Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/14529726a19c51f8a5c780018e1eec44b5ae40d6.roa
File:                     14529726a19c51f8a5c780018e1eec44b5ae40d6.roa (raw, json)
Hash identifier:          aiq7Kbk8KwDpjFfnZRWzwDKOFEMeYjjrOHqUwv0hUtw=
Subject key identifier:   5F:25:34:48:D5:F6:77:DF:11:CA:54:24:32:07:56:A5:5C:BC:62:76
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       1120EF
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/14529726a19c51f8a5c780018e1eec44b5ae40d6.roa
Signing time:             Fri 01 Oct 2021 20:07:04 +0000
ROA not before:           Fri 01 Oct 2021 03:00:00 +0000
ROA not after:            Sun 01 Oct 2023 03:00:00 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122543 (0x1120ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Oct  1 03:00:00 2021 GMT
            Not After : Oct  1 03:00:00 2023 GMT
        Subject: CN=14529726a19c51f8a5c780018e1eec44b5ae40d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:47:05:99:04:71:30:c8:5f:8d:78:3d:d3:
                    14:dd:5f:b6:f2:f2:76:14:2c:f5:fe:52:4e:cd:c5:
                    74:ee:4b:60:af:a0:23:e3:ed:9a:e1:82:4f:dc:46:
                    16:f9:58:7b:06:52:5a:15:07:e8:44:36:d8:9b:d2:
                    19:eb:87:1f:22:d6:b7:4d:3a:2d:57:c9:e1:fe:5d:
                    d9:44:5f:c3:ac:7b:c7:1c:0b:ef:a7:83:80:94:c6:
                    8d:55:22:12:67:5a:29:9f:9a:6c:fc:e3:e3:a3:b2:
                    f3:52:ec:21:27:53:14:f2:a2:e9:33:6d:1f:a8:5e:
                    07:d2:5e:72:92:89:dd:a1:2e:e2:24:80:0a:b2:29:
                    43:17:ae:2b:dd:7c:52:e5:39:8e:0d:4d:b3:de:9c:
                    a9:45:61:bd:87:6a:ed:cf:c9:ba:e5:98:a6:f4:a7:
                    c4:fb:c3:fd:c7:2c:66:32:48:90:85:32:c3:16:04:
                    2c:09:68:ab:d9:55:b2:ae:e6:88:b2:4c:1c:7e:c2:
                    ab:d5:4d:42:74:c5:73:2f:2a:7f:90:02:b4:36:81:
                    cc:d3:f8:70:82:30:4b:3c:6f:b3:ee:4a:15:1c:50:
                    e9:4e:3e:79:92:38:6b:8f:21:32:ee:67:ee:ff:be:
                    83:b1:12:b1:23:31:99:3e:e0:3a:e1:d5:ed:59:af:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:34:48:D5:F6:77:DF:11:CA:54:24:32:07:56:A5:5C:BC:62:76
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/14529726a19c51f8a5c780018e1eec44b5ae40d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:31:ae:e3:19:62:a0:d3:fe:c0:f0:0a:82:26:b3:b4:93:
         37:93:c0:8f:f5:cb:e8:cf:29:7f:c7:a9:c0:bd:39:0e:0f:2a:
         cf:e4:58:ce:2d:0b:e3:ed:a3:d2:ef:83:0d:a9:4c:c5:fe:28:
         3c:64:b8:9a:21:b7:72:86:35:69:14:a6:40:41:51:1d:66:ed:
         68:60:4c:a3:ee:62:fc:15:97:d2:23:75:9f:6b:43:0e:6e:5f:
         fe:c8:b4:97:8b:ba:01:4c:3e:f8:13:85:ec:a6:9a:72:bf:3f:
         9b:7d:6a:a9:ab:44:ca:08:10:3d:ff:6c:8e:a9:df:b7:85:cf:
         04:66:2e:98:72:dd:cf:12:3b:fd:15:ca:00:a5:bf:b3:1a:eb:
         38:fd:3e:fd:34:eb:71:4a:ec:f7:1b:29:e8:8e:d4:7d:b8:51:
         3d:e3:6a:fa:22:27:98:6f:85:1f:2d:02:b0:92:ab:98:f2:01:
         3a:bf:6c:fe:8f:60:66:c1:00:45:2f:3c:12:49:12:bf:99:4c:
         c5:90:5b:3f:84:e6:ce:66:51:ba:e0:7c:c1:d4:30:08:ae:7f:
         78:60:b4:f4:f1:0d:ea:4d:fa:b7:8c:c5:00:99:5f:cc:b5:c9:
         83:ae:f1:86:40:66:f8:79:70:14:01:ba:6a:41:3d:16:30:2f:
         40:37:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org