Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/7a16623728faa7f17934eac83f1a3f6261211c6d.roa
File:                     7a16623728faa7f17934eac83f1a3f6261211c6d.roa (raw, json)
Hash identifier:          x1bvXdy/2VgVmebC8S2ziFmhZmCmJN0rJfLCXTKLMH0=
Subject key identifier:   B1:1D:2C:A9:0E:BB:55:47:E2:38:6D:C1:20:4B:96:EA:E9:6F:4D:61
Certificate issuer:       /CN=56e0dad1bc274e191f17c10f2a85105ac8ad8244
Certificate serial:       22B30F
Authority key identifier: 6E:E3:DA:CA:61:74:C0:CA:DF:18:50:60:A0:17:00:76:66:93:B1:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e0dad1bc274e191f17c10f2a85105ac8ad8244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/7a16623728faa7f17934eac83f1a3f6261211c6d.roa
Signing time:             Tue 03 Oct 2023 08:30:12 +0000
ROA not before:           Mon 02 Oct 2023 08:30:12 +0000
ROA not after:            Wed 01 Oct 2025 08:30:12 +0000
asID:                     263244
IP address blocks:        45.182.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274063 (0x22b30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e0dad1bc274e191f17c10f2a85105ac8ad8244
        Validity
            Not Before: Oct  2 08:30:12 2023 GMT
            Not After : Oct  1 08:30:12 2025 GMT
        Subject: CN=7a16623728faa7f17934eac83f1a3f6261211c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:e4:cd:24:17:a7:76:d5:b6:d5:5c:60:9e:
                    f2:74:f8:72:43:c2:39:91:34:89:38:19:c7:82:fd:
                    d7:73:cf:5d:86:8a:ff:ef:9a:22:da:ba:7d:11:ce:
                    4b:ee:ff:74:4d:ac:bd:fb:fa:f7:5e:da:c2:7a:70:
                    0f:98:aa:95:fd:12:2b:9f:f8:04:74:bd:9a:6c:b6:
                    52:c5:2c:ba:21:10:63:e7:5a:95:a4:c8:94:eb:d1:
                    59:60:3c:ea:99:e1:4c:93:14:9b:18:a7:48:89:18:
                    dc:ff:5a:36:7d:01:59:2b:14:84:2c:75:3f:3d:26:
                    d8:84:0d:4e:f5:69:b0:ab:d9:73:8a:19:1a:09:d4:
                    6b:61:1e:39:15:60:a4:70:25:34:92:e0:bd:b7:a4:
                    d1:f2:b3:fe:64:25:de:62:35:a4:2c:57:5d:9e:6d:
                    89:41:77:e9:ba:a5:83:5d:73:55:26:93:a2:23:d3:
                    aa:d1:6c:9b:1e:f4:fd:c9:a6:60:4e:77:82:f2:c8:
                    69:70:ef:00:3b:8d:bd:05:52:0d:62:d3:d5:67:9e:
                    57:4f:8c:db:40:8c:57:28:3d:52:4b:33:1d:c4:7a:
                    bf:8c:33:23:23:ae:4d:64:8b:0f:f5:80:58:bb:58:
                    eb:17:8f:33:a2:01:ee:5e:7f:dc:6e:d1:91:1b:ff:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:2C:A9:0E:BB:55:47:E2:38:6D:C1:20:4B:96:EA:E9:6F:4D:61
            X509v3 Authority Key Identifier:
                keyid:6E:E3:DA:CA:61:74:C0:CA:DF:18:50:60:A0:17:00:76:66:93:B1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e0dad1bc274e191f17c10f2a85105ac8ad8244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/7a16623728faa7f17934eac83f1a3f6261211c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390c9fc1-e60d-45b5-8d70-106dc5f45fa4/56e0dad1bc274e191f17c10f2a85105ac8ad8244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:68:c4:83:f9:28:a9:af:9b:aa:80:23:e7:b1:b7:30:fb:52:
         e7:26:8f:c4:90:c8:8a:a7:2a:4b:e2:7b:a1:b9:be:a2:64:78:
         39:fc:93:ae:5b:74:56:b8:55:db:2a:76:ee:b5:ab:b9:ef:ef:
         cb:73:32:38:30:19:fc:c7:89:f4:a9:0e:89:56:8e:b1:52:5b:
         0c:1e:27:88:2b:23:d6:1b:36:56:88:02:6e:fe:66:0c:4f:c0:
         2d:5f:ee:2a:ab:d2:a1:09:31:6e:4f:7c:b5:e9:b9:2d:fa:19:
         ac:cd:c8:5d:13:aa:5f:5c:cf:c7:0c:4c:7d:93:70:df:c7:49:
         0d:ee:07:e0:7f:22:38:d1:73:aa:05:f9:69:4b:23:32:c3:74:
         26:07:51:84:e6:50:0e:54:be:db:9e:8e:43:12:93:e4:1c:f7:
         27:51:34:e7:10:23:b3:94:66:55:bb:02:44:26:90:a5:93:6c:
         83:1c:86:be:03:a7:a3:ce:ee:62:5f:d7:08:68:21:e5:1b:43:
         f3:ef:11:27:ee:31:cf:3d:a2:24:d3:b9:c0:81:8f:c8:1a:35:
         38:51:d6:0a:dc:4d:41:0f:b3:26:40:4e:79:e4:5c:e6:dc:9f:
         96:a4:e7:d5:d0:36:37:6a:44:9d:24:d0:36:83:83:ef:af:10:
         81:17:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org