Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/adbc8a75d93c9178f6d20591eac9cbab3420f482.roa
File:                     adbc8a75d93c9178f6d20591eac9cbab3420f482.roa (raw, json)
Hash identifier:          NiA6PfgiM4DxKhyxC/jN8ucBDzI/cPpzclh1Uo1V7jE=
Subject key identifier:   B2:E6:F1:22:07:52:11:9A:0B:DA:D8:B4:1D:9D:52:3E:F4:44:68:C3
Certificate issuer:       /CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
Certificate serial:       101CDE
Authority key identifier: EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/adbc8a75d93c9178f6d20591eac9cbab3420f482.roa
Signing time:             Fri 10 Jun 2022 00:18:45 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Sun 09 Jun 2024 03:00:00 +0000
asID:                     269874
IP address blocks:        45.189.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055966 (0x101cde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Jun  9 03:00:00 2024 GMT
        Subject: CN=adbc8a75d93c9178f6d20591eac9cbab3420f482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:b3:bf:e3:ae:c2:d5:d7:21:e9:88:10:1c:
                    e2:49:cd:91:e5:76:fc:d7:69:e9:66:a5:8a:6e:66:
                    e2:21:2b:16:d8:23:ef:51:c9:ca:5b:b8:c6:df:ed:
                    77:8a:47:2c:d9:b8:e1:cf:73:46:e6:2c:14:b0:4f:
                    03:79:06:59:a5:22:58:bc:30:b4:b9:7a:10:02:b4:
                    db:01:20:4b:48:5b:38:2d:a4:79:af:e1:32:79:ce:
                    02:1b:ff:a4:76:71:66:41:62:f4:b8:2a:93:d6:1f:
                    81:27:ee:a1:2e:5f:02:e2:61:2e:dd:c9:24:c6:ad:
                    e3:6c:48:4d:4a:b6:5a:9c:40:5c:23:34:7a:3e:fe:
                    2c:9e:6f:7d:ce:69:70:fc:76:c1:77:04:c8:84:54:
                    1d:0d:fd:55:6c:83:7f:8b:2c:cc:09:ba:05:26:f8:
                    6f:24:f0:c9:cb:80:b7:57:ee:92:54:4b:37:4b:ce:
                    74:d7:d3:c0:54:fd:32:8f:fb:1b:e8:d0:19:72:7e:
                    68:81:03:c9:8c:8c:b1:24:bd:86:0d:f0:5c:1e:d8:
                    06:a2:3c:80:68:34:32:fd:a5:a3:2a:84:c3:87:2b:
                    46:7b:41:86:82:af:83:c3:fc:12:77:d6:8b:28:21:
                    84:c7:37:94:04:0b:9a:40:bb:c3:08:e2:1b:34:65:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E6:F1:22:07:52:11:9A:0B:DA:D8:B4:1D:9D:52:3E:F4:44:68:C3
            X509v3 Authority Key Identifier:
                keyid:EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/adbc8a75d93c9178f6d20591eac9cbab3420f482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:e9:ed:bd:d6:95:75:af:80:22:f2:22:3a:59:d6:5a:e0:
         22:6b:25:7e:52:b3:a9:05:84:82:c0:ca:86:13:22:60:0e:0b:
         c2:9e:3f:2e:6c:11:98:f9:2d:9e:e4:5c:7b:f0:ac:82:1b:11:
         18:1e:a7:76:ad:98:e8:4e:78:22:99:ea:f9:92:4e:a3:27:9f:
         74:c3:36:dc:6b:6b:b7:b8:b0:b0:3c:41:93:1d:b3:d2:e5:1a:
         a2:1c:c3:b8:4b:9e:b8:3c:cc:c5:49:57:63:38:5f:94:61:9b:
         89:95:94:22:4a:78:e3:8c:fe:00:17:c1:83:5b:14:8a:e9:7f:
         4a:e4:d2:a1:5e:db:8f:dc:29:91:54:30:4a:ff:0b:4a:7d:ba:
         22:73:f0:6d:b8:f2:1f:8d:e8:54:e4:3e:49:33:9c:57:d5:48:
         0d:ef:bb:0f:3c:38:1b:33:65:7e:04:d5:76:d3:ba:6c:e8:4d:
         62:31:b4:1a:b3:3a:63:bd:cf:92:07:f6:d7:c1:65:76:a9:e7:
         58:27:d0:a5:6c:56:46:d3:b4:3d:00:ed:c3:ba:cb:bd:47:1e:
         c6:8a:ae:86:21:9c:b2:cb:8c:77:55:2f:b4:70:b6:7a:dd:6f:
         c7:7c:bf:dd:f0:cf:39:a3:da:31:69:6d:e4:c1:05:8e:f7:07:
         91:2f:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org