Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/99e4892af750486f98ab11e1eb81c0236b63be2b.roa
File:                     99e4892af750486f98ab11e1eb81c0236b63be2b.roa (raw, json)
Hash identifier:          v3+eKCbEhoJa/2+F8L5gYWjlGmSW/18lanYJRsCZuNI=
Subject key identifier:   9F:B0:5B:21:E0:17:60:4F:D6:45:D8:EC:05:1C:76:8D:3C:7D:58:F4
Certificate issuer:       /CN=a1cac4218e010e3d59d004f744b976a5437d792e
Certificate serial:       1405C5
Authority key identifier: 33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/99e4892af750486f98ab11e1eb81c0236b63be2b.roa
Signing time:             Sat 30 Dec 2023 23:41:35 +0000
ROA not before:           Sat 30 Dec 2023 23:41:35 +0000
ROA not after:            Tue 30 Dec 2025 23:41:35 +0000
asID:                     271914
IP address blocks:        45.230.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312197 (0x1405c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1cac4218e010e3d59d004f744b976a5437d792e
        Validity
            Not Before: Dec 30 23:41:35 2023 GMT
            Not After : Dec 30 23:41:35 2025 GMT
        Subject: CN=99e4892af750486f98ab11e1eb81c0236b63be2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:20:74:ef:38:a1:b9:bc:49:d5:8e:40:88:
                    2c:93:b3:88:8f:4c:3a:db:c6:37:03:0a:bb:fb:8b:
                    9c:5a:ca:3f:ed:c6:6c:04:71:8a:0e:f1:67:2a:bc:
                    c5:ca:62:f7:4c:de:28:bf:30:aa:a7:0e:d4:a6:6f:
                    a7:6b:e9:2c:e5:8b:fa:ea:1b:ee:ba:13:17:ce:f5:
                    26:2d:28:9b:89:2a:4a:fb:bf:fb:79:0b:2b:2d:00:
                    92:c0:aa:11:d5:18:f6:66:06:fd:52:fb:43:08:1d:
                    11:fa:cd:e5:10:72:9e:46:b2:56:c1:18:00:e5:4c:
                    06:c5:56:12:dc:d9:26:ae:7f:dc:b5:51:2c:2e:e4:
                    b4:c3:ee:c0:3a:0e:e8:f2:0b:38:d3:73:12:f5:9d:
                    4a:8e:12:3c:0c:1f:79:4c:f5:42:87:4f:f9:33:2b:
                    0c:91:8d:bd:87:ce:00:f2:0e:30:4d:1a:be:f3:44:
                    9b:bb:b3:5e:69:26:07:72:71:44:68:51:4f:6d:e1:
                    a2:dc:9c:ef:10:f2:29:b7:85:3b:81:2c:46:1e:b3:
                    f7:aa:c9:5e:20:3a:eb:a3:70:7a:09:b9:81:fd:d6:
                    13:d9:a6:ef:66:c6:46:f7:77:a2:2a:10:32:15:ef:
                    6e:4b:0c:de:16:67:94:bb:ed:f6:2c:ce:5b:93:08:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B0:5B:21:E0:17:60:4F:D6:45:D8:EC:05:1C:76:8D:3C:7D:58:F4
            X509v3 Authority Key Identifier:
                keyid:33:DA:8B:64:E0:09:0D:1E:40:76:A8:EB:28:FD:03:BF:10:8E:9D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1cac4218e010e3d59d004f744b976a5437d792e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/99e4892af750486f98ab11e1eb81c0236b63be2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d82f455-9f92-4d48-9af8-1dfad19dadb6/a1cac4218e010e3d59d004f744b976a5437d792e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:c7:e5:05:17:bb:3f:27:9b:d6:52:04:a2:56:2b:94:cc:
         bf:f0:91:1b:aa:a4:c0:1e:07:fa:a0:a5:de:cf:08:fe:b5:34:
         de:41:5f:88:72:ba:75:7b:55:30:36:49:70:a6:e3:a2:6d:03:
         e9:ec:f7:8d:63:c7:e8:97:9d:17:71:b8:b3:76:5e:68:61:b8:
         66:93:46:44:20:69:52:94:f1:f7:19:62:f9:a8:33:8a:c1:2e:
         bd:bb:43:76:21:13:c4:24:8a:84:19:07:bc:30:63:3e:87:13:
         e8:26:80:4e:77:c5:b8:75:d0:5b:00:bb:07:58:50:b2:de:23:
         aa:74:ab:9f:53:59:7b:8c:17:0e:b2:cb:5d:61:95:ba:72:42:
         75:71:e5:f1:19:72:8f:0b:ba:55:4e:59:60:94:bb:f4:7b:cb:
         7d:8d:63:6f:39:4f:d1:8d:6f:0e:02:c2:08:1a:be:30:fe:1a:
         7d:80:1e:97:f1:5b:c8:fe:ad:3e:f4:07:45:91:f6:35:44:38:
         60:63:7c:ef:06:d5:e2:e9:59:21:cd:86:7e:bc:12:2e:33:4a:
         c0:7c:84:af:e9:14:b9:a5:70:14:ca:e8:77:17:ac:ce:33:cc:
         87:d2:ba:dc:a0:0f:0e:de:2a:77:a9:1b:bc:b6:fc:9d:83:cf:
         da:7b:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org