Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/a0f0297450ef99d03e8df4e3aac6ffebaa1521a0.roa
File:                     a0f0297450ef99d03e8df4e3aac6ffebaa1521a0.roa (raw, json)
Hash identifier:          7JQE3B68Q3jfOn9/4T8IdlkLaX4o7aE0AsHCaRtb1oo=
Subject key identifier:   CD:E0:5B:81:79:8F:4F:D4:BD:8B:29:F2:99:4D:70:0C:88:8B:62:04
Certificate issuer:       /CN=96da91711589e877379a24b4e7e81faaa3d64334
Certificate serial:       0E3295
Authority key identifier: CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/a0f0297450ef99d03e8df4e3aac6ffebaa1521a0.roa
Signing time:             Thu 30 Nov 2023 06:42:05 +0000
ROA not before:           Thu 30 Nov 2023 06:42:04 +0000
ROA not after:            Sun 30 Nov 2025 06:42:04 +0000
asID:                     269978
IP address blocks:        189.45.176.0/22 maxlen: 22
                          189.45.176.0/24 maxlen: 24
                          189.45.177.0/24 maxlen: 24
                          189.45.178.0/24 maxlen: 24
                          189.45.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930453 (0xe3295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96da91711589e877379a24b4e7e81faaa3d64334
        Validity
            Not Before: Nov 30 06:42:04 2023 GMT
            Not After : Nov 30 06:42:04 2025 GMT
        Subject: CN=a0f0297450ef99d03e8df4e3aac6ffebaa1521a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:22:11:d6:ef:e9:0e:65:1e:12:0a:9d:d6:
                    ff:86:f3:6b:8a:23:4b:58:98:13:0b:c4:3c:d4:d7:
                    3d:0e:c9:c9:39:b3:18:97:44:13:ac:2f:5b:5a:26:
                    43:d0:00:ca:7d:5d:bb:a1:9c:28:06:64:fa:b0:0b:
                    34:f8:64:00:56:26:dc:91:c7:40:5b:47:ee:07:2e:
                    8b:76:d5:6d:51:73:64:8b:e8:25:0e:6a:4a:7e:9c:
                    02:e0:77:ac:ce:27:71:78:24:f0:59:0c:a8:e1:fe:
                    90:8e:bc:3a:db:dc:fc:70:f9:5d:cf:4f:66:fe:e1:
                    07:a5:0a:bc:3b:8e:96:57:a9:51:4e:b5:86:eb:61:
                    7a:f4:a4:92:b3:4e:18:aa:cb:09:b1:b6:a6:98:12:
                    67:c0:f4:9d:9f:f2:5f:22:a9:69:10:a0:35:60:65:
                    cf:c7:44:85:e5:d2:9b:11:af:1e:20:ff:56:ba:e4:
                    1d:42:94:1f:7b:4a:1a:29:64:6b:1d:e1:96:c6:44:
                    2b:b8:b2:ff:fc:a9:14:25:e7:fa:85:29:c0:4f:5f:
                    80:62:11:e1:40:83:8e:ab:67:52:c0:d4:2a:4a:23:
                    9f:0b:36:bb:2c:49:09:1c:3c:66:69:36:a5:9f:4a:
                    35:50:8b:26:47:28:67:6b:81:20:ef:c0:d2:9b:df:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E0:5B:81:79:8F:4F:D4:BD:8B:29:F2:99:4D:70:0C:88:8B:62:04
            X509v3 Authority Key Identifier:
                keyid:CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/a0f0297450ef99d03e8df4e3aac6ffebaa1521a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:a6:bc:f8:32:5f:1d:e3:1b:06:77:88:ce:50:b3:91:05:
         12:33:cb:15:13:87:a1:a8:a3:bc:3f:bd:d6:52:bb:a4:6d:2b:
         2d:fe:9d:c1:0b:0e:bb:f3:bc:aa:00:0e:ae:90:41:15:74:47:
         6b:68:c3:7f:72:51:f8:5b:5f:83:6f:e4:d0:71:38:a3:ff:f0:
         37:10:88:cc:34:94:78:53:a2:ad:09:99:de:f1:d2:a5:6f:2d:
         5a:00:16:49:b9:0c:b0:64:19:43:99:43:9d:4d:da:77:bb:12:
         e2:e6:5e:17:88:e2:2f:47:de:58:5c:51:6b:63:a3:2a:e1:24:
         53:f8:d8:43:51:21:c8:87:7c:e8:f6:d0:bf:cd:fd:12:4a:e6:
         2b:f8:36:46:eb:75:ac:87:8d:cb:2b:0d:4b:b5:91:eb:3c:c5:
         cc:9a:db:08:61:29:67:7b:cd:9e:0a:9d:72:d6:ad:e1:87:40:
         01:66:09:f6:5b:6c:29:ac:df:cf:c3:55:84:3a:df:bc:54:d8:
         78:7e:e9:9b:a2:84:47:46:6a:b9:9c:da:10:47:c0:62:52:d1:
         e0:6b:fc:90:1d:a3:cd:08:20:38:3b:02:94:c8:92:d3:98:a2:
         01:d1:c4:25:87:38:dd:12:65:93:fe:48:05:20:74:3f:2d:39:
         af:9e:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org