Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/32b0382b12b7285a3efe5a1ae17c8693c895b8f7.roa
File:                     32b0382b12b7285a3efe5a1ae17c8693c895b8f7.roa (raw, json)
Hash identifier:          kVt9gfx9XTGG6l8lWRRBu5LAwxpZ7FOjyrayaJf1PYs=
Subject key identifier:   F6:D8:59:A0:9C:64:07:53:86:C7:D0:47:C4:1F:39:53:E5:47:2B:BD
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       24794F
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/32b0382b12b7285a3efe5a1ae17c8693c895b8f7.roa
Signing time:             Wed 31 Jan 2024 00:47:44 +0000
ROA not before:           Wed 31 Jan 2024 00:47:44 +0000
ROA not after:            Sat 31 Jan 2026 00:47:44 +0000
asID:                     272942
IP address blocks:        45.191.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390351 (0x24794f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Jan 31 00:47:44 2024 GMT
            Not After : Jan 31 00:47:44 2026 GMT
        Subject: CN=32b0382b12b7285a3efe5a1ae17c8693c895b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:b9:1f:04:d4:f9:11:c1:b6:1f:b6:82:81:
                    09:97:8d:c8:2e:8f:8b:af:ef:3f:41:2a:f6:41:3c:
                    56:d9:fe:01:3b:45:41:d5:7c:8c:0b:95:b8:99:91:
                    45:b7:36:72:66:65:20:f3:9c:80:1a:4a:5b:a5:3e:
                    39:9c:e4:c7:4a:9a:fd:9b:cc:fc:b5:bb:5d:95:76:
                    8f:ec:38:bf:e3:af:10:76:63:c4:12:ff:c3:8c:bc:
                    30:c8:c2:32:29:d3:72:5d:79:76:44:b5:ae:6a:0b:
                    32:73:65:1e:95:17:db:fe:63:ed:53:a5:1c:7e:2f:
                    08:43:53:8b:d2:e0:fc:52:d4:d9:2d:45:23:40:66:
                    02:7f:a1:75:0b:ca:8f:8d:29:16:0a:7c:ef:f5:67:
                    9f:d1:e6:bd:35:b0:5b:94:2f:c7:a0:f3:88:a3:84:
                    28:78:6d:5e:7d:19:3a:db:9c:d1:86:f0:51:12:9c:
                    2d:4a:be:65:b1:0e:5c:c3:1c:2b:0b:08:12:9d:6d:
                    98:cf:04:f0:35:e0:a8:8f:8b:8e:b3:91:ec:05:4c:
                    22:bf:8b:a5:6f:2e:5b:84:cf:28:aa:46:d1:38:f5:
                    dd:31:bf:79:6b:1a:31:90:36:34:b0:7e:bf:30:79:
                    45:6a:8e:ca:6b:de:e9:3b:e2:e8:c6:1d:dd:f9:ce:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D8:59:A0:9C:64:07:53:86:C7:D0:47:C4:1F:39:53:E5:47:2B:BD
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/32b0382b12b7285a3efe5a1ae17c8693c895b8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:44:f0:44:74:50:7d:48:80:c7:16:ba:bf:97:5f:b7:90:29:
         46:41:76:0c:74:cd:1f:43:d9:fb:14:dd:f1:d3:79:19:ac:e7:
         aa:38:b2:3a:90:eb:21:c2:5a:b4:a2:28:94:e5:9b:65:dc:8e:
         e2:b7:09:77:00:a4:7f:7c:cd:31:85:4a:51:e4:9e:58:d8:be:
         a1:aa:15:4b:50:69:59:0b:7a:d4:39:62:16:9d:b6:80:23:85:
         1a:b2:9d:68:ac:f0:8a:ca:7e:b1:29:a6:61:e4:d6:04:17:99:
         f5:98:51:3c:46:32:a6:19:1c:ca:f4:78:02:5d:f3:83:40:ff:
         77:ab:cb:d0:5a:0e:e5:b6:ce:70:46:f3:8c:01:df:a0:c8:27:
         70:7f:fb:11:a4:3c:d7:f8:d3:6a:23:82:da:52:3b:c9:5a:c5:
         68:33:31:5b:07:4a:5d:11:9c:e5:66:c3:6a:b7:30:a8:b6:84:
         b9:41:f5:2f:96:8e:cf:b1:b7:fa:b5:3b:bc:fc:22:8b:a3:90:
         82:da:df:85:e5:25:f0:c1:7f:85:0e:17:03:e4:85:58:63:b2:
         4e:a3:dc:3b:72:e6:6c:fd:7a:b3:50:d3:ae:66:32:24:17:54:
         2f:e8:c8:41:c6:98:52:98:ab:69:ae:74:5c:4b:c7:04:9c:0c:
         c4:58:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org