Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3232203d3e20323635353635.roa
File:                     34352e3136372e3235322e302f32322d3232203d3e20323635353635.roa (raw, json)
Hash identifier:          PEp26LBqN/KGb91WDOEfVy1M/pScyeb5i5lzfhpYXDI=
Subject key identifier:   F5:70:9C:00:A8:C3:B1:2C:4D:81:CF:75:A1:23:40:4A:B3:C4:7D:DE
Certificate issuer:       /CN=CD4D03807099629120DE095935B1E371248DA857
Certificate serial:       403187A66A18D68E3BA5679E62F3ED1479541A42
Authority key identifier: CD:4D:03:80:70:99:62:91:20:DE:09:59:35:B1:E3:71:24:8D:A8:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3232203d3e20323635353635.roa
Signing time:             Tue 05 Mar 2024 18:01:01 +0000
ROA not before:           Tue 05 Mar 2024 17:56:01 +0000
ROA not after:            Tue 04 Mar 2025 18:01:01 +0000
asID:                     265565
IP address blocks:        45.167.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:87:a6:6a:18:d6:8e:3b:a5:67:9e:62:f3:ed:14:79:54:1a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4D03807099629120DE095935B1E371248DA857
        Validity
            Not Before: Mar  5 17:56:01 2024 GMT
            Not After : Mar  4 18:01:01 2025 GMT
        Subject: CN=F5709C00A8C3B12C4D81CF75A123404AB3C47DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:b4:c1:5a:4b:f0:3c:72:05:4a:10:3a:f8:
                    aa:7d:08:86:50:f4:92:ca:9e:1a:b7:2f:7d:a0:fe:
                    05:33:0a:22:02:a3:e5:63:fa:06:40:52:a4:aa:a5:
                    e7:35:af:43:68:b9:67:d4:59:ea:46:71:ae:47:28:
                    7b:0c:7e:36:87:e7:56:2b:bd:6c:18:ed:ff:a1:18:
                    4b:18:7f:da:6f:51:66:28:29:28:5a:1a:65:3c:43:
                    fd:bf:38:3e:1e:96:4f:0f:91:9d:de:d4:c6:7a:63:
                    c3:7d:0d:a4:23:c6:54:dc:ac:e5:e7:4c:82:15:04:
                    05:1a:ec:16:1b:fe:73:f9:20:17:b0:1f:1b:cf:49:
                    7e:83:50:73:70:4b:33:7f:5d:19:ec:f7:74:95:a0:
                    09:66:6c:23:5e:fe:5a:7a:0e:18:c7:0e:6e:9e:4f:
                    b2:85:9e:6a:e9:23:67:fc:47:d1:67:26:13:16:63:
                    40:46:fc:d3:d7:11:79:6a:ed:1e:e8:be:85:61:ff:
                    14:d8:86:37:31:cb:86:be:6e:16:74:a0:78:b5:1c:
                    88:24:10:bd:05:b6:26:7e:9b:e8:22:9a:3b:4a:8d:
                    02:e4:2a:6e:6e:58:2c:c9:1d:da:e0:9f:9b:b5:d9:
                    1d:d3:2d:71:c1:c2:dc:e4:d6:7c:5c:00:20:0b:47:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:70:9C:00:A8:C3:B1:2C:4D:81:CF:75:A1:23:40:4A:B3:C4:7D:DE
            X509v3 Authority Key Identifier:
                keyid:CD:4D:03:80:70:99:62:91:20:DE:09:59:35:B1:E3:71:24:8D:A8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/CD4D03807099629120DE095935B1E371248DA857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3232203d3e20323635353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:24:55:3a:a2:6c:d0:94:b4:2b:ea:38:5a:3e:cb:2d:af:42:
         7e:4f:26:93:f0:07:6d:f8:9c:69:f3:0d:c9:e4:c5:31:aa:a2:
         b2:e8:9c:fb:01:f5:63:04:63:4c:cb:ce:85:b6:1c:c7:78:49:
         da:eb:c4:a8:2c:53:8a:ea:e7:49:ba:08:57:a1:31:1c:23:a4:
         4f:df:23:31:f8:97:86:3d:43:4e:c7:5e:01:ef:e1:85:81:fb:
         fa:f1:08:59:11:45:43:60:7f:45:28:34:ee:95:cf:f2:55:76:
         1c:a9:19:ab:0b:6c:24:f1:28:31:2c:45:d6:c4:2c:a9:99:3a:
         d3:ed:72:ed:8e:b2:85:97:e5:3b:7a:3a:c0:34:47:18:88:fd:
         29:65:3f:93:7d:5a:ae:ea:27:64:a7:de:08:28:a2:2b:ec:9a:
         7d:56:1b:07:c0:a7:35:f9:3b:7d:38:c7:08:1a:ca:df:17:a7:
         d2:7d:88:b4:34:8e:c7:2d:6e:b1:5c:85:84:16:77:d0:df:83:
         b9:76:ad:66:00:ea:e1:70:12:47:e6:5b:1b:58:84:ff:39:71:
         42:b8:61:46:8f:c5:f1:5d:d2:d4:77:59:01:e1:ab:bd:8f:ac:
         f8:32:98:08:e8:20:40:99:c5:ad:b2:be:99:9b:bd:54:b2:fc:
         f3:ca:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 23:12:45 2024 by rpki-client on console-fra.rpki-client.org