Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/a9c91e70b5037b0aef22c124acf7c8828b0c6192.roa
File:                     a9c91e70b5037b0aef22c124acf7c8828b0c6192.roa (raw, json)
Hash identifier:          w7cT7dteCnjwkPR8KAOrkj7oVjG2la9nM72SXa9ExN4=
Subject key identifier:   5F:9D:62:22:46:6B:32:FC:D8:D0:5B:D1:CB:0A:58:DE:83:C5:30:F2
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       7120
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/a9c91e70b5037b0aef22c124acf7c8828b0c6192.roa
Signing time:             Tue 12 Apr 2022 16:53:02 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.58.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28960 (0x7120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=a9c91e70b5037b0aef22c124acf7c8828b0c6192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:47:ef:d2:3e:bb:a7:07:94:b8:68:1f:04:
                    27:89:39:51:0f:00:74:58:59:93:1e:3c:1d:77:f5:
                    15:3a:ee:9a:ac:11:8d:c7:6f:78:12:85:93:91:0c:
                    da:17:bb:9e:42:72:97:d6:33:ee:c6:05:0d:86:3c:
                    63:be:88:75:2a:3e:a5:8f:c3:c3:bb:c8:2d:c4:ef:
                    22:19:56:c7:34:12:e0:ad:ce:d8:3d:43:b6:ff:e8:
                    5c:44:bd:db:92:a0:e2:4c:1e:b7:5e:c4:d5:d3:45:
                    9c:cb:8b:81:47:c3:1c:23:41:a0:3a:4d:7e:ad:6c:
                    a1:d3:40:fb:c2:e7:7d:28:fb:6e:42:03:3e:92:12:
                    8e:c2:1b:fa:18:61:6d:be:0c:81:a6:00:40:70:74:
                    76:37:15:d9:a8:c2:3e:ee:8f:28:bc:b9:85:53:01:
                    dc:6f:b5:39:eb:1a:c3:55:4f:d8:7c:d1:ff:47:21:
                    c4:b9:34:a2:a1:fc:12:e4:60:f7:d8:4a:77:56:6b:
                    f0:c2:42:8c:61:ff:b6:97:8b:d7:6b:67:47:8f:df:
                    ac:f8:07:4f:67:4c:eb:e6:2e:d0:f9:ab:52:d7:10:
                    99:5e:55:82:09:05:46:d1:bd:62:4f:96:b9:4e:ae:
                    2b:90:a5:39:0d:c5:0f:62:c8:6f:ef:14:f3:09:71:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9D:62:22:46:6B:32:FC:D8:D0:5B:D1:CB:0A:58:DE:83:C5:30:F2
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/a9c91e70b5037b0aef22c124acf7c8828b0c6192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:e2:76:8c:e6:43:33:ad:20:e8:4b:59:a4:54:79:b8:f4:
         81:80:01:17:c4:80:f0:75:94:eb:b5:9d:3b:d8:5f:a7:41:32:
         1f:cc:c2:e6:8b:23:90:ca:ef:24:f4:53:af:5b:5a:89:fa:90:
         20:15:eb:d8:e6:55:59:27:1e:2f:e9:2d:e4:79:25:b0:cc:25:
         67:61:85:7d:15:b3:42:44:5d:62:8a:3f:eb:65:d8:74:30:2f:
         c7:31:af:e1:50:98:02:2d:84:25:e9:b6:88:f8:62:cc:14:bf:
         93:cc:19:6e:26:cd:d5:a5:9d:0d:04:ce:99:44:79:5c:be:56:
         0c:f3:2c:bd:70:d6:a6:8c:b8:d9:15:58:b5:13:55:0c:f4:f8:
         78:7c:f3:ce:9b:e6:6d:63:51:6f:c7:05:1a:2f:b4:e9:76:39:
         b1:e9:9b:9a:94:53:fa:38:da:c3:22:62:be:8a:5d:08:3b:0d:
         57:73:0a:b5:30:54:83:b5:6e:b6:22:e5:b2:a8:50:f2:41:7d:
         b8:41:6b:70:09:ba:f3:7a:88:01:fa:84:4b:e0:07:e4:19:a4:
         16:78:66:dc:59:b9:72:f4:22:a2:88:ce:93:ef:87:7f:f9:27:
         13:f0:55:02:44:7f:24:33:08:56:82:93:04:99:41:b7:26:13:
         5f:cc:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org