Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/47406d8884ba6fa69a389ba46c4a8d77ca8bba20.roa
File:                     47406d8884ba6fa69a389ba46c4a8d77ca8bba20.roa (raw, json)
Hash identifier:          PQvybFP7F8UV807EW9Uu+8AJR9oP4zsBf/vUiz55wks=
Subject key identifier:   B9:A2:02:60:A8:CF:94:3E:3F:A4:DB:E9:97:B5:76:40:1C:B1:08:4B
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       12433D
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/47406d8884ba6fa69a389ba46c4a8d77ca8bba20.roa
Signing time:             Tue 16 Jan 2024 07:31:26 +0000
ROA not before:           Tue 16 Jan 2024 07:31:26 +0000
ROA not after:            Thu 15 Jan 2026 07:31:26 +0000
asID:                     269735
IP address blocks:        45.181.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196861 (0x12433d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 16 07:31:26 2024 GMT
            Not After : Jan 15 07:31:26 2026 GMT
        Subject: CN=47406d8884ba6fa69a389ba46c4a8d77ca8bba20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:2f:f3:c5:80:1e:3d:22:98:3e:0e:be:a0:
                    2e:39:db:f1:e9:81:97:1a:00:04:28:16:14:af:34:
                    96:c6:f7:d0:18:71:af:04:e1:da:89:93:6e:7b:eb:
                    8f:21:b0:b4:ce:b6:72:4c:4f:cd:9c:a6:26:61:92:
                    74:b3:04:a4:b9:fa:84:11:76:8e:b0:b8:93:8e:4a:
                    ad:3e:87:5c:fa:74:18:62:6c:dc:41:ed:1c:4e:ee:
                    56:be:2f:6c:f2:5c:0f:2a:64:12:a5:f3:a8:59:62:
                    ac:ec:11:de:f0:c2:ad:9c:aa:75:cc:0d:a6:0c:53:
                    56:41:11:a7:46:a1:1b:bc:68:70:82:94:b0:9a:d6:
                    f9:73:cd:fe:5f:60:85:ea:df:75:3e:e4:64:78:54:
                    88:31:c9:91:58:af:9e:d5:ca:11:96:76:63:10:c4:
                    a4:9b:8a:9e:bc:44:b6:5d:5a:01:cf:fc:c6:5f:17:
                    fd:0c:4f:06:8b:d9:06:56:f6:4e:a2:df:e9:81:d7:
                    6f:9a:e2:2f:bd:c4:48:9a:d7:69:f9:1f:da:ac:e9:
                    d8:9c:ab:30:8a:4c:62:12:67:3e:bc:f9:90:9b:0f:
                    ea:63:b6:9a:5c:59:f7:79:d8:9b:67:c5:54:92:9e:
                    94:f9:9f:d3:b9:9e:8c:7d:fc:02:01:6a:13:0f:08:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:02:60:A8:CF:94:3E:3F:A4:DB:E9:97:B5:76:40:1C:B1:08:4B
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/47406d8884ba6fa69a389ba46c4a8d77ca8bba20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:a2:4c:7f:29:4d:5a:bd:b1:ab:84:bd:ae:1b:ba:65:91:
         3b:e7:75:4b:84:9c:ee:4f:64:73:4c:18:87:d5:fc:c7:5a:fa:
         64:19:db:aa:f2:57:10:55:54:e6:34:f2:0d:7d:be:35:67:c8:
         64:8b:c6:c6:ec:1a:11:ab:8c:03:00:83:84:e7:6e:0e:65:0d:
         71:db:b6:7f:5c:87:a8:b1:d3:7c:21:16:6b:10:67:ee:c4:e2:
         37:2b:0e:82:db:5e:11:7e:0f:99:c9:4a:fc:51:7c:19:86:f9:
         3c:58:db:f5:09:24:9d:f7:48:46:0e:59:ff:f1:b5:d1:14:0d:
         de:79:3c:cf:65:4f:b2:45:b8:71:79:ff:51:3e:31:d2:7c:16:
         d3:14:fb:95:b1:f9:4c:bd:71:c9:b6:2f:70:43:5f:98:b4:02:
         d6:ea:45:c4:9c:3d:63:96:50:eb:28:24:f5:5d:20:1a:21:ce:
         61:f9:23:e7:8c:a9:73:06:21:0b:d5:af:b6:cc:13:a0:86:0a:
         61:81:34:c8:5c:70:7b:81:f0:78:e1:3d:cf:be:4e:9b:c4:93:
         0d:29:ca:e6:07:38:ad:27:0e:73:71:ea:a6:c9:41:69:31:51:
         d3:72:d1:de:2f:67:3b:1a:4a:09:c8:63:74:14:94:dd:4c:b0:
         9c:bf:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org