Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/feddfad73df7bcf8c6075e24eb79caa939f44831.roa
File:                     feddfad73df7bcf8c6075e24eb79caa939f44831.roa (raw, json)
Hash identifier:          NGa7StQ1Ol1JRjr3LaY6Lue21nC4W+prdQLH4oCHsEM=
Subject key identifier:   0B:02:97:C2:E3:83:FF:38:14:2E:DD:1E:7A:C8:28:25:02:B2:3D:7C
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       08754E
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/feddfad73df7bcf8c6075e24eb79caa939f44831.roa
Signing time:             Thu 15 Sep 2022 04:15:42 +0000
ROA not before:           Wed 06 Oct 2021 03:00:00 +0000
ROA not after:            Mon 15 Jan 2024 03:00:00 +0000
asID:                     26506
IP address blocks:        45.227.89.0/24 maxlen: 24
                          2801:114:7::/48 maxlen: 48
                          2801:114:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554318 (0x8754e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Oct  6 03:00:00 2021 GMT
            Not After : Jan 15 03:00:00 2024 GMT
        Subject: CN=feddfad73df7bcf8c6075e24eb79caa939f44831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:66:c1:31:44:b7:c7:c2:3a:4b:46:36:92:
                    a4:c7:e9:7d:93:f5:ee:ce:6c:9f:66:af:1b:20:77:
                    60:7c:5a:ba:ba:29:d1:aa:26:21:f1:51:d0:99:e9:
                    94:fc:5a:2c:1d:c0:c5:b8:99:78:58:86:04:f3:b6:
                    3e:02:fc:37:2e:a0:23:ed:90:b0:30:e9:9d:40:e5:
                    81:81:23:ab:97:b0:36:9c:2a:17:b4:33:4a:21:f7:
                    f0:4a:e5:fe:10:ed:3b:ef:e1:2f:22:83:97:b2:67:
                    86:71:5d:1e:e3:4f:d1:05:2c:0c:ef:91:65:4f:ee:
                    61:41:8a:fd:3a:40:40:2b:60:33:f6:4f:99:ec:e1:
                    19:a4:e9:40:a7:2e:82:f6:6c:e6:ea:54:f5:7c:71:
                    05:6e:af:0b:24:9b:cf:de:ee:8e:ad:cd:7c:ea:f6:
                    96:33:32:29:5c:a0:cd:12:da:38:a1:d8:e3:9c:4d:
                    b7:6b:70:be:15:49:aa:4c:c9:3c:e7:e2:23:ce:7a:
                    47:55:3c:7c:a5:cd:cf:14:a2:0c:27:0d:81:0a:9f:
                    89:e9:1f:46:a8:58:47:c5:47:b8:32:11:05:46:85:
                    01:09:60:fc:02:3f:9e:fe:d6:e5:49:5c:82:8f:8c:
                    30:59:cf:69:80:e0:ce:81:89:ce:45:3b:5e:40:24:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:97:C2:E3:83:FF:38:14:2E:DD:1E:7A:C8:28:25:02:B2:3D:7C
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/feddfad73df7bcf8c6075e24eb79caa939f44831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.89.0/24
                IPv6:
                  2801:114:7::-2801:114:8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:00:5f:0a:89:82:bf:c4:a2:41:2b:99:67:31:6e:1d:f9:
         7e:3e:7b:27:19:bf:d0:fb:bb:eb:ce:6a:72:91:9d:36:ed:fe:
         23:ec:52:9c:4d:4d:ba:26:2b:29:84:45:06:41:e9:45:ff:ae:
         33:f9:6e:58:a0:24:c7:22:14:a7:6f:97:ce:fe:56:18:a2:9b:
         7d:9c:eb:0c:0e:4e:de:76:fe:48:98:6c:4a:cc:84:5b:4a:3d:
         95:69:f4:0c:ce:ca:8d:cb:c6:69:fa:2b:79:96:74:f4:09:c4:
         65:61:ac:3c:05:9f:4c:92:12:01:c8:5f:a0:1c:26:04:0a:56:
         45:a0:9e:42:60:b6:e8:95:e3:89:c0:20:23:8e:6e:d6:16:c6:
         55:fc:d4:39:a5:cd:2c:f4:54:94:61:93:2d:7c:ac:61:6f:37:
         84:1d:31:c1:c8:b9:32:eb:80:bc:6f:dd:84:e8:96:b2:95:36:
         ca:b8:57:44:c5:33:7f:48:fe:e5:da:1f:c5:a9:be:8c:1e:da:
         f1:d7:23:f5:f9:46:de:ef:23:65:fd:04:d6:85:78:92:2e:4b:
         08:21:79:0c:2c:86:4a:7d:bd:18:95:e3:82:cf:36:33:44:23:
         57:f6:69:dc:10:4e:21:25:7c:2b:7e:9c:3f:1c:9b:19:3c:b3:
         ef:e9:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org