d3:0a:47:0d:68:71:20:18:a3:ba:6f:db:31:21:01:
         9c:46:ad:bd:52:d0:a5:3f:6b:8e:1b:c3:88:03:5c:d4:7c:ee:
         b2:2c:24:61:e0:cd:22:14:1b:21:69:53:5f:59:a5:fe:df:42:
         02:98:b6:ff:7f:59:dd:8b:94:bb:01:b6:bb:c3:67:11:2e:b7:
         77:be:2e:e7:2b:00:4f:c9:d9:7e:a5:f1:b7:05:0e:ae:57:0f:
         18:cf:95:9f:d5:f2:0e:27:dd:66:1b:df:8c:32:51:24:05:9b:
         62:e3:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org