Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33ca75c0-8230-44eb-896d-0c4f80ac7b19/f92a080be74cc26634ff3dac13c95e9be0c55dde.roa
File:                     f92a080be74cc26634ff3dac13c95e9be0c55dde.roa (raw, json)
Hash identifier:          hDn+vhWtQ+r0UnnvqYwZ0jyRQpU4lijHC5l2XnPt7rQ=
Subject key identifier:   E0:F4:A6:9D:3D:11:17:A1:4E:FB:17:4A:98:3A:28:98:67:94:32:0B
Certificate issuer:       /CN=5d834cc9505633f0fe6638c96c3606b78d3475b3
Certificate serial:       188070
Authority key identifier: 08:9D:FA:61:9A:BF:B8:A7:8B:4A:19:51:9C:62:2C:6F:B2:B1:F7:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d834cc9505633f0fe6638c96c3606b78d3475b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33ca75c0-8230-44eb-896d-0c4f80ac7b19/f92a080be74cc26634ff3dac13c95e9be0c55dde.roa
Signing time:             Tue 19 Jul 2022 21:02:26 +0000
ROA not before:           Tue 19 Jul 2022 03:00:00 +0000
ROA not after:            Fri 19 Jul 2024 03:00:00 +0000
asID:                     265703
IP address blocks:        45.169.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605744 (0x188070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d834cc9505633f0fe6638c96c3606b78d3475b3
        Validity
            Not Before: Jul 19 03:00:00 2022 GMT
            Not After : Jul 19 03:00:00 2024 GMT
        Subject: CN=f92a080be74cc26634ff3dac13c95e9be0c55dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:36:d0:17:73:3f:12:47:93:23:db:2e:c4:
                    16:fa:5a:e0:18:13:45:6a:9d:a2:c8:ee:75:fc:fd:
                    8f:55:b7:79:38:fc:48:9e:5b:00:5a:44:01:de:5a:
                    b2:73:0c:50:d9:5a:27:6e:22:c9:6b:07:b7:bd:27:
                    90:f3:2a:24:85:b4:04:4e:c3:9d:14:57:e6:08:90:
                    7d:12:30:25:18:b3:52:28:f7:62:a0:18:8c:88:2d:
                    1d:89:ee:ef:a8:95:a5:ee:24:a3:80:cc:32:ea:a6:
                    a4:00:19:31:db:7d:e2:1d:f9:30:d4:ec:42:51:74:
                    e4:88:49:ea:59:0f:78:f2:ae:be:27:8f:64:66:31:
                    e7:db:27:23:35:06:f8:c8:36:bf:2a:2a:99:43:74:
                    8b:20:a4:62:61:f4:b9:d6:3d:dc:60:82:b3:ba:08:
                    cd:89:83:73:6f:1b:64:d1:0e:3a:83:62:7a:53:58:
                    4a:c8:00:0a:f6:54:aa:b9:27:ca:20:8b:7e:14:78:
                    23:98:6e:56:da:a9:80:21:8b:5b:75:85:10:5a:b4:
                    41:ee:bc:fb:35:b3:55:18:82:18:48:7b:9f:8d:3e:
                    7e:43:2c:e5:8c:2f:94:cb:c9:38:1d:98:2f:d2:5e:
                    09:52:5e:65:c5:a9:d4:e3:48:ea:43:d0:c9:a8:05:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:A6:9D:3D:11:17:A1:4E:FB:17:4A:98:3A:28:98:67:94:32:0B
            X509v3 Authority Key Identifier:
                keyid:08:9D:FA:61:9A:BF:B8:A7:8B:4A:19:51:9C:62:2C:6F:B2:B1:F7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d834cc9505633f0fe6638c96c3606b78d3475b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33ca75c0-8230-44eb-896d-0c4f80ac7b19/f92a080be74cc26634ff3dac13c95e9be0c55dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33ca75c0-8230-44eb-896d-0c4f80ac7b19/5d834cc9505633f0fe6638c96c3606b78d3475b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:3f:37:dc:1e:41:df:1f:44:23:2b:ed:b1:91:f8:c8:b4:
         d9:23:7b:42:a2:6c:92:fd:0a:dd:85:20:8a:7f:28:a1:0b:25:
         63:4d:07:95:7d:f9:0d:1c:0a:cb:79:fe:73:f3:f6:94:25:b6:
         ef:9b:6f:78:c7:86:c7:0b:ad:30:5b:83:b9:06:08:f6:56:67:
         bc:cf:31:68:04:54:61:64:ad:72:45:8d:4f:48:77:2a:58:5c:
         b8:92:98:3a:8d:9c:10:3a:e0:5e:a7:9b:32:56:af:e4:53:b3:
         d8:bc:ca:b7:53:f4:d1:50:1f:8a:99:e9:96:66:9d:b4:da:a7:
         9d:9e:7c:fe:33:a8:64:b0:1b:eb:ad:61:b7:38:64:a2:c2:60:
         61:c7:5c:a3:d7:71:ae:ff:0c:7b:64:4d:10:0a:98:51:48:85:
         07:3c:96:c4:8c:9a:bc:52:2e:64:70:c7:2b:21:5e:3b:1d:df:
         96:b6:0e:59:c1:3e:4e:b0:0d:b1:3b:7f:66:63:72:3d:a7:24:
         58:69:80:6e:b8:83:bf:cc:29:b3:20:2e:7f:0d:a2:f3:59:90:
         d6:a5:e5:98:a4:36:3b:e8:7e:78:f0:3d:fa:65:49:4b:c3:a5:
         cd:46:dd:a6:35:9f:37:92:c2:2a:da:59:fc:df:ed:df:21:75:
         a0:ca:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org