Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/2c3f73eef340905cc6bcc92aff75f514a879d8a1.roa
File:                     2c3f73eef340905cc6bcc92aff75f514a879d8a1.roa (raw, json)
Hash identifier:          5NYeIFdMmzCaXw7taFf3724rYBNic2dmCLxbaBK00fU=
Subject key identifier:   BE:3E:19:BF:D5:DC:D2:D6:8C:9C:4A:A7:8D:1D:F6:99:86:23:90:F3
Certificate issuer:       /CN=f2eb102562c4e2e7d977541fd8beef700e575efe
Certificate serial:       0ED6
Authority key identifier: 15:9E:F0:0A:78:1E:6B:BE:14:31:EC:2E:D7:85:F6:79:CE:4E:FF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2eb102562c4e2e7d977541fd8beef700e575efe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/2c3f73eef340905cc6bcc92aff75f514a879d8a1.roa
Signing time:             Tue 04 Jul 2023 01:53:12 +0000
ROA not before:           Mon 03 Jul 2023 01:53:12 +0000
ROA not after:            Fri 04 Jul 2025 01:53:12 +0000
asID:                     263157
IP address blocks:        45.167.156.0/24 maxlen: 24
                          45.167.157.0/24 maxlen: 24
                          45.167.158.0/24 maxlen: 24
                          45.167.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3798 (0xed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eb102562c4e2e7d977541fd8beef700e575efe
        Validity
            Not Before: Jul  3 01:53:12 2023 GMT
            Not After : Jul  4 01:53:12 2025 GMT
        Subject: CN=2c3f73eef340905cc6bcc92aff75f514a879d8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:ce:cb:90:0c:dc:b2:ac:4b:ab:82:eb:56:
                    07:50:70:bb:cc:6e:72:ce:f0:0e:14:65:43:a8:3d:
                    7b:de:d6:5f:fa:4c:4d:a0:08:7d:ba:7d:34:89:d4:
                    86:d2:9c:0c:1b:18:0e:32:9a:23:0a:ec:aa:d0:09:
                    f0:49:0f:f2:65:0f:f6:f3:ea:1c:b7:44:47:d9:83:
                    5c:19:79:1b:c3:0c:10:4b:97:d2:0f:8c:ba:02:a9:
                    6d:09:1a:f4:00:45:27:16:bd:73:97:4a:3f:ab:bf:
                    12:fe:a7:0b:d6:8a:02:06:f4:03:89:f1:17:59:26:
                    36:57:0e:29:a4:52:ad:be:41:83:52:45:77:cd:87:
                    0f:f4:c7:56:39:fc:2d:05:2f:7c:46:34:10:75:ea:
                    84:11:80:4e:3f:ad:03:e9:ab:d0:c5:f9:ed:d9:df:
                    6d:d2:ab:c0:e1:a1:67:3f:7c:34:72:8b:09:1b:8d:
                    9d:a1:53:54:17:3d:4b:13:6e:53:de:d2:a8:4e:ca:
                    66:88:19:ca:f7:bc:24:b7:c1:25:02:00:b6:d0:20:
                    0a:25:57:ed:17:98:bc:14:ff:e1:0a:8c:f1:9c:a4:
                    78:ee:a0:3c:67:77:b1:22:5d:5d:24:11:0d:3c:a2:
                    66:d0:9b:bc:51:4d:8c:ee:d3:f2:d7:e0:33:88:a4:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3E:19:BF:D5:DC:D2:D6:8C:9C:4A:A7:8D:1D:F6:99:86:23:90:F3
            X509v3 Authority Key Identifier:
                keyid:15:9E:F0:0A:78:1E:6B:BE:14:31:EC:2E:D7:85:F6:79:CE:4E:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2eb102562c4e2e7d977541fd8beef700e575efe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/2c3f73eef340905cc6bcc92aff75f514a879d8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/f2eb102562c4e2e7d977541fd8beef700e575efe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:51:7e:e6:ac:89:6e:13:e4:8b:2c:33:79:1c:81:e4:ed:
         60:d8:3e:ff:fe:5c:d6:42:86:4e:0d:95:54:26:2f:fc:0e:52:
         52:70:5e:fb:1f:c9:e1:98:f9:c0:0d:34:54:2d:8e:e4:d3:fe:
         3c:d3:6b:03:10:86:70:e5:87:dc:6d:9f:7f:4a:95:ab:8c:c2:
         09:8a:78:ab:40:16:88:87:f4:ec:5b:09:10:ea:5e:2d:55:c5:
         50:ac:84:6d:e9:0b:5f:39:57:a0:c7:b5:ba:8f:1d:bf:ef:2b:
         55:eb:35:de:42:11:11:f5:a1:7d:3e:77:fb:29:a6:0a:f7:fa:
         a4:d0:20:0d:be:3c:04:c5:53:5b:17:52:dc:8c:e2:28:c0:21:
         f8:c7:7c:06:ae:9d:f3:40:a7:60:b8:76:fc:69:14:d0:84:6b:
         e5:0f:67:07:34:7b:af:6d:ae:28:7b:e4:e9:4c:e8:3d:b9:b3:
         87:31:bd:5d:d8:13:e3:3b:f1:c8:68:39:81:c7:64:d2:b0:55:
         a0:2e:c4:2d:88:b1:0d:65:67:33:d9:2f:11:3e:f2:6d:b4:81:
         f4:47:d9:66:20:c3:03:eb:f2:d0:f9:af:8d:6f:5e:2d:44:30:
         69:10:63:6e:ee:f1:6d:4c:ab:9e:ff:17:f5:cc:5a:59:d7:35:
         3f:2d:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org