Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0427d905-72d3-4371-83ad-94c726e06708/0921401149dd81033986a1db3e07e890df4ec197.roa
File:                     0921401149dd81033986a1db3e07e890df4ec197.roa (raw, json)
Hash identifier:          zSHUjepgfgf7uH74r+rY5FIkiaD+h8rD2bOwjbCFYWo=
Subject key identifier:   4C:D3:97:C8:9E:E3:33:AD:F7:D7:D4:C9:98:89:54:A2:F1:CB:3E:98
Certificate issuer:       /CN=50e9bc6d65ca56fe0dc0935907896366c73b299d
Certificate serial:       16F777
Authority key identifier: 22:B3:3D:B7:EB:80:0A:8A:1A:72:18:90:6F:E6:41:2D:1E:CF:32:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50e9bc6d65ca56fe0dc0935907896366c73b299d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0427d905-72d3-4371-83ad-94c726e06708/0921401149dd81033986a1db3e07e890df4ec197.roa
Signing time:             Mon 18 Jul 2022 03:11:02 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Sun 04 May 2025 03:00:00 +0000
asID:                     269753
IP address blocks:        45.182.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505143 (0x16f777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50e9bc6d65ca56fe0dc0935907896366c73b299d
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : May  4 03:00:00 2025 GMT
        Subject: CN=0921401149dd81033986a1db3e07e890df4ec197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:8a:fa:c9:95:a8:50:07:67:69:b7:1e:0e:
                    66:95:7d:4b:df:c6:35:fc:3d:6e:ea:52:5f:f0:ca:
                    e4:4c:c6:e4:4e:77:39:f8:ce:c8:89:ff:61:14:00:
                    41:59:95:68:04:a0:81:ef:a3:e7:7b:0a:be:56:67:
                    d3:bb:da:71:c6:73:70:09:54:5c:40:dd:1b:80:45:
                    f1:40:ef:11:3d:18:b6:5d:5b:47:6c:c6:a0:02:9d:
                    c6:94:d2:d7:c2:a6:77:8c:b8:36:21:1f:d3:49:af:
                    b7:db:01:cc:66:c9:27:63:b8:4e:ca:a8:a8:28:25:
                    0c:22:83:d6:a5:dd:78:39:34:0f:6c:f1:39:b9:1f:
                    e0:55:c4:f0:5f:62:95:ba:3d:e5:89:35:aa:0b:ca:
                    12:2a:a9:a7:49:96:8e:e2:49:7b:d4:9f:4e:a6:bb:
                    8b:d2:06:0b:aa:e4:22:b4:89:ac:ba:c8:72:2f:61:
                    b2:c0:63:6c:e6:99:fd:0d:61:a0:23:37:91:80:46:
                    24:90:06:04:7e:d6:95:4a:18:27:54:09:f9:e0:bf:
                    88:ce:e7:be:d6:fc:58:24:94:04:66:1f:24:56:6d:
                    96:56:e0:2b:f2:dd:b7:91:31:04:cc:09:36:ad:d2:
                    36:dc:0c:6f:08:ac:e9:84:b3:c9:86:51:69:e8:17:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:97:C8:9E:E3:33:AD:F7:D7:D4:C9:98:89:54:A2:F1:CB:3E:98
            X509v3 Authority Key Identifier:
                keyid:22:B3:3D:B7:EB:80:0A:8A:1A:72:18:90:6F:E6:41:2D:1E:CF:32:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50e9bc6d65ca56fe0dc0935907896366c73b299d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0427d905-72d3-4371-83ad-94c726e06708/0921401149dd81033986a1db3e07e890df4ec197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0427d905-72d3-4371-83ad-94c726e06708/50e9bc6d65ca56fe0dc0935907896366c73b299d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:cb:4b:1b:0b:1d:d1:be:fd:da:dc:0e:34:16:77:17:f2:
         9f:ab:b9:22:34:c2:fa:20:89:d5:fe:ce:7e:52:61:dd:41:de:
         22:be:27:32:9b:11:e7:30:3b:b8:de:ab:57:d4:e6:7f:73:ee:
         43:6b:90:25:c3:a6:01:5b:1b:38:f7:c2:31:86:54:dd:53:92:
         80:92:95:07:2e:10:f5:ca:66:45:6f:75:47:67:ee:49:9e:4b:
         14:5a:86:c8:1a:ff:a3:4e:a0:bf:fd:49:42:87:25:67:0f:f2:
         39:08:fd:c6:a0:db:61:6d:fe:9f:74:5c:ec:68:04:5b:65:19:
         b9:62:be:06:dd:16:34:ab:2e:90:15:ca:dd:70:20:47:cc:90:
         e2:4f:c9:fc:9e:66:d8:d1:0c:35:9a:89:0c:8d:0e:16:02:53:
         6a:9d:ea:9f:f2:7e:bd:89:92:65:af:41:59:68:34:0c:9c:86:
         5c:2d:50:80:3b:c3:dd:59:b3:8c:86:b3:e8:cb:ec:3d:e0:42:
         30:8e:ae:10:61:f5:7a:39:b9:56:f0:5b:4a:79:f6:c3:66:33:
         23:4c:e2:e6:d6:67:d0:1e:1d:5d:ab:61:ec:40:24:36:e8:ef:
         b8:8f:d1:5c:5e:34:23:dc:d5:08:c1:df:8c:dd:ad:7e:91:1c:
         12:4c:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org