Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/80bd69f6d4d67e7e1bae71c9f927fdd709256878.roa
File:                     80bd69f6d4d67e7e1bae71c9f927fdd709256878.roa (raw, json)
Hash identifier:          GahJnibV3vIwxkbyMQJkDkpxbtSxSsRKaCa+MMJQqyc=
Subject key identifier:   4E:74:28:26:85:58:1F:22:41:2C:8C:B5:D1:EC:F7:AD:08:6B:75:67
Certificate issuer:       /CN=04dfd21e79c2ea5ef8cf310f4f091d59f24f7473
Certificate serial:       0361
Authority key identifier: E3:C7:0E:45:25:CB:B0:09:B8:62:9B:50:F0:A9:B9:3E:EE:BB:C5:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/80bd69f6d4d67e7e1bae71c9f927fdd709256878.roa
Signing time:             Mon 26 Dec 2022 23:06:05 +0000
ROA not before:           Sun 25 Dec 2022 23:00:04 +0000
ROA not after:            Thu 26 Dec 2024 23:00:04 +0000
asID:                     27983
IP address blocks:        45.237.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04dfd21e79c2ea5ef8cf310f4f091d59f24f7473
        Validity
            Not Before: Dec 25 23:00:04 2022 GMT
            Not After : Dec 26 23:00:04 2024 GMT
        Subject: CN=80bd69f6d4d67e7e1bae71c9f927fdd709256878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:43:9f:09:f0:be:a3:9d:c5:9e:17:d4:c5:
                    09:3f:17:f0:75:fc:97:82:6a:da:96:b2:f8:c3:c5:
                    0d:b6:84:cf:e2:22:ef:63:4d:3d:69:10:67:b3:a3:
                    3f:d6:2e:ab:4c:18:9c:fd:79:85:30:3b:26:67:fe:
                    7a:c1:86:8e:d6:da:83:0d:32:aa:14:1a:28:49:2a:
                    5b:20:b9:b0:01:e2:f6:c2:31:13:c3:ae:f9:e3:41:
                    a1:9e:2c:b0:82:69:85:91:3d:d1:49:e9:f2:f3:35:
                    7f:f5:d9:a1:f8:f1:f3:0b:f9:20:9a:db:90:02:b4:
                    6d:7c:57:00:5e:0b:1f:73:6c:ee:f9:f0:74:ef:15:
                    2c:be:25:5f:a8:83:42:00:01:76:b8:87:fc:0a:f4:
                    54:d8:64:70:2e:72:04:27:63:d4:39:05:10:fe:ed:
                    38:66:6c:27:03:96:de:86:ac:47:cf:3e:40:d3:4c:
                    d8:e4:4a:4b:8d:43:98:d4:15:01:18:b8:d8:f7:3b:
                    d2:e5:a4:2d:65:a8:08:d0:de:4f:78:ff:53:34:af:
                    e6:02:a0:50:e3:30:69:07:7a:f1:58:ec:10:77:95:
                    35:51:64:99:08:f3:ad:90:35:0a:37:2e:90:42:cc:
                    02:70:1c:c9:d1:98:72:3f:2c:58:bd:fa:93:7f:28:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:74:28:26:85:58:1F:22:41:2C:8C:B5:D1:EC:F7:AD:08:6B:75:67
            X509v3 Authority Key Identifier:
                keyid:E3:C7:0E:45:25:CB:B0:09:B8:62:9B:50:F0:A9:B9:3E:EE:BB:C5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/80bd69f6d4d67e7e1bae71c9f927fdd709256878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:c9:d0:8f:de:8b:a8:cc:c2:2d:db:10:4a:85:15:5f:cd:
         0f:a0:68:39:66:67:b5:2d:38:18:5b:b1:c7:ac:98:63:8b:31:
         d3:2e:44:cf:d6:b9:a0:58:3c:a1:8e:7e:91:61:0e:8c:d9:be:
         9c:f7:e7:27:f8:40:03:e6:08:73:18:1b:dd:f8:78:94:10:2e:
         cb:17:a6:d2:f9:f6:ff:a3:ad:91:ae:74:8f:2c:ac:54:06:36:
         f8:e0:79:71:3a:55:27:e8:a1:f3:44:ba:a4:89:ef:5a:38:c3:
         33:85:52:dc:91:cf:60:93:94:77:15:45:02:cf:d9:85:ee:bd:
         32:7b:a0:7d:4f:bf:24:e1:92:a0:e8:2b:73:e9:af:9e:23:6b:
         ac:be:e5:77:1d:f6:4c:f5:36:3a:89:9a:45:bb:bf:ec:e6:1e:
         79:99:0b:74:3c:58:38:23:39:7f:18:ef:97:5e:d9:7d:18:5e:
         b1:ac:b4:3d:fb:7c:04:b9:6e:1b:72:ae:8d:9d:79:a6:14:79:
         c9:35:a5:b9:9b:b2:7d:ae:54:f3:80:0a:1c:a3:49:11:5f:17:
         9f:d8:83:94:a1:78:f0:1e:db:2b:93:ff:a8:b0:d2:bb:4c:36:
         4d:05:b2:49:ad:6e:d4:d8:6d:f2:72:cc:f8:b1:cf:d2:b9:c2:
         56:a8:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org