Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/45f7b1a8e8e19570b1aea57961a1ad5397eb40d7.roa
File:                     45f7b1a8e8e19570b1aea57961a1ad5397eb40d7.roa (raw, json)
Hash identifier:          un72QEfOVWsvcJDfwqj2ZWV/PmeFvAD/HNXGLXQj6Ns=
Subject key identifier:   7B:53:95:FE:EE:AE:55:31:BC:97:1D:6C:D6:FF:18:56:13:2E:AD:7F
Certificate issuer:       /CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
Certificate serial:       1F6937
Authority key identifier: EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/45f7b1a8e8e19570b1aea57961a1ad5397eb40d7.roa
Signing time:             Fri 24 Mar 2023 08:32:29 +0000
ROA not before:           Thu 23 Mar 2023 08:32:29 +0000
ROA not after:            Sat 22 Mar 2025 08:32:29 +0000
asID:                     266655
IP address blocks:        45.225.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058551 (0x1f6937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
        Validity
            Not Before: Mar 23 08:32:29 2023 GMT
            Not After : Mar 22 08:32:29 2025 GMT
        Subject: CN=45f7b1a8e8e19570b1aea57961a1ad5397eb40d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:82:02:c6:05:e2:c3:96:5e:0b:a9:7f:4d:
                    d1:87:e7:22:79:a9:8d:f9:e1:bf:1b:82:00:b8:4a:
                    6b:a2:d4:aa:b1:23:c9:61:db:e2:a8:e3:d7:c8:fc:
                    26:b7:76:8f:e1:8a:f1:ec:1f:37:2c:b8:ea:96:85:
                    7a:78:a1:70:88:96:fb:9a:cc:e2:c4:d5:10:95:b6:
                    52:55:9e:d2:c3:cf:d7:ca:82:3b:cc:58:03:52:3a:
                    fd:e6:e3:25:79:7e:05:fa:e9:0c:51:43:a1:62:7a:
                    0a:df:c1:6d:73:f6:4d:9d:a5:48:48:86:e7:8f:7b:
                    d9:9a:4e:2f:12:53:2f:ee:c9:03:12:1b:a0:2a:55:
                    57:9b:c6:6c:b6:cf:47:9c:79:60:7d:fe:78:60:0b:
                    bb:42:19:72:01:8d:b5:5b:85:c8:aa:a6:05:7b:44:
                    70:b3:f7:da:85:21:2e:f9:fd:89:07:cb:7c:c3:ad:
                    05:90:52:a7:5e:98:c2:00:65:16:80:65:49:88:e6:
                    65:99:44:99:04:39:50:15:27:6f:20:6a:7a:1d:d7:
                    ce:fe:e1:e9:dd:35:9f:15:32:99:cb:c5:32:fa:b0:
                    ed:f2:e3:d6:18:82:12:ad:40:bb:69:37:fb:0b:b4:
                    5a:31:e3:08:a8:71:a4:57:6e:4b:99:7a:b3:fd:d9:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:95:FE:EE:AE:55:31:BC:97:1D:6C:D6:FF:18:56:13:2E:AD:7F
            X509v3 Authority Key Identifier:
                keyid:EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/45f7b1a8e8e19570b1aea57961a1ad5397eb40d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/9c039812edab95b305292dc8f1a3339fcf9cd5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:52:9a:ca:46:04:ea:5e:5c:0b:06:7a:ea:da:d0:9f:e3:
         74:15:e9:f8:3a:f9:d5:26:70:f2:3c:e6:d9:7e:7b:b9:39:d3:
         49:ca:6c:00:a5:c5:20:94:b9:91:b9:f4:24:5b:ed:1f:d1:d6:
         dd:e9:fe:12:ce:d7:14:f1:bf:66:a7:ad:f3:9f:11:63:5b:b8:
         6d:45:00:09:00:f1:be:e0:c2:c8:be:51:9b:0e:30:4c:0d:a3:
         ec:b4:ed:b5:48:8d:8b:a8:77:33:69:6b:83:f9:0a:92:d0:1a:
         44:28:bd:a5:b6:6e:6c:24:09:ac:29:55:b4:9b:43:df:72:a1:
         ee:b4:04:d1:b9:29:e2:d4:97:9d:75:92:c7:9f:f7:ee:c2:bf:
         02:39:81:fa:8d:8d:6c:f8:5e:49:0b:58:8b:04:7c:ab:a0:00:
         4c:4e:b3:e6:b9:92:0f:b6:7f:40:90:89:62:2f:98:6e:21:98:
         4d:94:39:c4:e4:dd:fe:46:9d:2b:2d:d1:a3:d8:8b:ef:2f:0e:
         83:db:d7:81:5c:0d:ef:0a:9a:48:ac:53:4c:b8:3c:a5:05:79:
         54:ff:3b:d4:fb:dc:03:fb:a0:f1:fb:57:85:fa:34:3a:fb:73:
         71:de:f5:5e:b0:bd:7c:02:07:65:72:c7:4d:37:72:1e:c8:18:
         15:bd:58:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org