Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/1576dec00ebd38da5837bd0494889c26d1323441.roa
File:                     1576dec00ebd38da5837bd0494889c26d1323441.roa (raw, json)
Hash identifier:          4V1Ln02V5EUEjEJgJ0FiqO+tdmKAlyqX7qg6yvYKNFI=
Subject key identifier:   C2:94:45:34:83:62:3D:61:9F:10:C1:C7:5C:73:12:0D:B1:0D:71:F4
Certificate issuer:       /CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
Certificate serial:       1A0BBB
Authority key identifier: 3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/1576dec00ebd38da5837bd0494889c26d1323441.roa
Signing time:             Fri 06 Oct 2023 19:55:05 +0000
ROA not before:           Thu 05 Oct 2023 19:55:04 +0000
ROA not after:            Mon 06 Oct 2025 19:55:04 +0000
asID:                     269886
IP address blocks:        45.191.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706939 (0x1a0bbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb72688104ed29264f079ae92d8d441e6eb06a9
        Validity
            Not Before: Oct  5 19:55:04 2023 GMT
            Not After : Oct  6 19:55:04 2025 GMT
        Subject: CN=1576dec00ebd38da5837bd0494889c26d1323441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:92:9c:4e:06:81:37:ad:10:0f:ab:7f:e3:
                    44:1b:d9:54:b4:b7:df:41:88:d8:ee:ad:b2:0e:ea:
                    fc:ce:3e:63:f1:3e:a2:98:b1:65:3b:2d:dd:8b:55:
                    50:e9:9a:f6:47:36:c0:a7:ad:d1:32:02:df:e3:0b:
                    c6:97:c2:3b:39:3f:08:8d:b7:3a:51:3b:4f:00:44:
                    21:60:e9:85:0b:c0:bf:d8:50:69:b5:f3:8b:d4:25:
                    a7:de:10:79:ce:36:66:6a:9d:54:00:b5:ed:0b:2b:
                    9a:33:7b:04:03:4b:6f:42:9d:2b:02:95:68:74:04:
                    9f:cc:7f:b1:23:e9:4d:8a:2f:4d:a0:7a:7e:45:88:
                    cd:d8:f8:1c:4d:c9:96:f9:b0:27:1f:2f:d0:d2:94:
                    4f:99:21:f0:b0:bb:8a:cf:7d:2b:68:e3:70:90:62:
                    ae:bf:98:c3:8a:e8:83:c0:53:12:67:d6:2f:9a:29:
                    4a:35:1c:2d:dd:b9:ca:3d:40:ef:90:18:74:96:61:
                    b9:4d:9e:74:6c:34:bb:06:4a:2a:7d:ad:d5:10:90:
                    14:1f:6d:ec:10:00:45:6a:c0:1a:93:c8:00:f4:93:
                    90:9d:b3:3f:95:ed:de:ba:50:95:73:26:05:58:b1:
                    99:4a:a7:db:46:27:99:5a:06:2a:b6:45:80:d5:7f:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:45:34:83:62:3D:61:9F:10:C1:C7:5C:73:12:0D:B1:0D:71:F4
            X509v3 Authority Key Identifier:
                keyid:3A:A9:68:CD:02:9F:30:FD:1E:1B:0C:C6:8B:B0:D9:A5:48:8D:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb72688104ed29264f079ae92d8d441e6eb06a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/1576dec00ebd38da5837bd0494889c26d1323441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1fb33-2c26-4876-9549-4b201f8b6b22/2cb72688104ed29264f079ae92d8d441e6eb06a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:c4:a5:97:99:c4:d6:a2:44:d5:66:86:4a:cf:6e:64:53:
         ed:21:dd:9e:b2:6e:e5:3c:d7:4d:35:9b:19:3d:3d:80:2a:2a:
         b5:f8:68:82:16:af:50:ad:73:b7:3d:cf:f0:c6:bb:4e:52:2f:
         1a:e6:b6:d6:1f:7e:c5:33:da:2b:ff:eb:80:4c:55:7d:6e:59:
         6e:b6:d8:9e:d9:5e:d7:db:bc:b2:9b:20:6a:b0:7c:25:03:78:
         dc:48:33:1d:31:09:54:13:80:9b:f9:0c:88:8f:17:f0:76:ff:
         63:20:34:9f:ba:8c:ac:02:c9:53:7a:fb:ab:3e:15:8b:3a:e8:
         e9:05:66:fa:e7:a3:75:e8:e2:fa:23:39:1a:76:7a:a9:d5:58:
         06:1e:97:84:fb:18:1e:c6:db:22:f4:78:78:a7:41:7a:5e:d1:
         d5:df:c1:18:bd:d6:72:f7:33:f1:0e:ed:61:bb:1b:c9:d1:f8:
         38:eb:00:8e:9f:1c:40:c1:b5:89:0d:4f:78:71:36:fe:88:c9:
         83:7d:ea:dc:19:01:92:56:42:0f:68:92:12:4d:51:cb:46:1e:
         58:b1:a1:c0:eb:74:eb:1d:2a:96:04:5e:6f:8f:c2:58:f0:27:
         b2:b6:5d:c9:ca:29:e8:54:33:92:6a:ca:9a:2b:96:1d:04:d0:
         3c:f3:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org