Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/242b4191f2affbeb75c018cfbd0b6189b2ababbe.roa
File:                     242b4191f2affbeb75c018cfbd0b6189b2ababbe.roa (raw, json)
Hash identifier:          YNKsn7lv/O3XPNzkhcoMReF7uH650rr5vsiFocVnBRY=
Subject key identifier:   1E:C2:5C:10:D3:D4:2A:DD:6D:CB:1B:49:CE:A6:BF:41:F5:93:48:21
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       20F707
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/242b4191f2affbeb75c018cfbd0b6189b2ababbe.roa
Signing time:             Fri 23 Jun 2023 14:34:46 +0000
ROA not before:           Thu 22 Jun 2023 14:34:45 +0000
ROA not after:            Mon 23 Jun 2025 14:34:45 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160391 (0x20f707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Jun 22 14:34:45 2023 GMT
            Not After : Jun 23 14:34:45 2025 GMT
        Subject: CN=242b4191f2affbeb75c018cfbd0b6189b2ababbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:e9:54:ec:a7:9f:42:2e:11:f5:f8:f1:c4:
                    7e:a0:39:25:64:93:f9:2d:ae:fb:8a:63:ba:d7:bd:
                    48:c9:28:0e:cb:a6:24:e4:8b:93:c0:d7:58:48:02:
                    b0:ab:69:19:b7:5c:7c:57:fc:48:54:74:ae:8f:88:
                    ec:23:fe:6c:4b:43:ce:89:60:ff:24:47:5c:1e:79:
                    92:12:45:bb:84:d6:60:c3:17:ab:f5:07:bc:9c:fa:
                    aa:b8:90:07:5e:3b:1e:05:00:9b:9d:16:26:de:8b:
                    7c:c7:f4:ac:1d:52:c0:81:c1:2f:bd:0b:46:5c:8f:
                    bd:24:1b:e4:57:ed:2a:66:01:c1:1b:e0:53:f2:c8:
                    01:e3:c5:24:bd:d7:f9:cb:4f:09:5e:22:92:31:6f:
                    37:1f:dd:2d:93:47:a2:8a:6c:55:b3:91:ac:ca:39:
                    4a:0b:1b:4a:63:62:b7:57:a3:50:6f:cc:71:ec:7f:
                    d4:57:aa:d4:6a:c3:dc:eb:d7:28:da:8e:e9:72:ee:
                    3c:1b:4d:61:b8:1a:88:41:52:f7:9d:1d:9e:70:aa:
                    c9:8e:59:f0:15:20:05:f7:c6:7b:42:c8:87:53:3c:
                    16:3d:6d:3d:50:2f:39:a2:09:38:25:2a:af:1e:5b:
                    49:c9:c3:2e:19:89:30:00:b3:3a:c9:6d:97:e2:27:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C2:5C:10:D3:D4:2A:DD:6D:CB:1B:49:CE:A6:BF:41:F5:93:48:21
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/242b4191f2affbeb75c018cfbd0b6189b2ababbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:3b:b8:0d:86:22:ca:23:ba:96:2a:19:b4:d4:e9:d4:17:
         6c:7b:4f:7f:f8:a2:e8:84:33:81:46:c8:00:8c:3b:f9:1b:5c:
         71:69:af:b3:76:6e:b7:57:88:af:91:6d:8e:d3:11:d6:5f:89:
         59:fd:00:e5:d2:19:83:d6:d8:5a:3c:f4:0c:91:ef:f9:38:ba:
         d7:81:01:43:82:42:3b:8c:bb:b6:af:12:d9:c0:10:fd:70:a6:
         52:fa:38:d3:e2:e5:84:8e:42:50:04:42:41:48:52:3d:ad:91:
         fe:0f:34:0e:49:2f:08:05:32:22:ae:8f:c9:a2:83:36:49:1c:
         e1:fc:a3:25:66:9e:29:5d:0d:39:51:48:48:a3:6b:a1:53:b1:
         a0:8c:b6:25:ec:e0:e1:9b:6a:dd:dc:55:c5:8b:e7:58:e0:9f:
         c8:ed:5d:6f:25:0a:34:09:e9:aa:fa:ce:59:e0:96:95:ba:df:
         e8:a4:ae:43:d2:53:92:d1:73:55:8a:09:73:56:14:4e:cf:51:
         4f:a2:1a:bc:5d:6a:ae:68:47:c7:db:a4:0f:ec:8a:71:71:a8:
         f1:32:8f:53:d7:48:41:1b:90:c2:6f:03:34:8d:6e:7f:8a:11:
         1b:ca:4d:c2:91:32:bf:a7:14:c4:aa:85:5a:16:bd:7a:bf:3a:
         75:ac:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org