Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/5bdc854d4de3bb9f850b2f08aebbb267eca2d481.roa
File:                     5bdc854d4de3bb9f850b2f08aebbb267eca2d481.roa (raw, json)
Hash identifier:          eU8gxa9+ly1c+k3fUkbP2ntOsAcOeLufn9QLkZc/v2c=
Subject key identifier:   56:28:B6:5B:CE:26:18:F0:C1:F3:0A:37:76:98:D8:5C:83:2B:9F:27
Certificate issuer:       /CN=7aa6139d0f064a46788368b0bbfee31294aba351
Certificate serial:       19E92C
Authority key identifier: 91:77:83:02:25:AA:AF:96:36:14:5A:D5:ED:C6:0D:DE:06:9E:10:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa6139d0f064a46788368b0bbfee31294aba351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/5bdc854d4de3bb9f850b2f08aebbb267eca2d481.roa
Signing time:             Fri 30 Sep 2022 15:16:15 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sat 17 Sep 2033 03:00:00 +0000
asID:                     263684
IP address blocks:        45.224.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698092 (0x19e92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa6139d0f064a46788368b0bbfee31294aba351
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2033 GMT
        Subject: CN=5bdc854d4de3bb9f850b2f08aebbb267eca2d481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:84:a9:ac:52:32:d9:ef:60:7f:0b:20:c8:
                    f4:47:73:4b:7a:c9:9f:25:6e:91:c0:af:05:56:9d:
                    6a:27:c4:3b:b2:aa:42:f4:0a:5d:1d:6e:f4:b3:7d:
                    1c:2f:34:a1:d0:e3:36:b9:3e:04:3b:6d:05:c7:48:
                    5b:82:28:93:19:01:83:f4:fc:59:42:3e:15:d7:11:
                    3d:70:e8:19:fd:0e:8a:7e:f3:08:d7:52:74:7b:8d:
                    83:3d:ab:99:91:13:ae:70:c7:81:23:70:e0:7b:f8:
                    c3:6b:9e:a9:34:db:af:d5:8c:29:3c:4e:a1:ec:09:
                    34:46:d1:46:c8:75:3a:f9:24:a8:70:38:21:36:90:
                    f5:91:8f:40:21:4c:06:3f:91:9c:f8:08:67:e6:9e:
                    b1:ed:7a:84:e6:03:bf:b4:d8:5c:8b:dc:12:c0:f2:
                    df:41:77:40:31:1a:52:b5:91:e5:32:2c:13:a3:7d:
                    69:12:12:12:e8:c6:42:f0:10:6a:1e:34:be:37:9d:
                    b8:66:c5:ad:41:1c:b2:b5:3b:17:14:7e:9b:c8:07:
                    ac:ab:f9:b8:b4:01:4d:ff:28:57:a1:72:9a:21:9d:
                    2f:30:9e:d0:2d:d5:2d:35:5e:9b:1e:ff:36:55:b8:
                    90:5f:1b:d0:70:3d:71:66:54:6f:65:e2:bf:33:3a:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:B6:5B:CE:26:18:F0:C1:F3:0A:37:76:98:D8:5C:83:2B:9F:27
            X509v3 Authority Key Identifier:
                keyid:91:77:83:02:25:AA:AF:96:36:14:5A:D5:ED:C6:0D:DE:06:9E:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa6139d0f064a46788368b0bbfee31294aba351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/5bdc854d4de3bb9f850b2f08aebbb267eca2d481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a3600c8-b34d-48de-b155-00561e6098fb/7aa6139d0f064a46788368b0bbfee31294aba351.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:76:e4:31:82:87:4a:68:e2:20:96:28:7b:5d:32:6b:6d:f2:
         45:a1:59:85:54:f0:9c:94:52:6c:a0:52:a2:74:9e:d6:02:2b:
         c3:93:00:b0:ca:3a:9b:2d:51:b2:20:a7:78:5f:84:7f:ac:6e:
         2a:19:2d:14:07:4e:cb:7b:41:4b:03:8f:0d:0f:68:fb:ec:38:
         e0:49:23:e1:61:4b:c3:91:cf:de:91:85:42:42:68:6b:77:32:
         77:6d:7a:8e:34:50:73:de:57:0f:52:de:8d:30:4a:5f:69:ba:
         8d:6e:1e:bb:fa:b5:10:54:15:20:23:06:98:00:04:a7:ad:e3:
         81:89:38:e8:95:09:50:51:f1:b7:6b:e1:2e:6e:7a:fc:fa:39:
         55:73:3d:d6:32:35:9d:2f:59:d4:b8:cd:31:ad:b5:73:05:3e:
         3e:89:21:84:78:97:ec:a9:74:0b:89:a4:69:b7:55:ba:9d:6d:
         7f:9a:90:31:1b:bb:25:b1:dd:f2:66:af:57:54:69:8b:b8:e6:
         78:8b:70:d3:aa:d7:bd:ba:d6:1e:fa:4e:74:0b:74:2d:de:dd:
         84:1d:f1:8d:82:7b:43:a8:90:53:f6:97:d5:6e:1c:75:5c:76:
         a9:e5:1f:aa:db:35:21:d9:7f:b5:d1:6d:45:24:7f:04:f0:1f:
         54:07:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org