Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/e4da67c0299af15670e51c7ee8d6fe51f9fa2f3f.roa
File:                     e4da67c0299af15670e51c7ee8d6fe51f9fa2f3f.roa (raw, json)
Hash identifier:          HcaNfUciR1/g2XZwzku76cVYOw1a7zcjLJJFNx17zMA=
Subject key identifier:   7A:F5:F2:16:43:6A:B4:C8:C0:C2:6F:DD:43:3A:64:ED:09:95:48:A8
Certificate issuer:       /CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
Certificate serial:       15798D
Authority key identifier: E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/e4da67c0299af15670e51c7ee8d6fe51f9fa2f3f.roa
Signing time:             Fri 25 Mar 2022 05:15:52 +0000
ROA not before:           Fri 25 Mar 2022 03:00:00 +0000
ROA not after:            Mon 25 Mar 2024 03:00:00 +0000
asID:                     52468
IP address blocks:        45.233.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407373 (0x15798d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb177be6b76d82ba1ff6275ec50fecb39b73b104
        Validity
            Not Before: Mar 25 03:00:00 2022 GMT
            Not After : Mar 25 03:00:00 2024 GMT
        Subject: CN=e4da67c0299af15670e51c7ee8d6fe51f9fa2f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:e1:d0:52:4b:3d:7c:23:a6:b0:9f:99:00:
                    7f:4d:52:92:24:06:d5:d3:6d:5d:40:f9:00:fa:59:
                    e3:2e:88:87:79:81:14:fd:98:1c:d9:8b:09:0f:d1:
                    3c:c7:53:41:28:a4:29:6f:31:5c:04:9e:70:5e:44:
                    33:4c:97:2c:b3:19:99:cc:9f:1c:0e:83:31:f1:6a:
                    47:94:0f:8a:d4:60:9c:f7:b4:6b:eb:7f:aa:78:08:
                    36:c2:be:f0:cc:ec:ae:a0:47:e3:80:fd:44:69:1f:
                    d7:33:31:6d:da:a8:cf:75:00:db:90:b6:24:f2:37:
                    91:a3:0c:e6:d4:69:c0:8c:6a:84:0f:d3:5e:56:8d:
                    8b:29:7e:ea:2b:7d:60:55:09:f0:55:00:6e:ec:2c:
                    fe:64:e2:df:53:7f:b2:9d:46:31:28:18:54:39:26:
                    38:0e:31:b0:7a:89:76:aa:45:45:1b:db:c9:06:1c:
                    34:ea:5d:9c:12:41:c6:6a:a6:75:34:49:96:84:6c:
                    f9:3e:64:9a:33:c4:dc:a5:fd:a6:ad:b0:d9:74:09:
                    65:6f:58:20:11:e0:63:2a:f0:93:21:48:d9:b6:46:
                    15:21:da:c2:8d:9b:e7:e9:4d:27:59:e0:20:0d:ce:
                    64:b5:60:ab:60:ba:70:71:6c:9c:77:1a:06:34:94:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:F2:16:43:6A:B4:C8:C0:C2:6F:DD:43:3A:64:ED:09:95:48:A8
            X509v3 Authority Key Identifier:
                keyid:E1:E2:4B:6D:C9:FB:C2:50:72:EC:C0:34:9A:10:6B:E1:94:45:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb177be6b76d82ba1ff6275ec50fecb39b73b104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/e4da67c0299af15670e51c7ee8d6fe51f9fa2f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05f7604a-c1ce-4200-8015-620df795321e/cb177be6b76d82ba1ff6275ec50fecb39b73b104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:64:08:1a:fd:a7:84:c3:f7:6e:82:57:bf:81:8d:94:0c:0f:
         c1:b4:73:2f:2f:67:8d:89:d0:1c:69:52:6c:b0:9d:21:5f:e9:
         9b:83:91:52:71:e8:04:b9:e2:cf:6f:34:b9:41:97:d5:07:a3:
         4c:d7:67:8c:c0:cf:f0:d1:22:cd:ff:ad:ec:51:32:ec:cc:61:
         1b:19:dd:5a:c3:81:5e:73:eb:0f:ca:ff:8d:e8:99:43:43:ef:
         7f:e8:cb:ac:19:26:f8:66:50:2a:eb:b7:dd:ae:e4:e9:31:73:
         61:cd:d3:49:86:23:3e:46:c3:ac:97:6f:b1:52:2c:3a:e8:bd:
         b3:f6:c9:12:60:1e:5e:49:c1:cb:a8:43:a6:56:5f:35:b0:12:
         64:a2:92:6c:c3:5e:94:7b:26:60:96:8b:8f:22:cd:56:e2:2d:
         95:ff:7a:af:32:3d:5c:70:b9:9c:a7:ba:e0:a7:72:27:c3:d2:
         81:b3:8a:40:ad:5f:41:54:a1:86:50:e8:99:8a:ac:c1:be:19:
         b2:3d:5d:b3:fd:2d:95:cf:75:a0:62:a8:fb:c4:dc:c9:6a:9b:
         8c:86:1d:5e:d4:3c:53:33:ca:97:3b:14:fd:cc:0f:08:51:b0:
         79:e8:e1:37:aa:1c:c6:06:07:c3:e1:1d:c0:85:f6:43:a2:ca:
         94:d4:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org