Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/f649e5b829ab430ea721ac37f5d9cdaeffe12e5c.roa
File:                     f649e5b829ab430ea721ac37f5d9cdaeffe12e5c.roa (raw, json)
Hash identifier:          luZMDYrqY+aFiWxX89Nwb9WBVyY5RbXGrZjUCpA+2eM=
Subject key identifier:   D9:3D:05:CF:3F:61:CA:13:2C:57:50:FA:59:44:8A:71:8C:EA:24:4F
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       66F8
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/f649e5b829ab430ea721ac37f5d9cdaeffe12e5c.roa
Signing time:             Tue 12 Apr 2022 16:52:12 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.59.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26360 (0x66f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=f649e5b829ab430ea721ac37f5d9cdaeffe12e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:0e:70:d9:cd:d4:7e:ac:d2:ef:c8:7d:49:
                    ac:70:30:d3:9d:a3:c2:e6:ab:e3:c6:02:a6:67:29:
                    d6:03:05:5c:ee:3f:56:a6:ae:b4:fd:1c:a2:9d:d9:
                    44:3e:ad:f9:a4:e5:0f:ef:00:1b:27:f3:b5:22:a3:
                    52:7e:60:3c:8f:49:87:b2:c5:b4:f2:1d:12:fe:11:
                    bc:89:78:32:95:14:16:f0:a1:c3:71:d0:ea:a4:19:
                    ae:6c:8a:f7:02:f1:f2:3c:4f:e3:bd:97:38:1c:da:
                    e3:f5:5b:5b:c9:be:40:9a:3d:73:c4:02:0b:2c:43:
                    44:c1:ed:00:39:db:37:be:7c:a6:fb:1b:67:de:8a:
                    d8:67:a3:d6:65:b7:58:0e:73:f0:3a:f1:e4:ff:72:
                    3e:79:d6:83:28:46:23:c4:3f:53:f6:fe:d9:0c:be:
                    8a:0c:ab:86:95:68:f4:a7:4b:f4:1c:45:42:4f:07:
                    8a:69:96:37:a7:26:74:b8:78:5c:d4:24:66:a4:d5:
                    98:e1:00:51:79:bd:5d:ce:2a:03:d7:bd:8d:91:5a:
                    0c:d7:c4:ac:1c:e2:a8:1b:eb:d9:7b:8a:e4:26:af:
                    fe:6f:d5:af:f3:e7:77:24:7f:30:ba:db:ad:8f:4c:
                    50:de:1d:cd:d9:b9:1a:41:c2:c7:c2:38:0c:ca:ba:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:05:CF:3F:61:CA:13:2C:57:50:FA:59:44:8A:71:8C:EA:24:4F
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/f649e5b829ab430ea721ac37f5d9cdaeffe12e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:53:ab:f5:44:d6:49:c4:37:06:8e:93:c0:4c:8d:29:4e:
         d7:0c:fa:de:c5:82:de:25:8e:18:fd:f6:86:9e:5a:4e:51:d8:
         93:d7:bb:08:d6:b4:db:29:9c:52:c3:a9:1f:23:b5:72:41:f5:
         7f:b3:d4:4d:81:54:bd:78:2a:42:be:f5:3b:5f:1f:bb:ae:c6:
         59:cd:36:54:bf:74:d4:2e:c5:41:f8:5e:60:1e:09:1f:e6:ed:
         bb:4e:10:ca:66:0c:1d:51:9e:65:a4:99:f9:b7:87:20:62:1f:
         bd:68:83:df:1c:4d:59:f5:89:7b:da:b0:a1:37:f6:24:3c:94:
         63:07:5d:8b:89:cb:37:db:25:6e:8c:c7:81:08:1b:6d:86:35:
         9e:41:6b:82:b5:1b:99:c9:f6:df:c6:9a:06:be:08:2c:4a:32:
         49:31:d0:cc:ab:68:f5:4b:5f:5e:62:90:57:1b:3c:ee:73:8c:
         d9:f8:08:74:06:44:33:d4:62:47:ee:cd:cb:de:81:31:f0:f0:
         0e:2e:63:82:ec:3b:66:15:5f:85:97:ab:80:e5:f0:28:f7:68:
         89:5e:31:35:8a:48:ec:8b:3d:29:24:4c:18:1c:23:9e:e5:a1:
         dc:21:01:fe:eb:cb:4b:28:66:36:ba:05:72:b4:4d:5c:49:cb:
         81:e4:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org