Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/ec8030cf2f0303865f146e2089e7acf08bbf4559.roa
File:                     ec8030cf2f0303865f146e2089e7acf08bbf4559.roa (raw, json)
Hash identifier:          579HeQiRRbvhx4cvyISMKXC4E6KSyKFgW2d0e18Z/sM=
Subject key identifier:   16:56:A5:8A:8F:7E:9E:1C:E2:4B:AE:11:8D:7E:5F:02:4E:D2:06:6D
Certificate issuer:       /CN=b08b134d19c661a4a28b302fd9901173cb75358b
Certificate serial:       133D6F
Authority key identifier: 63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/ec8030cf2f0303865f146e2089e7acf08bbf4559.roa
Signing time:             Tue 25 Jul 2023 18:53:44 +0000
ROA not before:           Mon 24 Jul 2023 18:53:43 +0000
ROA not after:            Fri 25 Jul 2025 18:53:43 +0000
asID:                     265556
IP address blocks:        45.164.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260911 (0x133d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b134d19c661a4a28b302fd9901173cb75358b
        Validity
            Not Before: Jul 24 18:53:43 2023 GMT
            Not After : Jul 25 18:53:43 2025 GMT
        Subject: CN=ec8030cf2f0303865f146e2089e7acf08bbf4559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:68:12:61:4a:1e:41:87:2b:01:d3:ae:01:
                    31:70:67:ab:2f:bd:64:fa:b6:ac:f0:62:d1:93:66:
                    cd:f7:57:b0:2f:74:f5:11:37:51:f3:ac:34:df:75:
                    62:e3:d4:f6:73:a4:25:eb:cd:b4:d9:d5:31:40:98:
                    c5:94:f4:52:fb:7b:74:c8:59:f8:7d:c5:62:e6:da:
                    01:8a:ae:8d:59:bf:5d:83:8c:b7:91:0a:1a:a9:db:
                    85:d5:0f:b5:17:98:4c:19:dd:51:c6:02:9f:1f:6e:
                    2e:7c:a4:ea:2e:41:b5:e4:df:f4:7a:32:f7:f9:1a:
                    4d:0e:02:6a:1e:da:db:d3:1b:00:7d:27:11:37:2d:
                    32:7d:c2:6c:92:3f:57:55:b5:37:48:98:c8:17:51:
                    76:fc:61:cf:31:ff:dc:c9:9c:b8:ff:e9:b3:71:08:
                    4d:26:e2:38:d8:49:f4:e8:c5:cd:7a:d5:6a:2b:6e:
                    d2:99:8f:e4:5d:68:23:30:0e:cb:b4:a2:3e:54:dd:
                    d5:7c:17:c4:74:a1:d8:f3:69:db:c4:06:60:d9:47:
                    22:d7:94:c9:ac:ef:e0:19:9d:82:c4:fc:c8:b0:19:
                    6d:88:24:b1:27:41:1e:db:49:d5:60:95:c2:62:7f:
                    04:9e:6d:c2:7c:28:a5:a0:d3:30:a1:8f:d9:6a:19:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:A5:8A:8F:7E:9E:1C:E2:4B:AE:11:8D:7E:5F:02:4E:D2:06:6D
            X509v3 Authority Key Identifier:
                keyid:63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/ec8030cf2f0303865f146e2089e7acf08bbf4559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/b08b134d19c661a4a28b302fd9901173cb75358b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:2a:f1:4d:a4:20:d5:83:41:bf:c5:e9:5d:15:46:40:b5:
         b0:12:92:98:ca:3b:08:26:96:f9:40:9f:99:54:05:8c:53:34:
         fc:a1:28:f4:32:5f:07:64:cb:4d:c3:70:21:63:32:df:69:f5:
         a2:6f:78:1f:d6:87:5b:39:1f:83:ff:d5:7f:f8:25:c2:31:6f:
         32:50:7e:96:d9:6f:32:f8:4b:45:a5:de:77:55:28:f7:89:53:
         5f:cc:42:d2:78:9b:93:14:73:b5:64:41:83:f0:1b:ec:45:57:
         2d:8b:d8:50:c8:de:c7:f7:21:da:06:27:61:b7:55:cd:2e:c8:
         83:80:c1:9e:d3:e4:4e:93:68:23:c7:72:70:9a:84:c0:e8:3e:
         27:9c:2a:10:8c:79:48:42:ec:b7:db:48:6e:f2:f5:17:8c:4f:
         e1:88:fc:8c:49:c4:8c:30:cf:45:ea:52:a3:59:9f:cf:ad:ed:
         62:36:af:6c:94:3e:e2:8f:23:3c:2d:58:a8:f3:9c:ba:9f:58:
         33:34:ed:94:d9:1e:86:84:db:1d:49:a6:c7:be:c6:69:bb:18:
         58:71:c7:fd:b6:62:b9:92:e8:75:ea:2d:e2:c0:55:8a:a2:65:
         d2:ea:50:06:d3:61:3b:72:bc:fc:15:3a:d3:64:8c:da:1d:5f:
         fa:71:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org