Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/5cc085b83a274d560b7fdf91fb7193cda1ddc018.roa
File:                     5cc085b83a274d560b7fdf91fb7193cda1ddc018.roa (raw, json)
Hash identifier:          JiZuyYHCOk16qefe3cFQMfeDROPSqYV1h0aUPdbj/BE=
Subject key identifier:   41:FB:DD:10:EA:A0:5C:35:43:60:03:10:48:37:85:F2:C7:2D:C2:56
Certificate issuer:       /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial:       1F46D2
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/5cc085b83a274d560b7fdf91fb7193cda1ddc018.roa
Signing time:             Wed 13 Dec 2023 05:35:25 +0000
ROA not before:           Wed 13 Dec 2023 05:35:25 +0000
ROA not after:            Sat 13 Dec 2025 05:35:25 +0000
asID:                     266845
IP address blocks:        45.239.32.0/23 maxlen: 23
                          45.239.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049746 (0x1f46d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
        Validity
            Not Before: Dec 13 05:35:25 2023 GMT
            Not After : Dec 13 05:35:25 2025 GMT
        Subject: CN=5cc085b83a274d560b7fdf91fb7193cda1ddc018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:fa:7b:0f:f4:94:41:89:bd:87:71:85:0c:
                    ba:0c:a0:3a:e3:1e:03:ab:70:1e:3c:a1:ef:41:86:
                    d3:fd:e7:c8:c3:99:30:20:d5:6e:78:cf:94:6b:29:
                    dd:cf:76:f5:f4:92:08:4d:69:a3:17:12:3d:17:7b:
                    d2:34:fe:f2:3e:5d:ee:0a:b2:f8:a1:da:fa:75:15:
                    13:1b:b6:b5:25:20:71:1b:e8:d9:e0:28:04:0e:2f:
                    d6:98:23:e2:be:35:6b:2a:b7:2d:07:fe:24:5d:f2:
                    53:88:9c:72:ed:c9:f2:78:b4:17:12:64:64:5f:9f:
                    3b:6a:b0:65:45:f4:99:e9:87:ec:a2:0d:ee:1a:a7:
                    bb:f6:0d:16:f0:60:a7:31:a4:dd:3d:16:c5:f9:2b:
                    c2:67:9b:4e:57:ac:8f:bf:af:82:68:72:59:6b:5c:
                    bc:96:ea:c9:b0:dc:6f:3d:d4:14:df:6b:d4:91:3a:
                    14:fc:5b:8e:24:05:fd:8c:9f:c0:5c:93:8e:ec:18:
                    01:58:50:c9:73:30:e8:93:d2:e4:3a:ab:18:9a:e4:
                    3e:9e:c0:63:94:bb:35:7d:8e:7a:46:39:fd:97:54:
                    79:86:7c:ae:49:74:2a:66:dd:bc:30:be:32:63:63:
                    88:34:a2:99:ec:c7:dd:72:89:1a:59:d9:4e:c4:02:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:DD:10:EA:A0:5C:35:43:60:03:10:48:37:85:F2:C7:2D:C2:56
            X509v3 Authority Key Identifier:
                keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/5cc085b83a274d560b7fdf91fb7193cda1ddc018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:50:c1:2d:e8:fd:f3:08:6b:72:c9:58:d5:2f:8d:c3:89:
         30:c1:b9:12:54:a0:1f:42:ba:f8:a9:1b:0c:5f:07:03:15:85:
         25:76:93:68:ec:85:c0:86:50:26:da:0e:af:18:2a:29:7d:85:
         c0:dd:b5:e1:c8:ac:4f:be:e5:d1:a0:3a:4f:e9:90:8a:56:78:
         c2:8e:c6:47:74:c8:de:18:1e:09:90:15:3b:25:03:1e:dc:2d:
         66:6a:7c:bb:0d:08:76:aa:fe:f7:72:87:28:c2:77:38:89:32:
         90:17:61:12:da:2d:f3:6b:0f:47:32:7b:3e:32:87:a9:81:54:
         08:07:08:89:29:27:bb:22:df:24:26:6c:ae:28:8e:b4:09:77:
         6b:af:3b:a1:36:6f:a5:73:70:51:ba:34:fd:47:7e:b8:96:20:
         ea:2b:54:34:57:c7:25:eb:cd:01:f8:66:24:f1:0d:5e:f4:0b:
         43:a0:b9:b6:25:8c:5b:0a:ff:e8:f9:c1:19:37:2f:7c:c2:6f:
         14:86:46:9f:d8:dc:d0:ba:19:03:fd:e9:8c:e6:cc:07:a3:24:
         81:63:9d:b6:0a:25:c9:17:f7:7a:f8:f2:9e:30:99:a4:88:a0:
         1e:4f:4a:ea:89:ba:3a:38:88:66:f6:e2:c9:9c:d1:ec:67:53:
         59:38:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org