Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/7c9c931f11543efe80d2cf636067250b7811d7ce.roa
File:                     7c9c931f11543efe80d2cf636067250b7811d7ce.roa (raw, json)
Hash identifier:          4h9SLLC62RbqhfJVmW8kthzC9AW7O1NvrYoLrTxmPVo=
Subject key identifier:   B3:D5:23:70:F4:33:A0:57:B6:37:9A:FF:40:DF:5F:2F:08:80:9E:8F
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       19BA22
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/7c9c931f11543efe80d2cf636067250b7811d7ce.roa
Signing time:             Sat 15 Oct 2022 01:48:24 +0000
ROA not before:           Fri 14 Oct 2022 01:46:51 +0000
ROA not after:            Tue 15 Oct 2024 01:46:51 +0000
asID:                     28423
IP address blocks:        45.166.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686050 (0x19ba22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Oct 14 01:46:51 2022 GMT
            Not After : Oct 15 01:46:51 2024 GMT
        Subject: CN=7c9c931f11543efe80d2cf636067250b7811d7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:94:f7:ff:d8:b7:87:41:55:00:e9:b5:6f:
                    64:55:75:e7:be:21:67:12:69:e5:b8:32:45:b0:c4:
                    bb:cd:7d:49:53:3c:c0:e1:64:d7:9c:18:81:c4:17:
                    4e:40:84:8a:56:b9:7e:b4:3b:ec:15:16:e6:3b:0f:
                    e4:71:86:38:14:71:6e:82:ae:cf:ca:28:02:c1:11:
                    3b:77:62:4e:97:9b:6c:ff:35:70:53:3e:27:55:7a:
                    72:fe:1f:49:e6:38:a3:39:08:ba:1a:a5:5a:07:00:
                    d9:b1:99:a2:3f:d4:6e:88:80:fb:f0:3b:dc:6d:ad:
                    f0:2f:b3:b7:05:67:06:cd:ae:66:b4:b3:0b:8f:10:
                    7c:87:f5:73:b1:2d:85:04:70:21:8d:ac:f8:71:49:
                    c4:cb:3a:80:40:b7:1b:7b:c0:21:d8:89:46:45:a1:
                    fc:8d:f3:6d:59:6a:7b:95:e2:2c:10:77:e9:0b:50:
                    38:4b:6a:06:98:85:de:94:b0:74:e1:eb:8e:5b:0a:
                    97:64:fb:f7:f9:a2:c8:99:1b:19:44:82:dc:32:fa:
                    0d:64:0d:df:76:1c:2b:3d:ff:da:52:1d:39:b8:61:
                    00:15:42:46:81:dd:dc:e8:e7:0b:73:13:84:4a:fc:
                    99:9e:1f:90:37:98:bb:0d:71:42:92:de:ee:f3:ab:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D5:23:70:F4:33:A0:57:B6:37:9A:FF:40:DF:5F:2F:08:80:9E:8F
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/7c9c931f11543efe80d2cf636067250b7811d7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:6b:07:84:a4:88:28:b9:71:7d:82:73:4b:5e:b1:e1:de:
         a6:d9:dc:95:d4:6a:ad:02:46:34:88:50:f7:6a:4c:cf:9b:43:
         ee:e5:19:ba:69:20:83:4c:a9:6d:2a:0d:f1:1c:62:2f:bc:68:
         68:9e:ff:df:c1:86:d0:0f:48:ee:16:dd:e5:f8:2c:92:b7:47:
         9e:9b:34:5e:0f:43:1d:3e:7a:a6:f6:e1:21:13:bf:f7:9c:56:
         40:ac:33:6c:96:06:f0:22:e5:72:22:ca:74:bd:e8:f4:df:0a:
         8b:ab:c2:84:ee:56:aa:b3:09:96:33:04:df:eb:79:0d:f1:8d:
         4f:3f:ce:b4:59:a6:31:53:aa:6f:c8:6c:90:97:35:c8:25:d2:
         6d:76:7f:0c:30:2f:c4:19:c8:d6:4e:e5:65:c2:a5:dd:ba:c1:
         0a:df:13:cd:1c:ff:c9:89:30:f1:8e:77:6f:28:69:9f:72:0a:
         93:fe:de:00:e8:fd:54:2b:be:3c:73:9d:50:3e:ad:52:90:47:
         38:3e:65:47:3c:95:01:44:6b:0c:1a:16:9f:87:3b:6a:f0:d8:
         9a:e7:f5:9d:48:9e:83:6f:d0:eb:47:3b:6c:11:11:fc:27:d9:
         b2:f0:8c:1d:4f:9f:09:8a:72:14:cb:a8:1b:fb:2b:5b:46:56:
         45:a4:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org