Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/79f77c8f0b6ba159c6afbe6e0c3f5ef21479fbc5.roa
File:                     79f77c8f0b6ba159c6afbe6e0c3f5ef21479fbc5.roa (raw, json)
Hash identifier:          on43XuFBPTEoXKIKG3HBpYWyv7lXegLhQKqHHd9+ZIw=
Subject key identifier:   BF:17:E2:27:76:00:2C:04:26:4E:92:3C:E8:50:4B:AC:14:56:ED:F3
Certificate issuer:       /CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
Certificate serial:       101ECE
Authority key identifier: EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/79f77c8f0b6ba159c6afbe6e0c3f5ef21479fbc5.roa
Signing time:             Fri 10 Jun 2022 00:18:57 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Sun 09 Jun 2024 03:00:00 +0000
asID:                     269874
IP address blocks:        45.189.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056462 (0x101ece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Jun  9 03:00:00 2024 GMT
        Subject: CN=79f77c8f0b6ba159c6afbe6e0c3f5ef21479fbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:54:f9:f5:d3:e4:68:2d:5a:45:29:69:5c:
                    19:b5:f0:db:0f:f4:79:29:31:30:d7:f1:b6:61:87:
                    5d:c6:68:a4:b5:47:43:0c:de:62:d9:69:3b:6d:d5:
                    dc:04:eb:e8:06:ef:e5:63:8a:b8:1e:25:0c:d4:f2:
                    ff:8c:2e:bd:8f:b0:16:e4:1b:3d:b8:8e:02:0f:a3:
                    48:dd:e0:be:79:3d:73:2b:66:77:3a:3b:31:50:77:
                    81:ab:e2:8c:60:a6:8c:14:bf:5c:30:9a:6d:6a:2c:
                    3d:3c:d2:fa:92:33:bd:eb:de:52:9c:88:51:81:aa:
                    21:5a:9b:8f:38:01:c7:db:0e:9c:8f:11:8b:f5:c0:
                    11:28:9e:94:10:da:59:2d:03:6f:ed:94:ff:e3:14:
                    e1:83:53:40:b6:19:f8:04:13:1a:ef:34:6c:91:f7:
                    41:c1:77:19:16:38:b5:18:98:b4:b3:24:de:91:40:
                    43:b1:b8:6f:4a:6c:7e:f1:0f:cd:dc:ca:f6:97:f4:
                    70:4f:ce:a2:37:a2:92:84:47:96:d9:ed:af:b2:cd:
                    24:25:16:61:58:85:26:4c:d9:98:18:87:71:f4:c3:
                    c1:4c:bc:74:2f:52:64:15:43:7e:65:63:25:77:c0:
                    60:3b:33:45:06:b8:a4:b6:87:53:9e:6d:4a:d4:39:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:17:E2:27:76:00:2C:04:26:4E:92:3C:E8:50:4B:AC:14:56:ED:F3
            X509v3 Authority Key Identifier:
                keyid:EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/79f77c8f0b6ba159c6afbe6e0c3f5ef21479fbc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:1b:da:88:44:48:d8:25:5f:b1:11:6f:cd:12:6c:d1:3d:
         77:d4:70:3c:1f:34:fa:9e:cf:37:e1:59:b5:5c:78:02:37:3c:
         91:be:81:78:13:c0:61:52:0b:52:cc:f8:99:ec:34:d8:d3:e3:
         a0:d7:80:4e:69:7c:4b:c9:10:5b:ec:4b:1a:f5:ee:f4:24:c8:
         cb:e1:27:d8:c7:08:f0:ab:44:90:fb:27:64:7c:65:43:ba:50:
         8e:8c:32:e4:b5:b9:ec:3a:63:6b:cf:eb:50:8f:50:f3:ec:5f:
         54:0c:bd:8a:62:83:29:0f:1c:7b:8d:dd:47:ff:b1:1f:56:55:
         74:80:e2:29:38:70:1e:74:d3:81:63:3d:81:f5:16:6f:2c:dc:
         03:7f:c8:59:f2:45:88:81:b3:f9:ab:ce:5a:e1:2d:09:69:b5:
         66:1a:60:34:2c:ad:b6:a4:d6:1a:6f:20:7b:44:37:09:92:34:
         ef:13:71:a9:e3:67:9b:c2:e3:66:47:bd:84:21:f7:18:04:30:
         9a:10:36:6d:cc:fb:ea:5c:61:cd:42:86:e6:20:d4:9e:90:d9:
         c4:ee:da:49:a4:4b:ee:6c:0e:76:82:54:60:ef:7b:2e:42:94:
         11:28:d6:26:d6:45:2d:1f:f4:2a:62:5a:d2:24:3c:ac:d0:33:
         36:c0:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org