Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/3d690a44218a32aba80db56feae228ed4bf09d5f.roa
File:                     3d690a44218a32aba80db56feae228ed4bf09d5f.roa (raw, json)
Hash identifier:          ABkjn9ubi//wnLr5f68p8UwhYdwkLbCNIMuizkQuTU4=
Subject key identifier:   5F:26:F2:4B:D1:A6:0D:1C:55:92:2A:6F:A1:2F:14:47:F8:77:6A:FD
Certificate issuer:       /CN=96b6385dac5d112ac08ad68e528602afddcc7d04
Certificate serial:       1D3370
Authority key identifier: 05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/3d690a44218a32aba80db56feae228ed4bf09d5f.roa
Signing time:             Fri 24 Mar 2023 08:31:50 +0000
ROA not before:           Thu 23 Mar 2023 08:31:50 +0000
ROA not after:            Sat 22 Mar 2025 08:31:50 +0000
asID:                     266783
IP address blocks:        45.189.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913712 (0x1d3370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b6385dac5d112ac08ad68e528602afddcc7d04
        Validity
            Not Before: Mar 23 08:31:50 2023 GMT
            Not After : Mar 22 08:31:50 2025 GMT
        Subject: CN=3d690a44218a32aba80db56feae228ed4bf09d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:ee:6e:28:e2:50:64:d0:4e:16:b0:47:18:
                    93:df:dc:3f:b4:10:6e:d4:a6:1e:e3:3c:03:c0:4f:
                    2f:81:70:7d:38:b4:37:6e:41:2b:ec:3f:fc:99:f5:
                    71:14:00:6f:e0:65:10:12:20:94:f1:fd:9c:2f:66:
                    65:ba:35:88:e6:27:04:bc:cf:20:9a:3a:8f:41:30:
                    0c:8c:29:55:98:a7:c1:43:bf:36:28:16:41:7e:bd:
                    a2:a4:b6:b9:a3:e3:b5:39:aa:64:bf:44:d7:48:a9:
                    52:46:de:62:b9:c5:61:d2:f1:47:75:e7:a0:26:2f:
                    74:a5:73:b9:56:0b:47:d5:39:20:96:f3:4f:98:61:
                    41:bb:b7:68:8e:25:b3:68:fd:06:d4:78:77:db:c6:
                    f4:0a:ee:15:b3:6d:b7:e6:20:3b:d5:e3:91:d7:e0:
                    7a:a4:52:00:2b:a9:4b:f2:97:f9:4a:4f:7e:17:b5:
                    93:2f:1a:5e:de:ef:e5:91:c6:2e:46:e9:db:29:10:
                    35:21:18:c6:0b:fb:9d:9c:19:11:d8:f6:79:57:a7:
                    74:17:7a:05:f6:0b:6b:c0:90:6f:9b:39:35:22:01:
                    25:0c:34:50:fa:4c:2a:68:a0:10:22:47:f0:c1:f1:
                    f7:cd:02:92:cc:cf:6e:f2:eb:7a:9a:9a:a1:24:80:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:F2:4B:D1:A6:0D:1C:55:92:2A:6F:A1:2F:14:47:F8:77:6A:FD
            X509v3 Authority Key Identifier:
                keyid:05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/3d690a44218a32aba80db56feae228ed4bf09d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:fc:1b:62:11:e3:de:ee:0b:a6:00:0a:17:98:7a:24:60:
         5a:3c:b5:90:0d:19:a3:d8:b7:40:a2:b2:2f:d2:71:54:96:89:
         3f:89:0e:ac:97:62:71:e1:a8:2a:1d:40:0e:95:85:f8:f8:43:
         e0:27:aa:24:f0:74:95:da:45:d8:e5:15:cd:c0:1c:52:62:ac:
         b6:cb:d0:3f:a0:56:e9:e9:61:3d:c6:28:d2:7a:ab:b1:7c:09:
         ec:2a:8a:03:f7:69:21:2e:73:c6:82:d2:2f:9d:d1:0d:3c:ed:
         40:38:d3:f4:5e:47:3f:cd:86:45:83:81:86:2c:ef:ee:06:7a:
         c1:15:e0:b2:63:a4:05:5d:c6:46:27:64:54:28:e5:05:5d:bc:
         73:fc:43:08:57:21:d7:ed:ed:84:c8:30:f8:79:48:3f:69:97:
         e0:bf:1a:53:24:ef:0c:c9:4f:6b:8c:22:32:d3:a5:a5:50:6b:
         09:28:18:4e:b6:ef:ac:1a:1c:61:2f:a4:45:46:1d:52:69:0e:
         0d:80:a7:0c:a4:c7:2b:10:cb:ef:b1:9f:8d:5d:d6:05:a2:bd:
         98:37:a4:eb:63:01:ab:7a:ba:7b:8d:c3:b3:ca:f0:44:47:70:
         8b:8f:04:1c:f3:21:13:d0:4c:9c:21:13:32:7f:e8:cf:0b:11:
         84:9b:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org