Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa
File:                     cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa (raw, json)
Hash identifier:          MCpByMxS2+bs0J8xIwMSBqWlr0MY/aE7HrB4OrFSZQY=
Subject key identifier:   76:33:1F:68:BA:97:01:C1:13:24:18:EA:1C:5E:B8:E1:F3:4B:6E:AB
Certificate issuer:       /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial:       21ED18
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa
Signing time:             Thu 06 Jul 2023 04:30:25 +0000
ROA not before:           Wed 05 Jul 2023 04:30:25 +0000
ROA not after:            Sun 06 Jul 2025 04:30:25 +0000
asID:                     52468
IP address blocks:        45.225.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223384 (0x21ed18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
        Validity
            Not Before: Jul  5 04:30:25 2023 GMT
            Not After : Jul  6 04:30:25 2025 GMT
        Subject: CN=cb3dace95ba29b59ff15c9e330d2f8b8e100c4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:76:24:59:47:44:ef:7e:05:83:94:ae:7f:3b:
                    07:ed:71:24:23:87:5f:6c:12:63:e5:0c:46:bb:01:
                    4a:c6:b5:88:40:25:1f:09:5e:47:fa:84:8e:95:0a:
                    27:08:ea:99:d3:db:c0:f5:2f:7d:72:7e:30:9d:28:
                    09:e5:6f:38:68:e9:11:0a:f4:cb:40:4a:a2:ef:dc:
                    e8:8a:3d:36:2e:70:22:9f:24:61:c8:93:57:7f:8d:
                    0a:de:ab:dc:84:86:40:2d:86:7f:a4:20:a7:e5:26:
                    3a:68:bd:35:51:65:a8:7d:52:8b:d5:e4:07:2f:66:
                    57:ae:81:7d:de:cc:44:da:f7:02:d5:49:37:d0:d6:
                    32:78:32:f1:bc:47:e7:92:c4:93:b1:96:db:d1:45:
                    55:a7:76:35:2a:8d:e6:47:81:c9:e5:f8:59:ac:c2:
                    96:65:4a:40:46:0b:7e:ce:25:aa:80:31:4b:c6:fe:
                    98:07:7b:7a:b4:b4:cd:6d:ee:33:c9:0b:28:fc:57:
                    e3:10:55:d1:54:27:09:46:37:ff:ad:41:cf:63:f5:
                    5c:ca:03:b8:af:7f:1c:28:e9:fa:3e:ce:3d:4f:14:
                    f1:06:37:a4:99:04:b9:91:e6:82:78:d2:e1:9d:17:
                    94:53:d5:7d:e4:c4:a5:64:7e:46:4d:a1:db:05:02:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:1F:68:BA:97:01:C1:13:24:18:EA:1C:5E:B8:E1:F3:4B:6E:AB
            X509v3 Authority Key Identifier:
                keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/cb3dace95ba29b59ff15c9e330d2f8b8e100c4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:15:dc:d9:c9:22:40:4e:12:b0:0f:3e:ea:67:95:97:aa:
         c2:cb:a8:59:49:2c:f3:98:b4:06:e6:7f:96:64:c9:dc:0b:80:
         ad:0f:43:18:4e:19:23:95:fc:90:e5:e3:04:51:6e:0f:38:2b:
         43:8a:b5:f1:41:c6:17:d9:84:6f:41:c1:23:d9:65:28:aa:9c:
         a2:36:7b:e4:96:39:9c:89:21:9c:99:ee:80:94:3c:43:5f:93:
         15:ca:37:4a:a8:b1:23:47:98:1c:27:0f:06:f8:89:4a:ea:de:
         45:50:26:3e:02:dc:f8:69:d6:f1:75:c7:28:5b:19:c2:2f:03:
         25:97:cc:da:03:d1:a0:01:a4:db:23:74:19:01:9c:49:63:fd:
         99:28:5b:fa:18:1c:60:9a:b2:fd:d9:cf:d5:09:14:61:6a:6c:
         49:f6:96:27:ee:0b:4f:4c:17:1d:f8:59:f5:b1:ce:95:1d:5a:
         4f:d5:83:51:92:aa:9c:1a:d2:2f:ef:01:80:d1:61:64:34:6b:
         00:bd:e7:2c:f4:81:f4:77:b3:70:b0:63:1d:a8:57:11:29:df:
         59:c4:3b:bb:25:e0:7b:70:bf:17:dc:55:3d:5f:0f:7d:e0:cd:
         54:8c:b0:bd:3f:1e:21:b6:6e:c9:72:b7:e7:fb:c9:0e:97:95:
         68:96:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org