Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/41680534dcb507f2cfd250762507774c6c619a21.roa
File:                     41680534dcb507f2cfd250762507774c6c619a21.roa (raw, json)
Hash identifier:          bTMR+C94grLu+gzui6ddPxzK88m/3w/gxUVvWVxaqtw=
Subject key identifier:   BF:90:FD:01:F8:A2:65:11:1D:DB:A2:B1:D2:99:42:9C:34:CB:CC:47
Certificate issuer:       /CN=a1cac4218e010e3d59d004f744b976a5437d792e
Certificate serial:       120959
Authority key identifier: 33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/41680534dcb507f2cfd250762507774c6c619a21.roa
Signing time:             Sat 14 Oct 2023 08:30:01 +0000
ROA not before:           Fri 13 Oct 2023 08:30:01 +0000
ROA not after:            Sun 12 Oct 2025 08:30:01 +0000
asID:                     52507
IP address blocks:        45.230.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182041 (0x120959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1cac4218e010e3d59d004f744b976a5437d792e
        Validity
            Not Before: Oct 13 08:30:01 2023 GMT
            Not After : Oct 12 08:30:01 2025 GMT
        Subject: CN=41680534dcb507f2cfd250762507774c6c619a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:9f:5a:6b:90:da:5a:3c:d8:47:94:0f:57:
                    af:27:b3:10:dc:19:d9:62:00:97:ec:00:09:b8:7a:
                    5b:eb:a3:6d:53:97:70:c5:e9:07:53:28:75:ca:13:
                    19:73:34:98:32:14:b9:4b:cf:bd:af:21:69:9d:86:
                    ed:85:a0:53:ec:f0:c5:80:d5:35:87:6f:c9:a2:fb:
                    99:6d:e4:f8:a6:0d:f2:6b:2b:7e:46:f4:7a:fb:0f:
                    4e:76:43:d8:3d:6e:14:e3:45:c5:92:0d:13:6e:3b:
                    e6:67:d7:3b:e7:33:f5:d7:85:a4:a1:83:db:c7:23:
                    17:9a:60:f3:e3:21:a6:a9:16:ce:1a:8e:32:d2:27:
                    58:3e:75:25:5a:a1:10:43:dd:e1:bc:dd:67:c8:3a:
                    6a:81:f5:28:55:39:48:68:38:01:39:67:22:9f:ef:
                    ed:6f:d9:9f:c7:29:b6:92:da:bd:cc:24:a5:79:ff:
                    c6:de:b7:3e:d6:36:74:64:06:43:70:f5:9a:a9:de:
                    1c:2b:74:59:44:af:40:4e:d4:55:38:a2:79:82:d0:
                    fe:9d:53:b7:a4:68:06:27:a6:7b:b8:33:b5:df:06:
                    8e:68:3f:ce:73:e5:c5:e1:6e:d5:d4:50:14:8f:01:
                    d6:a2:56:24:b3:64:49:11:75:f1:37:e5:49:58:36:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:90:FD:01:F8:A2:65:11:1D:DB:A2:B1:D2:99:42:9C:34:CB:CC:47
            X509v3 Authority Key Identifier:
                keyid:33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/41680534dcb507f2cfd250762507774c6c619a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/a1cac4218e010e3d59d004f744b976a5437d792e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:6d:60:1c:a9:99:e3:7c:1b:80:c1:9e:5f:8d:df:b4:3f:
         96:66:fd:13:b1:3e:6f:ea:15:55:0a:05:1c:f0:ec:d8:f9:da:
         38:25:5e:1e:c5:31:83:cf:6e:c5:3a:af:c0:18:6d:88:35:88:
         55:5e:1f:46:b4:8f:32:c6:e2:33:21:e4:17:07:0a:0b:f2:60:
         d3:68:e5:d9:ae:16:ca:e3:9c:3f:25:cc:95:fe:24:73:13:70:
         85:7a:1c:4e:79:29:9e:c2:af:cf:28:8c:2a:e1:74:cf:8a:24:
         b1:a2:4f:23:55:dd:5d:7a:04:db:33:60:95:43:e7:e1:e9:72:
         a8:a3:0c:15:e0:0a:88:ac:27:8c:0f:71:3c:27:3b:e7:b3:f0:
         86:11:85:08:95:b5:e6:75:6e:53:94:2b:69:1d:77:88:fc:62:
         8b:a9:fe:37:b0:0d:df:bf:c5:08:4e:af:31:72:ed:6c:2d:bf:
         37:f7:81:b2:79:9f:fc:f4:e3:1b:00:0c:1e:e5:f8:b4:f8:0a:
         e7:06:e8:94:1c:85:f0:9a:6f:8b:16:50:d0:fc:87:ac:d8:95:
         be:a5:14:44:bf:c2:1a:8f:44:48:88:64:99:b1:1d:21:6b:cd:
         b3:ec:67:58:42:9d:43:a5:44:5e:15:5b:ee:72:9a:b6:2e:e4:
         3b:ea:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org