Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/8ccf041bf2b840b20402f6a20aef05979dd5b722.roa
File:                     8ccf041bf2b840b20402f6a20aef05979dd5b722.roa (raw, json)
Hash identifier:          9Knr6UhgNrkLn042PFXfKm5OdfINevnok+Qm/W+Ijv0=
Subject key identifier:   52:1F:47:B4:DD:E6:C4:F1:D9:8A:F5:6C:20:07:94:D7:A5:1B:6C:93
Certificate issuer:       /CN=ac54f49fd3334b47a73d6d08bdfa334f4d159e45
Certificate serial:       271C49
Authority key identifier: 2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/8ccf041bf2b840b20402f6a20aef05979dd5b722.roa
Signing time:             Sat 30 Mar 2024 00:47:00 +0000
ROA not before:           Sat 30 Mar 2024 00:47:00 +0000
ROA not after:            Mon 30 Mar 2026 00:47:00 +0000
asID:                     267764
IP address blocks:        45.169.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563145 (0x271c49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac54f49fd3334b47a73d6d08bdfa334f4d159e45
        Validity
            Not Before: Mar 30 00:47:00 2024 GMT
            Not After : Mar 30 00:47:00 2026 GMT
        Subject: CN=8ccf041bf2b840b20402f6a20aef05979dd5b722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:26:39:6d:ed:f1:9a:20:20:32:43:9e:3a:
                    8e:40:7c:c8:dd:71:f1:ac:02:07:54:7c:d3:51:bd:
                    e4:14:bc:dc:8a:9f:23:9c:64:98:bc:8a:39:cd:54:
                    b5:ed:35:7d:42:d2:87:4b:b6:e7:63:ee:4d:bd:3a:
                    ff:fc:ee:43:e0:9d:be:b8:bf:ef:13:2e:1d:6f:8c:
                    75:5a:25:ee:c8:e7:ac:3e:90:5d:b5:00:9e:06:de:
                    c0:2f:e9:9e:18:b8:bc:c1:05:4a:cf:50:ec:e3:88:
                    01:fa:3e:bd:51:fa:11:72:66:e9:cc:64:d9:b8:f0:
                    22:4c:b2:26:96:b5:36:9d:53:52:b5:fc:be:8e:0d:
                    76:72:1e:28:4a:60:a0:50:d7:03:cb:9f:fc:7c:9f:
                    36:c4:bf:b0:4a:1a:2d:8c:47:c4:e0:92:53:ee:3b:
                    12:44:94:ce:c9:7c:5b:ff:7f:ac:bd:5c:76:b1:26:
                    63:7c:22:24:88:55:59:4c:33:c6:2a:61:9a:26:02:
                    b0:1f:68:94:2c:57:e5:3e:99:8e:e1:d8:ae:c5:23:
                    1e:67:a2:ed:d4:7b:72:15:90:20:7d:88:75:52:f4:
                    6c:56:51:1b:51:35:35:8a:fa:94:71:d7:bb:3e:67:
                    87:5e:64:c3:c7:78:eb:83:f6:c1:15:bc:a6:72:bc:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1F:47:B4:DD:E6:C4:F1:D9:8A:F5:6C:20:07:94:D7:A5:1B:6C:93
            X509v3 Authority Key Identifier:
                keyid:2D:6F:BC:1B:7F:32:B2:F1:36:36:7E:B1:72:DF:D2:BE:DE:7D:40:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/8ccf041bf2b840b20402f6a20aef05979dd5b722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18921276-8f68-49ee-b8cf-7c5c488f22aa/ac54f49fd3334b47a73d6d08bdfa334f4d159e45.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:79:94:5f:3a:d9:5a:80:79:0f:cb:7f:08:4e:5a:e4:db:ea:
         55:61:bd:08:52:f5:66:8b:5f:34:e1:56:f9:cc:00:38:f4:d2:
         78:1f:46:e0:50:b5:bd:cd:92:85:ab:e8:e5:a3:c4:84:24:15:
         63:d4:00:8a:82:79:ed:0e:ee:26:89:ab:87:3e:3e:d5:ef:3b:
         f6:2a:3f:7b:b2:9a:e6:9a:29:94:16:b3:4e:64:69:d6:2a:20:
         6a:cb:5f:f3:b2:91:94:ff:a9:88:22:2d:b0:1a:6e:3c:ac:44:
         a4:fc:ae:bb:2b:02:bf:78:de:6e:21:bd:1c:4a:2a:48:5f:c1:
         3e:e3:a0:42:e8:da:c0:4f:60:eb:45:45:8e:6d:9e:53:40:ca:
         71:dc:2a:61:53:1c:34:fc:d1:35:14:c4:f0:57:9f:16:f8:fd:
         fd:dc:64:7f:39:59:6e:3e:24:00:63:b6:de:6d:81:c7:77:6f:
         2c:ac:5f:8f:d3:61:d1:20:2a:bd:d8:17:6b:d7:ec:59:2f:a4:
         14:ef:e6:0b:bc:b4:36:8f:0e:7c:2c:65:59:6f:15:a8:0c:be:
         b3:fc:7e:59:dc:4b:df:cd:d6:ea:95:b1:26:85:e6:d1:ce:ba:
         ed:8e:ac:7c:d2:46:00:04:0b:ff:fc:80:cb:ce:cf:4c:18:7f:
         20:2c:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org