Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/c7cde3eff8fe20c22b2f317bf244036f1f482a27.roa
File:                     c7cde3eff8fe20c22b2f317bf244036f1f482a27.roa (raw, json)
Hash identifier:          9TxcNKe3WwHJzl3ZYj1yWXozeW4uIKukvKBPgX+8fno=
Subject key identifier:   12:30:21:0E:E5:49:37:DD:26:67:6C:53:1B:AA:4B:D0:68:79:43:7A
Certificate issuer:       /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial:       201673
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/c7cde3eff8fe20c22b2f317bf244036f1f482a27.roa
Signing time:             Thu 30 Nov 2023 06:00:22 +0000
ROA not before:           Thu 30 Nov 2023 06:00:21 +0000
ROA not after:            Sun 30 Nov 2025 06:00:21 +0000
asID:                     266725
IP address blocks:        45.65.224.0/22 maxlen: 22
                          45.65.224.0/24 maxlen: 24
                          45.65.225.0/24 maxlen: 24
                          45.65.226.0/24 maxlen: 24
                          45.65.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102899 (0x201673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
        Validity
            Not Before: Nov 30 06:00:21 2023 GMT
            Not After : Nov 30 06:00:21 2025 GMT
        Subject: CN=c7cde3eff8fe20c22b2f317bf244036f1f482a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:de:10:9a:c1:a8:9f:c8:33:a0:98:e5:89:
                    d3:0b:e9:f1:f1:62:0f:ed:de:46:b4:e0:0b:7b:ce:
                    7f:52:19:a4:a2:94:cd:8a:25:8b:10:e0:0d:da:22:
                    a1:44:f3:ef:3f:53:f8:87:a9:42:46:9c:14:f3:c7:
                    d3:49:78:8e:50:9f:2f:df:2c:f3:83:5e:c1:13:cb:
                    a3:31:d4:87:a0:72:a8:10:35:99:5c:6b:bb:49:7f:
                    fc:a4:d0:7a:11:55:ab:fe:d4:8c:e5:e0:da:a8:62:
                    31:1b:7b:83:e6:17:c7:83:cb:e5:95:32:29:5c:b4:
                    a5:64:52:e1:3a:6b:c6:55:8d:ff:b6:9a:4e:7d:1e:
                    12:ce:58:b1:88:e2:60:b5:54:00:d4:9e:b8:2d:c4:
                    f7:3a:e8:56:fe:64:c1:67:90:35:74:63:3f:ab:dc:
                    ba:4b:8f:37:36:27:f8:02:01:85:27:d3:1a:f1:21:
                    dc:93:1d:9a:3f:48:37:0b:c6:4f:22:67:e0:46:75:
                    16:71:eb:2f:74:df:91:23:c4:49:5f:3a:b3:c6:f1:
                    13:a6:f0:b0:44:d0:7b:c3:84:5a:48:45:92:fa:b5:
                    0f:35:e4:cc:90:37:d2:09:52:f0:04:c3:0d:25:dd:
                    30:c4:c6:8b:d8:96:29:ca:1a:3d:cf:8b:9d:25:ad:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:21:0E:E5:49:37:DD:26:67:6C:53:1B:AA:4B:D0:68:79:43:7A
            X509v3 Authority Key Identifier:
                keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/c7cde3eff8fe20c22b2f317bf244036f1f482a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:47:05:76:03:b8:d4:7b:27:1f:27:86:47:25:56:49:73:b3:
         97:9a:5f:9c:66:d2:4e:ee:b3:4e:64:c9:7f:79:a8:f0:04:15:
         49:1d:ad:db:59:da:22:73:2a:1f:03:88:33:82:db:da:80:e3:
         46:d9:34:3d:ad:4f:55:7b:2e:94:b4:d7:39:38:e7:1e:49:ef:
         d9:db:72:a7:45:7b:5a:64:c9:45:25:c4:10:81:e7:07:76:ad:
         b4:31:7e:c6:89:15:7f:44:5f:26:02:5c:c8:9b:88:86:dd:ab:
         b4:cb:fc:d7:16:44:75:00:39:2f:0c:fe:1d:04:5c:41:27:8e:
         38:5b:c8:f2:ab:ad:42:e1:39:90:58:f1:16:1b:fb:df:75:41:
         48:26:e1:b8:78:a7:37:7a:3e:cf:61:67:db:d8:55:ed:56:90:
         96:3e:eb:2d:8f:39:c6:3e:81:fd:8a:24:e5:de:84:b8:4d:41:
         e7:d1:7b:1c:9b:3c:3f:8a:03:bf:8c:e9:e8:c2:07:0e:33:a6:
         62:c8:1b:e2:23:67:48:8b:f7:0c:0b:26:77:45:0b:48:9f:78:
         47:b5:f2:2d:75:e5:78:a9:a3:41:ed:5e:ad:3b:d1:03:d0:a3:
         f2:d5:49:43:b5:59:52:7e:41:f0:c2:26:3e:da:f3:57:a2:ce:
         68:a9:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org