Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/98b7ae1dd41e3272c3e244c5d637d062fb22e7c7.roa
File:                     98b7ae1dd41e3272c3e244c5d637d062fb22e7c7.roa (raw, json)
Hash identifier:          QVaV/NSTbZM7THDy5jKROuOqADjJOl+gDB3YBPSj6Zo=
Subject key identifier:   F2:D5:13:A1:FA:32:F4:5A:B3:CB:BC:2B:A6:7C:09:34:74:0E:EC:E7
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       04D690
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/98b7ae1dd41e3272c3e244c5d637d062fb22e7c7.roa
Signing time:             Tue 27 Sep 2022 16:23:15 +0000
ROA not before:           Tue 27 Sep 2022 16:22:21 +0000
ROA not after:            Fri 27 Sep 2024 16:22:21 +0000
asID:                     270158
IP address blocks:        45.174.56.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317072 (0x4d690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Sep 27 16:22:21 2022 GMT
            Not After : Sep 27 16:22:21 2024 GMT
        Subject: CN=98b7ae1dd41e3272c3e244c5d637d062fb22e7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:2d:3f:05:2c:97:1e:22:bc:62:4c:c7:63:
                    48:d4:e7:01:9a:f1:65:c5:ce:5d:3e:6c:a7:9d:03:
                    bf:ca:5d:7f:88:5b:ca:d4:38:c8:bf:73:47:6f:b8:
                    62:cf:c5:a8:4c:bb:06:4a:44:fd:9e:71:a9:11:07:
                    b3:1e:2b:ec:23:99:c2:e5:ff:53:c9:59:50:b3:9b:
                    6a:3f:12:16:27:bc:fd:0b:ca:e3:a4:6e:50:83:cf:
                    00:98:45:29:2f:95:8e:ac:64:90:ce:82:b7:b4:8a:
                    ca:2c:fd:7c:c6:3a:73:9c:f9:f8:74:e7:7d:9a:1f:
                    49:0d:c2:5c:9a:77:5f:29:ac:eb:b6:fc:fc:54:3b:
                    2e:34:83:58:9b:68:6a:a5:99:a9:db:15:6b:01:39:
                    cf:32:7d:50:18:7e:c8:b9:a4:07:c2:ac:65:b8:85:
                    dd:6d:cd:ff:30:56:ce:17:fb:e0:76:04:d4:e8:90:
                    50:fc:a1:f4:cb:3c:f0:79:4b:6a:b2:ba:0d:2f:b1:
                    37:a1:ba:bb:10:4f:bf:81:e8:1d:5d:ef:09:56:d6:
                    fe:65:9d:23:54:01:71:45:d1:dc:e2:b0:d3:b8:b3:
                    40:a7:f0:9f:ce:17:c7:d0:1e:70:ed:57:dd:dc:ff:
                    8e:18:37:fb:30:bd:cc:8d:14:c5:6b:01:82:46:02:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:13:A1:FA:32:F4:5A:B3:CB:BC:2B:A6:7C:09:34:74:0E:EC:E7
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/98b7ae1dd41e3272c3e244c5d637d062fb22e7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:be:12:15:d2:20:b9:09:ea:fb:2c:c3:1b:78:2f:b6:52:7e:
         99:6c:83:62:7a:f5:f5:8f:84:6f:e3:9f:de:fb:bd:93:d5:ac:
         3a:05:a5:a5:6f:7a:a0:41:c8:ad:53:77:41:35:fa:d7:d5:59:
         23:22:ca:12:2c:18:c3:bf:a6:b8:4f:30:f1:72:c6:55:73:c8:
         73:29:92:b9:9c:3d:21:5c:b9:5e:9c:7c:fc:08:9b:26:94:1d:
         b2:db:46:a5:e3:b8:c0:7f:d7:05:30:73:aa:0d:1d:bb:ed:52:
         7b:7a:d9:1f:dc:b5:0e:ce:0c:6d:29:74:7a:b4:17:89:47:c3:
         90:4f:fa:52:09:08:8e:10:d3:7b:53:53:5c:60:b9:7b:31:3c:
         cf:29:5a:da:ca:a1:7a:53:b9:3a:08:35:1f:c7:ba:b5:b9:5d:
         3a:84:2c:be:8f:9e:02:86:1e:07:ef:0b:de:96:8d:69:aa:1e:
         f5:bc:b5:be:80:13:3d:1d:de:80:f5:05:4e:24:1e:c2:21:7c:
         70:cf:e7:4a:67:b1:69:30:5a:01:0b:3f:59:e1:e2:22:56:03:
         cd:53:e3:db:a0:12:0a:eb:aa:9b:67:e3:d9:91:74:87:00:b4:
         4a:2e:ac:aa:ef:cf:d1:e8:ce:bc:d4:30:a9:68:75:ba:4f:10:
         b1:5c:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org