Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/588f9f5f79b4f5dbe8c9756c4020a6d7d8e1265c.roa
File:                     588f9f5f79b4f5dbe8c9756c4020a6d7d8e1265c.roa (raw, json)
Hash identifier:          1itRheLO9pVuETeA0YP447vlnrIGil/J1ti2NYiKeGY=
Subject key identifier:   AE:A4:FE:2F:71:C6:8B:FC:96:8D:26:43:B9:6E:EA:CC:84:53:DE:00
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       2556FC
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/588f9f5f79b4f5dbe8c9756c4020a6d7d8e1265c.roa
Signing time:             Wed 27 Mar 2024 08:30:09 +0000
ROA not before:           Wed 27 Mar 2024 08:30:09 +0000
ROA not after:            Fri 27 Mar 2026 08:30:09 +0000
asID:                     266721
IP address blocks:        45.191.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447100 (0x2556fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Mar 27 08:30:09 2024 GMT
            Not After : Mar 27 08:30:09 2026 GMT
        Subject: CN=588f9f5f79b4f5dbe8c9756c4020a6d7d8e1265c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:41:6f:9b:a1:b0:76:f0:d7:d4:da:ec:a4:
                    ca:88:49:7e:9f:88:f3:92:72:3f:e2:d3:43:e1:5c:
                    64:72:ef:2b:60:39:78:82:c4:16:61:8d:ed:eb:1d:
                    5d:ce:9e:70:47:29:1a:36:bd:61:16:62:6d:dc:9c:
                    e3:1d:ef:7a:eb:5f:1d:23:1d:7e:4d:97:f5:11:5c:
                    bf:96:9e:c1:39:59:41:a9:4f:cc:c1:22:10:35:36:
                    70:be:a6:14:4b:52:5a:e8:ed:5e:27:b4:cd:c1:d9:
                    ba:c5:97:b1:cf:be:a9:67:32:cb:f0:7f:f8:f0:39:
                    e0:c1:9e:32:51:1c:a9:46:10:d6:1a:08:7c:01:cb:
                    05:88:e2:e0:d5:5d:10:01:51:6f:9d:ca:bf:08:b5:
                    c8:17:16:2c:60:f4:0f:fc:5e:3d:10:c5:9d:1e:40:
                    33:a1:f1:f8:5a:44:3b:63:0a:f1:ca:0c:d3:be:3d:
                    69:4c:62:a3:b0:a5:9b:a3:3e:99:e0:61:54:91:fd:
                    0b:e1:21:93:40:94:de:80:45:50:74:0d:0d:3b:18:
                    d7:47:c9:0d:16:88:2e:da:ad:aa:b0:a6:33:32:6d:
                    30:1e:f9:55:2e:b9:3d:ea:07:55:6e:47:37:00:45:
                    d4:2e:ab:2f:fa:96:81:6a:7f:34:55:48:c5:1c:cc:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A4:FE:2F:71:C6:8B:FC:96:8D:26:43:B9:6E:EA:CC:84:53:DE:00
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/588f9f5f79b4f5dbe8c9756c4020a6d7d8e1265c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:07:1a:27:2c:2d:12:5a:b3:b4:95:ae:6b:e3:ff:08:cc:
         d5:ee:71:be:d6:c8:e6:fe:4e:cb:51:6d:e6:5d:2a:a2:0b:87:
         5a:60:62:f7:a2:e9:3d:f1:23:82:cc:08:58:aa:81:d0:bd:84:
         74:69:28:a4:69:16:ca:c4:67:db:47:e3:ec:bf:fa:7c:b5:76:
         05:f7:cf:df:65:73:97:86:c2:a0:22:d9:46:54:18:bd:1d:c5:
         94:ff:10:77:46:cd:3e:2f:fa:3d:d5:47:d2:96:90:20:b0:61:
         f9:79:c0:34:e3:64:1b:5f:1e:9b:3a:6f:1f:53:bd:13:86:77:
         21:98:7b:b1:4b:1b:88:d8:8d:09:c7:5c:c3:c4:b3:d7:89:65:
         75:1a:68:6f:e9:4e:38:7f:36:fd:c8:37:6e:6c:6f:2f:12:d7:
         52:d7:08:e6:c4:be:47:9c:9d:64:cc:9d:93:4a:92:2b:bb:07:
         cd:e9:64:0a:d7:04:68:14:a8:0b:89:e0:0b:20:55:af:40:14:
         9f:ba:4f:8e:23:b7:87:ff:72:55:67:fb:cd:5c:43:4d:6b:60:
         0c:25:cc:df:ea:7b:d6:30:b9:e0:6d:43:49:41:1f:a8:55:07:
         2f:7d:62:e0:b4:1a:0a:34:ba:cc:94:ac:77:6f:72:74:3a:26:
         7c:31:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org