Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/ef9bbd6adf907175e1bd367cd0e0e4baeabdcf68.roa
File:                     ef9bbd6adf907175e1bd367cd0e0e4baeabdcf68.roa (raw, json)
Hash identifier:          vhPKa4CgokudtjzyS/PaJgSsGVWeens2BnThnXoJteY=
Subject key identifier:   33:43:BF:A9:8C:84:5F:56:CC:EA:9B:81:28:18:1F:ED:58:57:DF:A9
Certificate issuer:       /CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
Certificate serial:       1D1D48
Authority key identifier: B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/ef9bbd6adf907175e1bd367cd0e0e4baeabdcf68.roa
Signing time:             Sat 01 Jul 2023 15:32:52 +0000
ROA not before:           Fri 30 Jun 2023 15:32:52 +0000
ROA not after:            Tue 01 Jul 2025 15:32:52 +0000
asID:                     27951
IP address blocks:        45.175.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908040 (0x1d1d48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
        Validity
            Not Before: Jun 30 15:32:52 2023 GMT
            Not After : Jul  1 15:32:52 2025 GMT
        Subject: CN=ef9bbd6adf907175e1bd367cd0e0e4baeabdcf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:85:9f:7d:77:eb:04:ef:fc:71:04:8a:0a:
                    64:3b:4c:92:de:f4:e8:58:eb:d2:89:ef:8c:17:b8:
                    8d:ca:aa:51:04:52:fa:92:79:2a:f5:42:b0:78:05:
                    0b:95:93:2a:aa:3c:fc:ea:59:f2:fb:57:77:54:6b:
                    a0:c3:ea:d9:0e:87:30:ca:94:c1:b5:ba:3a:34:d7:
                    06:75:bd:51:ce:ca:ae:31:d0:82:9b:75:c6:35:98:
                    47:9f:b4:7f:3b:e3:74:b5:17:95:2e:34:44:98:6f:
                    9d:d4:fe:5c:fb:d9:cc:43:ca:b0:dd:2b:88:65:7c:
                    ba:ba:e0:37:cc:8e:b1:f7:2c:89:de:5a:76:93:e9:
                    53:8c:af:f4:f3:81:b6:07:6e:39:9d:51:66:d5:4b:
                    6f:07:db:08:7c:83:60:44:69:0e:46:00:33:89:dd:
                    0b:b5:37:68:fe:71:26:56:51:7f:b3:d2:6b:ae:d9:
                    f9:14:cc:a4:47:75:96:04:2e:17:31:07:f9:ea:df:
                    9b:45:34:fe:ab:37:d5:af:1e:2f:33:bb:8d:e3:9a:
                    66:06:04:f2:0f:38:7d:6d:29:6c:a3:78:3a:ac:b3:
                    6a:46:52:87:cf:8c:4a:bc:66:5d:b0:f0:a4:aa:df:
                    8e:1c:46:6f:6a:b8:82:33:02:b1:05:d5:0b:8f:65:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:43:BF:A9:8C:84:5F:56:CC:EA:9B:81:28:18:1F:ED:58:57:DF:A9
            X509v3 Authority Key Identifier:
                keyid:B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/ef9bbd6adf907175e1bd367cd0e0e4baeabdcf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:90:32:74:ee:a2:bf:2a:15:76:5d:fa:d1:83:09:71:49:12:
         f2:40:ea:b0:4b:3e:46:59:2b:4d:8b:a1:99:5a:52:65:e3:d7:
         30:9f:41:12:bf:68:45:4b:57:fd:39:ab:03:c6:bb:78:96:28:
         16:77:ac:1c:a3:54:be:96:b6:10:95:bd:c4:c4:49:bc:b3:36:
         a2:7c:0c:07:17:3c:8d:e1:6b:cd:73:a8:75:b0:d5:92:64:8a:
         e8:bd:96:bb:7c:6f:d2:89:0a:50:23:43:be:bd:35:79:f6:2a:
         21:74:b2:6d:cc:b0:0a:33:66:7d:0c:fa:05:eb:54:7a:1a:2a:
         1f:61:86:09:22:3a:5b:71:5a:7b:11:2b:2b:1e:47:8b:02:9d:
         7a:96:85:5a:18:d0:13:6e:dd:9e:06:64:57:fd:b1:d1:0a:e2:
         07:df:be:51:a4:ea:1a:8b:58:14:1d:b2:ea:97:ad:69:b6:c7:
         67:16:57:19:02:97:a1:ec:6b:57:61:0c:9b:e4:f4:b8:c9:10:
         69:f4:ca:1a:8e:0b:1c:86:f4:64:07:8e:e6:ad:f4:8f:c2:25:
         6a:f5:8b:71:72:80:ec:77:1d:16:9d:cc:67:86:a0:fc:1d:2b:
         e6:c3:a7:09:5e:82:b7:2f:d7:4a:17:8d:ec:d5:77:b9:4d:8f:
         b3:5d:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org