Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/19ed0f3e31a9fd0ec45942344c3eacb8471dab77.roa
File:                     19ed0f3e31a9fd0ec45942344c3eacb8471dab77.roa (raw, json)
Hash identifier:          MVcZanp0w489B7XKNrko9Vlixm5ui8LKpu73qMN9c8I=
Subject key identifier:   AC:EB:BC:ED:B0:A8:42:85:DF:21:04:C1:B6:D8:E1:D1:3C:30:B1:1D
Certificate issuer:       /CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
Certificate serial:       0E0A4D
Authority key identifier: CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/19ed0f3e31a9fd0ec45942344c3eacb8471dab77.roa
Signing time:             Thu 27 Apr 2023 20:54:37 +0000
ROA not before:           Wed 26 Apr 2023 20:54:37 +0000
ROA not after:            Sun 27 Apr 2025 20:54:37 +0000
asID:                     265868
IP address blocks:        45.226.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920141 (0xe0a4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
        Validity
            Not Before: Apr 26 20:54:37 2023 GMT
            Not After : Apr 27 20:54:37 2025 GMT
        Subject: CN=19ed0f3e31a9fd0ec45942344c3eacb8471dab77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:3c:da:6f:db:6a:e1:0d:d0:1c:4b:66:74:
                    98:5b:c8:4a:e0:63:3b:88:ae:eb:98:ff:f6:5e:a7:
                    b6:e9:88:24:9a:b0:df:e3:d6:03:aa:d6:5f:7f:b2:
                    95:bf:fc:6d:73:a2:25:a7:b1:cb:82:eb:c6:a1:ed:
                    4a:7e:e6:8e:e3:a7:87:02:05:2e:b4:34:11:78:83:
                    29:62:08:44:27:33:46:09:88:b4:2c:34:6c:27:f1:
                    db:fd:3d:dc:f7:21:c6:b7:f7:f0:23:28:f2:cd:d7:
                    f2:91:21:d0:ff:82:cb:eb:0d:20:85:7e:cd:a2:57:
                    de:a5:1a:59:b6:c6:b9:4a:9d:bf:df:8b:ee:53:2a:
                    06:6a:1c:57:7f:d0:53:72:50:95:e7:00:c3:33:41:
                    0a:71:d6:21:df:82:e2:69:d5:b5:51:f8:b6:2f:d7:
                    66:fb:83:2f:8c:46:3b:22:c9:53:76:a0:93:fd:a6:
                    e4:67:8b:93:5e:ed:86:31:a2:ef:25:ed:70:4f:d8:
                    8a:80:f1:fd:11:f7:1c:00:a4:e3:4f:a4:e0:0a:30:
                    f3:10:93:bf:99:4e:13:39:c8:f1:90:d4:eb:ba:08:
                    2e:2f:b5:48:51:34:ca:1f:31:ea:f9:5c:77:77:98:
                    26:c0:ea:6b:5c:32:80:40:86:e7:19:b9:e4:d2:21:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EB:BC:ED:B0:A8:42:85:DF:21:04:C1:B6:D8:E1:D1:3C:30:B1:1D
            X509v3 Authority Key Identifier:
                keyid:CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/19ed0f3e31a9fd0ec45942344c3eacb8471dab77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:62:ed:89:31:33:c2:71:68:0e:2f:3d:95:1d:c3:85:b3:f2:
         25:01:9b:6a:a2:40:bf:e0:97:5d:05:87:b1:ce:71:42:7f:b1:
         ee:3e:ac:92:ff:b0:1d:59:3d:6f:7c:4b:40:af:87:d6:23:4c:
         92:3f:e6:35:02:1a:94:b1:eb:c8:44:75:5c:81:63:3f:75:f3:
         a7:7b:a4:05:f1:c4:96:f7:5d:58:cf:12:91:5e:a4:01:70:5e:
         f3:6a:81:88:9a:30:af:9f:a2:77:27:e7:b7:94:08:c5:37:79:
         8b:78:62:06:b0:2e:bc:56:2a:bb:f0:7f:cf:79:85:52:26:e2:
         07:20:d7:3a:b1:c4:5b:04:fb:bb:93:b3:2c:3e:21:fe:d0:c1:
         e8:03:ec:99:f8:67:cb:bc:06:ac:25:9e:e0:f4:d7:67:0c:2b:
         1a:8e:e5:df:cc:e5:51:df:8a:94:8d:03:f0:1f:20:95:d7:b8:
         a3:30:70:64:91:09:96:ec:27:72:a6:c5:47:f0:d0:49:dd:c0:
         fc:c6:e7:a3:0c:2a:68:d2:da:1d:7e:77:f0:f9:de:09:e8:77:
         55:9d:f3:91:6b:e1:80:68:f1:6c:7e:d4:92:cd:40:66:a0:2c:
         03:80:c8:6c:f4:fe:08:a4:c4:ab:b6:83:6e:d2:1f:66:3c:cc:
         39:d3:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org