Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/15b9217fc9dc95370f9123c641c999bf2a02d279.roa
File:                     15b9217fc9dc95370f9123c641c999bf2a02d279.roa (raw, json)
Hash identifier:          xrA95Iq68c7a8hxH7PqdICCAHMNPfLcRzyoR+28wEC0=
Subject key identifier:   00:D7:6B:E9:73:A2:08:0A:54:6F:E2:D5:B7:68:7F:A2:D1:D2:54:F4
Certificate issuer:       /CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Certificate serial:       23EE39
Authority key identifier: B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/15b9217fc9dc95370f9123c641c999bf2a02d279.roa
Signing time:             Wed 08 Nov 2023 14:29:25 +0000
ROA not before:           Wed 08 Nov 2023 14:29:25 +0000
ROA not after:            Sat 08 Nov 2025 14:29:25 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2354745 (0x23ee39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
        Validity
            Not Before: Nov  8 14:29:25 2023 GMT
            Not After : Nov  8 14:29:25 2025 GMT
        Subject: CN=15b9217fc9dc95370f9123c641c999bf2a02d279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:a7:6c:b4:34:af:91:43:21:e2:4c:d4:54:
                    f9:72:3e:8d:f5:3f:19:0e:3f:a9:86:8e:58:56:3e:
                    7a:69:5a:1c:84:cd:ac:aa:46:d8:73:6b:e2:93:d5:
                    d4:fa:fe:3e:44:51:60:2b:79:32:b4:f6:16:02:47:
                    91:d6:48:1e:63:99:fd:d0:d8:36:4c:f1:5c:c6:3f:
                    ba:d4:b2:3c:70:1f:0a:c8:a9:39:9b:e7:d9:3d:fb:
                    96:e2:7f:af:21:01:14:03:31:7f:6c:7b:97:21:03:
                    33:de:8b:e3:a2:94:50:e3:83:65:7f:03:cb:60:c2:
                    9d:7b:1b:eb:1a:0c:1a:fe:40:91:21:13:fe:cb:e8:
                    a5:e0:f8:2f:39:30:b7:13:96:90:4b:eb:5d:70:3a:
                    e2:c2:f7:c6:b6:7a:be:81:43:ee:ae:9d:86:91:4e:
                    08:61:0c:e1:6d:ac:c0:c9:02:af:1a:9f:2b:71:1e:
                    ed:80:93:5a:be:fa:39:c8:af:59:d5:00:54:76:52:
                    78:16:2e:f2:d9:41:fa:0f:89:46:10:07:96:74:41:
                    65:1f:06:32:4a:5c:bf:fc:f9:15:3b:20:f2:d7:56:
                    45:07:c1:66:7d:06:e4:43:1c:0e:f3:e1:0a:20:80:
                    37:57:37:19:ca:c2:55:f0:fd:3b:7b:89:f9:85:bb:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:6B:E9:73:A2:08:0A:54:6F:E2:D5:B7:68:7F:A2:D1:D2:54:F4
            X509v3 Authority Key Identifier:
                keyid:B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/15b9217fc9dc95370f9123c641c999bf2a02d279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:08:5a:1c:1c:70:f5:3c:e7:33:6b:4b:a7:54:f5:a7:39:4a:
         11:05:25:e8:c3:06:4d:42:58:16:eb:50:20:57:dd:65:0b:8d:
         86:6e:d7:0e:b5:f5:9e:c9:d0:71:fc:9e:50:30:d0:5e:7f:8d:
         f9:ed:24:91:81:32:27:d6:04:ef:64:85:c1:a7:6b:3f:88:73:
         a1:8f:28:00:7b:2f:25:0d:8e:4b:e7:7b:f2:23:3e:35:eb:98:
         f7:c5:61:5b:b6:38:aa:f4:bc:02:58:0a:b9:40:15:57:00:6e:
         ef:b7:66:32:d8:38:5d:66:ca:77:98:93:3e:51:76:50:fc:65:
         20:b9:19:0a:e4:78:b4:f1:d6:ca:ca:1f:92:d1:d2:51:de:65:
         22:ec:95:a5:d7:b5:64:eb:6d:12:cc:0a:2c:f2:d7:e6:85:7c:
         db:1a:4c:c5:af:fb:6d:c8:34:63:a9:df:31:43:67:02:49:27:
         f9:a1:41:1f:fe:3c:8a:29:0b:9b:cb:1b:62:f5:a8:45:e4:b8:
         11:37:c0:2b:2b:56:92:f1:84:04:35:59:75:27:d8:d1:ce:ce:
         f8:c8:10:53:92:20:72:6d:38:42:20:ed:7f:fd:27:03:fd:8a:
         5c:70:a9:a9:fa:87:ff:44:56:2b:7f:8f:5f:07:0b:c3:84:0a:
         2f:d0:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org