Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/14f00744bb11b2f8dd6b377b5aa8ca7ed8ab2cea.roa
File:                     14f00744bb11b2f8dd6b377b5aa8ca7ed8ab2cea.roa (raw, json)
Hash identifier:          G7m+1rZiGm/dtUhSxSfVoRsvKp8GQcMHN8gH8zuMolo=
Subject key identifier:   5F:9B:0D:FD:9F:FC:47:C4:76:9F:25:44:23:85:49:A5:2D:FE:E3:60
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       20F5C2
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/14f00744bb11b2f8dd6b377b5aa8ca7ed8ab2cea.roa
Signing time:             Fri 23 Jun 2023 14:34:45 +0000
ROA not before:           Thu 22 Jun 2023 14:34:45 +0000
ROA not after:            Mon 23 Jun 2025 14:34:45 +0000
asID:                     265862
IP address blocks:        45.224.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160066 (0x20f5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Jun 22 14:34:45 2023 GMT
            Not After : Jun 23 14:34:45 2025 GMT
        Subject: CN=14f00744bb11b2f8dd6b377b5aa8ca7ed8ab2cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:10:a2:d9:a8:97:31:9f:43:e1:cc:31:4b:
                    31:b1:af:a1:13:9e:f5:68:bb:1f:bc:5c:f0:73:84:
                    58:e4:2e:6f:32:3c:77:db:2b:5b:19:41:96:ab:7f:
                    db:09:81:ee:31:3c:f1:19:f8:30:b9:30:ca:8a:48:
                    e1:ae:7f:7a:77:0a:bc:dd:e3:7e:d3:63:13:22:fd:
                    5c:49:fc:dd:5b:12:56:7b:17:1a:e4:7a:4f:16:00:
                    ea:44:47:43:eb:bb:dc:62:ac:66:18:75:3f:d7:7f:
                    63:af:85:22:94:de:45:e6:01:04:b7:84:aa:a6:db:
                    64:a3:8d:68:d4:57:47:b3:4f:76:51:94:7c:72:eb:
                    a6:de:d7:e3:ca:40:20:81:6d:f2:34:c9:63:7d:5d:
                    e5:82:ef:3b:b1:2e:e5:72:03:c8:0f:f6:fc:eb:72:
                    09:fa:d3:a7:67:6e:44:6c:9b:94:44:dc:00:a9:a2:
                    de:23:12:8a:03:bf:11:84:4f:d0:f2:85:37:27:99:
                    b6:40:c0:d0:08:5b:c6:98:f4:cd:8f:c1:42:4f:f1:
                    44:22:d0:7d:3d:28:68:6b:f8:c1:87:51:0a:ec:b5:
                    c1:9e:15:fd:be:60:a9:83:f1:4f:bc:18:c1:49:fa:
                    57:f7:20:c6:af:fa:e8:36:51:ba:d8:bf:8a:11:b5:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:0D:FD:9F:FC:47:C4:76:9F:25:44:23:85:49:A5:2D:FE:E3:60
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/14f00744bb11b2f8dd6b377b5aa8ca7ed8ab2cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:f9:19:66:6e:30:72:45:79:25:44:13:f0:bf:c7:8f:22:
         b3:21:19:b5:5d:a3:39:90:4f:6d:cf:9c:fb:72:bb:96:ea:e5:
         ce:e4:4f:90:9b:aa:be:8c:2a:72:5b:dd:a8:c4:9c:61:17:95:
         b7:88:34:7f:65:c3:ea:00:15:38:50:49:37:74:77:38:91:44:
         0e:87:a1:ce:4e:e8:be:c8:81:fb:0f:39:31:09:86:17:d5:d8:
         97:f9:4b:64:73:21:a2:4e:be:46:31:70:f8:ad:42:d5:b3:05:
         e7:bf:55:13:43:02:80:32:29:99:e2:d6:e8:3c:b5:9a:42:de:
         3d:44:a4:81:c2:f5:9d:60:e3:91:99:b0:11:06:2b:1e:c1:b8:
         69:e3:2f:62:f7:6a:c1:e1:9b:f6:58:d8:eb:1e:14:04:64:c5:
         5d:08:89:11:d7:71:60:b3:2a:2e:19:fb:ec:fe:ba:f0:a9:c0:
         ec:8d:89:54:26:cb:e9:31:c4:da:4e:ad:80:91:50:6e:85:70:
         5f:58:06:d7:52:b0:ad:60:25:02:48:2e:e0:da:33:4d:7b:e8:
         79:ad:ad:0f:b3:7f:ea:9e:1a:d8:3c:04:67:83:f1:89:bd:ca:
         e8:8e:3a:3c:31:51:17:a4:ea:55:c2:12:28:5d:6f:18:93:57:
         c3:95:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org