Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/922df2e4e0cc8cea8b67173702db088716a6c34d.roa
File:                     922df2e4e0cc8cea8b67173702db088716a6c34d.roa (raw, json)
Hash identifier:          2RAgeWFHVp1vx3Lk3r8UVJO5DI1RsrTqd1wJBBLkKBw=
Subject key identifier:   9E:3A:D2:3C:68:47:E0:EC:BA:DC:12:A9:BC:A1:A7:D6:CF:ED:D0:94
Certificate issuer:       /CN=d87cacea641658717abecb35689ebe8932f40ead
Certificate serial:       4B57
Authority key identifier: 50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/922df2e4e0cc8cea8b67173702db088716a6c34d.roa
Signing time:             Sat 30 Apr 2022 17:18:59 +0000
ROA not before:           Sat 30 Apr 2022 03:00:00 +0000
ROA not after:            Tue 30 Apr 2024 03:00:00 +0000
asID:                     267796
IP address blocks:        45.172.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19287 (0x4b57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87cacea641658717abecb35689ebe8932f40ead
        Validity
            Not Before: Apr 30 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2024 GMT
        Subject: CN=922df2e4e0cc8cea8b67173702db088716a6c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:5e:a7:42:50:e0:15:56:55:ec:a3:1b:f6:
                    b0:cd:dd:7f:21:a8:f9:92:98:5b:a0:6b:54:16:84:
                    a7:2a:9c:17:82:ed:78:05:3a:4c:58:45:7c:cb:81:
                    dd:00:20:df:56:13:bb:33:33:78:7e:58:eb:b7:e7:
                    fe:9e:12:90:7a:27:0e:9c:56:e4:61:e1:02:19:a6:
                    1a:85:32:5a:bb:3d:fb:84:8b:7a:d5:f0:72:80:72:
                    5a:37:a7:a7:a0:c5:d6:af:db:d8:78:42:46:22:55:
                    6e:16:f8:35:94:bf:9f:ac:57:b0:6e:1e:b0:b1:6e:
                    05:a3:0d:ff:cf:80:ef:b5:7b:a8:8a:58:b9:41:39:
                    4f:51:1f:c3:b6:bf:d2:7e:11:a1:d7:fd:e2:f0:7d:
                    96:d2:3d:21:7d:e6:89:3f:06:56:62:54:a6:fa:61:
                    02:fe:1f:b2:d2:b4:08:87:85:06:9e:d5:19:7e:52:
                    de:25:1f:ce:fd:88:81:83:c6:eb:b1:03:26:23:f5:
                    c4:c8:96:cc:17:e0:80:c1:d6:47:6b:6d:39:e2:6d:
                    02:d9:37:9a:9e:b7:c3:75:c4:4f:41:67:44:ab:0f:
                    84:9a:1b:b8:d7:51:a0:1f:f2:49:5b:16:db:f4:8d:
                    f4:f7:de:46:65:58:32:db:76:2e:1c:f4:b7:44:fb:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3A:D2:3C:68:47:E0:EC:BA:DC:12:A9:BC:A1:A7:D6:CF:ED:D0:94
            X509v3 Authority Key Identifier:
                keyid:50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/922df2e4e0cc8cea8b67173702db088716a6c34d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:73:39:b2:28:09:2e:52:b2:dd:7b:dd:19:ef:5a:30:cd:
         0c:c1:6f:1f:77:24:9c:ff:90:2f:2f:08:99:ff:a0:98:ea:43:
         9e:50:8f:5e:84:f7:9d:68:57:06:7a:82:ac:4f:ac:ab:00:2d:
         a0:f8:53:a2:37:38:8a:c7:12:f5:23:3e:f7:ff:03:0b:28:ec:
         c4:00:dd:48:69:1a:a7:45:ad:87:be:01:86:b4:8e:aa:b3:ec:
         f4:d2:61:d2:d0:67:6e:40:17:11:84:0d:92:db:00:4f:44:d8:
         73:90:3e:4a:ec:5c:07:40:02:e4:0d:41:4b:1c:50:bf:a8:74:
         45:da:1b:79:09:03:30:d0:4a:53:1c:53:50:eb:7d:bf:82:1b:
         cf:d3:a1:c1:e4:35:47:28:69:5b:28:15:dc:fa:74:63:21:bc:
         ee:ce:44:bd:9f:40:eb:5c:fd:cb:19:db:1a:8a:8c:a3:fb:fe:
         da:93:7b:85:d5:c5:ad:e3:43:b0:72:d8:35:80:82:94:a4:7b:
         63:50:db:9f:dc:85:d1:47:b6:eb:7e:67:be:42:75:49:5e:25:
         02:60:ab:ba:62:b4:a3:4b:a6:de:a3:43:9c:69:06:54:71:b1:
         04:8f:22:fa:dd:e9:6d:64:bf:71:cd:d7:3e:2c:40:33:5a:69:
         4e:02:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org