Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/2293095bd18eae0dfd53e5e1e0828e2c0c912b4e.roa
File:                     2293095bd18eae0dfd53e5e1e0828e2c0c912b4e.roa (raw, json)
Hash identifier:          d7sBPB8ywTexaPMK5wGL5JBz3qCD3LJR+CCo5+90z8w=
Subject key identifier:   FE:10:9B:27:CF:B9:E9:E1:75:9D:C6:8A:ED:27:81:1E:97:3C:18:9D
Certificate issuer:       /CN=ff2e3a351a13deac39dfb4447bede66b960c75d7
Certificate serial:       0527A1
Authority key identifier: 34:EF:2F:4B:AC:1F:E9:DF:B9:3A:35:C0:6E:1D:BB:47:33:85:CA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff2e3a351a13deac39dfb4447bede66b960c75d7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/2293095bd18eae0dfd53e5e1e0828e2c0c912b4e.roa
Signing time:             Wed 24 Mar 2021 14:45:45 +0000
ROA not before:           Wed 24 Mar 2021 14:45:45 +0000
ROA not after:            Tue 24 Mar 2026 14:45:45 +0000
asID:                     27843
IP address blocks:        45.232.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337825 (0x527a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2e3a351a13deac39dfb4447bede66b960c75d7
        Validity
            Not Before: Mar 24 14:45:45 2021 GMT
            Not After : Mar 24 14:45:45 2026 GMT
        Subject: CN=2293095bd18eae0dfd53e5e1e0828e2c0c912b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:17:0b:6f:80:88:31:7d:b5:de:bc:6e:d2:
                    d4:6c:07:b0:83:3b:e5:0b:d0:0f:03:a3:8e:c4:cc:
                    3c:8b:43:49:32:05:f0:c3:a4:93:04:57:60:61:35:
                    e6:38:37:85:9c:7a:bf:2e:c3:6a:4c:ff:2b:a1:02:
                    bf:de:51:d3:71:cf:9a:8b:78:8e:ab:02:ab:f2:05:
                    f3:93:b6:4b:20:3b:37:99:a0:00:11:6a:65:69:41:
                    e4:96:3b:90:57:6f:b5:22:f6:f4:9c:ac:07:a6:96:
                    cc:7c:52:ac:bd:92:9e:e6:64:19:6a:55:ec:12:5d:
                    c0:6e:5f:53:e3:e2:9c:49:d3:33:83:b5:c9:a3:e1:
                    ee:10:45:38:8b:90:e5:7f:b8:8f:15:b2:c9:bc:8c:
                    2c:bc:6c:1b:54:74:dd:7e:83:82:7a:df:70:49:2f:
                    ab:e9:ba:ed:7e:8a:f2:c7:91:72:b9:b0:7d:7c:42:
                    e5:44:cd:d9:40:83:fa:8d:15:b2:ba:44:52:ec:08:
                    3d:88:29:35:d0:82:ef:59:6c:78:69:73:da:c4:da:
                    6c:0a:fa:be:f3:b5:8f:6a:1c:d8:78:16:a7:9f:fa:
                    f5:30:ed:75:cd:a5:cc:b9:97:1d:70:34:87:f0:d4:
                    cf:36:ae:e5:b9:3a:00:4c:ce:6b:a9:9d:b3:c2:b9:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:9B:27:CF:B9:E9:E1:75:9D:C6:8A:ED:27:81:1E:97:3C:18:9D
            X509v3 Authority Key Identifier:
                keyid:34:EF:2F:4B:AC:1F:E9:DF:B9:3A:35:C0:6E:1D:BB:47:33:85:CA:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff2e3a351a13deac39dfb4447bede66b960c75d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/2293095bd18eae0dfd53e5e1e0828e2c0c912b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0447e796-07de-42b6-a917-6363d75c4b15/ff2e3a351a13deac39dfb4447bede66b960c75d7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:35:24:fb:97:9b:63:48:07:dd:1c:01:92:9c:f8:01:38:0e:
         a6:f4:82:d6:13:66:16:d9:68:b4:16:51:a2:7c:bb:59:22:19:
         84:ba:c9:61:01:35:4e:6b:86:35:6c:ab:79:4a:5f:eb:21:a9:
         ca:17:df:68:92:f2:b8:3f:9e:df:22:e9:bd:ba:1e:ac:74:4b:
         92:e0:1e:cf:c7:dc:c7:5b:56:d1:a5:7b:8c:6b:85:ac:85:9f:
         02:7f:57:f4:9b:a3:f6:ef:e1:77:07:c2:1c:ad:27:f7:58:7e:
         90:a9:1e:49:f2:01:88:8c:04:d4:34:e8:51:df:5c:5b:3c:f6:
         43:8e:57:57:aa:41:4e:2e:ba:19:97:8d:9f:6a:9b:55:8c:d6:
         ef:6d:42:81:db:51:71:ba:31:69:58:01:29:33:47:04:78:75:
         86:83:21:9b:2c:13:d5:3d:72:a7:14:10:c0:88:7d:21:48:ff:
         f4:04:cc:4c:32:b2:cb:7a:9d:80:a8:11:18:a0:96:10:25:54:
         fa:cc:eb:9b:53:76:63:b8:46:e2:6f:0a:5a:cc:ec:46:40:9e:
         c0:ec:94:1e:aa:4d:70:34:f5:88:e9:75:9a:8c:a0:40:7a:72:
         47:27:72:1a:9a:1b:a5:5d:4d:6b:44:09:56:15:b1:86:a3:73:
         d8:ab:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org