Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/28e50bed7b1917b8201176e7bae534d64078caab.roa
File:                     28e50bed7b1917b8201176e7bae534d64078caab.roa (raw, json)
Hash identifier:          uTg1yNZSSSaJ9nmY8qUWltaeHVZiQX6BIIhju8j5+cc=
Subject key identifier:   39:37:E8:07:04:73:72:35:9E:69:89:22:FC:C8:6E:06:52:87:97:6C
Certificate issuer:       /CN=d6b918741dcd36c0f74f9623684dac9f1090b5af
Certificate serial:       080538
Authority key identifier: D7:3F:AA:ED:A1:31:F6:10:68:DA:FA:33:63:74:F2:F7:38:8A:04:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6b918741dcd36c0f74f9623684dac9f1090b5af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/28e50bed7b1917b8201176e7bae534d64078caab.roa
Signing time:             Tue 31 Oct 2023 13:37:39 +0000
ROA not before:           Tue 31 Oct 2023 13:37:39 +0000
ROA not after:            Fri 31 Oct 2025 13:37:39 +0000
asID:                     271914
IP address blocks:        45.239.104.0/24 maxlen: 24
                          187.102.196.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525624 (0x80538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b918741dcd36c0f74f9623684dac9f1090b5af
        Validity
            Not Before: Oct 31 13:37:39 2023 GMT
            Not After : Oct 31 13:37:39 2025 GMT
        Subject: CN=28e50bed7b1917b8201176e7bae534d64078caab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:fb:0b:8b:e8:cb:d0:a0:9b:c0:86:6c:d8:
                    d9:fd:b1:2a:b8:44:f4:ee:94:a6:74:97:5f:c2:e9:
                    9a:83:dc:84:76:17:bb:94:2d:de:cb:ba:5f:95:24:
                    e7:18:e9:49:93:c3:0d:dd:55:51:5a:99:3d:bf:2a:
                    a8:10:5b:df:30:d0:a3:e3:27:57:26:a3:7c:69:6c:
                    03:2e:46:72:d1:8b:d1:15:0c:0a:8c:96:5a:49:6a:
                    11:9b:ff:fd:f1:4a:bf:92:cc:58:ca:88:d1:43:ae:
                    82:4c:39:62:7e:05:6c:c0:be:ba:64:4a:6f:86:9d:
                    fb:2b:2e:4c:0e:2c:4c:e5:70:09:f4:22:58:fe:b1:
                    b4:78:78:37:75:91:e5:47:8f:0f:9e:0b:ef:25:b2:
                    25:23:fb:da:ab:61:1d:a6:aa:a8:41:30:31:af:74:
                    3c:07:0d:55:32:24:e7:69:62:4b:48:2b:44:d1:bb:
                    ee:cc:21:f4:c1:90:f9:ff:09:a8:75:69:0d:eb:f3:
                    54:2a:f4:10:c5:eb:0f:0f:54:68:c9:26:13:07:46:
                    22:1f:26:13:d0:bc:d2:d4:5b:c5:42:ad:e1:df:c4:
                    2c:6f:90:1a:bf:dd:3b:59:50:03:3b:15:ff:80:c1:
                    b0:a0:f6:ba:00:10:83:b6:1f:49:ca:40:7d:9e:de:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:37:E8:07:04:73:72:35:9E:69:89:22:FC:C8:6E:06:52:87:97:6C
            X509v3 Authority Key Identifier:
                keyid:D7:3F:AA:ED:A1:31:F6:10:68:DA:FA:33:63:74:F2:F7:38:8A:04:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6b918741dcd36c0f74f9623684dac9f1090b5af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/28e50bed7b1917b8201176e7bae534d64078caab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/d6b918741dcd36c0f74f9623684dac9f1090b5af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.104.0/24
                  187.102.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:31:61:d0:83:09:b4:c4:96:52:b3:0a:3c:8e:ef:92:08:
         22:62:2d:11:30:cd:6f:d4:41:1b:77:93:38:20:10:e0:57:d1:
         16:54:06:49:d1:83:7b:27:8a:54:70:3a:bf:04:be:cf:1d:92:
         6b:e1:d6:1b:75:b0:a3:dd:a6:f8:54:ed:74:d2:60:6c:4e:9b:
         2e:8d:7a:3a:32:eb:da:57:85:be:c9:ea:06:6b:c3:3c:e7:6c:
         a6:82:c3:9a:00:aa:bf:8a:fd:b3:b6:eb:79:16:08:4a:fd:af:
         a2:78:55:28:b1:fe:53:b2:15:d6:d5:70:f4:d3:00:a2:36:f5:
         ce:86:f4:3b:74:05:68:aa:71:b6:2b:1a:1e:3a:28:a7:71:f2:
         02:da:c1:6b:8a:70:6b:44:e6:9f:80:60:d7:04:98:8d:61:29:
         a0:d1:59:31:b2:04:a3:cb:6d:3d:c0:39:67:bf:5f:42:17:64:
         77:59:58:83:cd:51:f8:56:33:16:39:25:e0:7f:54:02:93:8d:
         d0:7c:18:6d:65:f4:65:05:2e:5b:c2:fd:70:f5:53:67:fd:45:
         4d:af:3c:8a:48:ab:1b:c7:e3:49:b9:82:f1:86:b6:c6:73:f1:
         98:59:d4:f0:ab:82:52:68:7a:0b:56:ff:c4:31:69:5c:78:a7:
         b2:89:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org