Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/3466d044457a7d3c6e9895fa30a51bdca03e8596.roa
File:                     3466d044457a7d3c6e9895fa30a51bdca03e8596.roa (raw, json)
Hash identifier:          XB5zX0D91L5tR92AwFQ9PDs3Vvl1GHZLF3iJeHwlGlQ=
Subject key identifier:   83:D5:48:09:A4:02:98:B2:B6:76:6D:FA:C0:BD:A3:DE:A1:52:82:DD
Certificate issuer:       /CN=36a6485e1a54ec808a146215bd1372815d55a3ec
Certificate serial:       147A3B
Authority key identifier: 37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/3466d044457a7d3c6e9895fa30a51bdca03e8596.roa
Signing time:             Mon 08 Jan 2024 21:07:40 +0000
ROA not before:           Mon 08 Jan 2024 21:07:40 +0000
ROA not after:            Thu 08 Jan 2026 21:07:40 +0000
asID:                     272009
IP address blocks:        45.226.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342011 (0x147a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a6485e1a54ec808a146215bd1372815d55a3ec
        Validity
            Not Before: Jan  8 21:07:40 2024 GMT
            Not After : Jan  8 21:07:40 2026 GMT
        Subject: CN=3466d044457a7d3c6e9895fa30a51bdca03e8596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:10:42:c8:e3:60:50:3c:c2:6e:59:ac:62:5c:
                    d4:1d:a1:eb:d1:00:8e:89:0c:45:bf:30:9a:2f:6d:
                    a4:18:63:b4:b8:3b:a4:63:15:3e:22:03:c5:f5:1e:
                    29:e6:04:e7:00:29:50:94:dd:32:f0:aa:cb:fb:48:
                    15:32:54:42:62:d8:df:e3:ed:50:56:3d:f2:c9:96:
                    64:e2:d6:cc:8a:6e:b4:df:29:9e:fa:b0:23:3e:35:
                    c2:b8:26:15:2c:16:e9:e8:b2:4a:8d:d7:b1:a6:7a:
                    3b:31:cc:cd:ad:f2:bb:bf:58:2f:9a:ed:65:07:52:
                    b3:d9:9a:d8:2b:f5:c5:0d:a6:71:56:15:df:5a:2b:
                    28:27:99:76:8b:10:2d:fc:81:0a:8b:21:62:6c:a2:
                    ba:95:ad:bf:8a:76:0e:47:e5:ba:0e:6b:41:f5:eb:
                    e3:cc:1d:e1:af:58:5d:7f:f4:47:0f:80:14:99:da:
                    e1:f0:a2:4f:70:c5:79:cd:26:4a:85:7a:04:04:50:
                    ac:c4:86:20:07:90:76:62:5f:ad:70:da:59:0d:98:
                    1b:d4:c1:26:ab:db:17:b0:ce:1d:45:99:a8:45:f3:
                    35:96:df:c4:df:83:9c:f4:50:b7:1a:c9:7b:4d:f8:
                    ac:16:4c:bb:3a:71:60:a5:ed:fb:21:c5:4b:44:04:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:48:09:A4:02:98:B2:B6:76:6D:FA:C0:BD:A3:DE:A1:52:82:DD
            X509v3 Authority Key Identifier:
                keyid:37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/3466d044457a7d3c6e9895fa30a51bdca03e8596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/36a6485e1a54ec808a146215bd1372815d55a3ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:65:ec:b4:eb:f7:bd:09:ae:41:bd:59:2e:99:08:31:bc:
         56:4a:d9:49:b4:f9:2a:65:fa:1a:a5:13:a6:a9:28:8b:4e:1a:
         78:3e:c6:cf:f8:20:e1:db:f4:52:64:33:2f:a9:57:bf:00:82:
         df:13:79:87:da:26:5e:4a:93:8d:46:ca:13:56:ce:7e:de:88:
         21:d8:e5:40:7a:ff:df:53:6a:c8:31:af:ef:18:43:a1:0c:c5:
         31:00:5e:96:95:0b:e2:58:5a:22:96:29:10:ce:71:b2:c9:b6:
         a0:ab:68:0b:d2:ed:73:e8:ad:44:15:ae:eb:58:11:ec:53:6e:
         ca:ac:d0:2e:e6:8f:1b:49:0e:eb:e4:7f:38:13:9f:66:77:61:
         ba:6b:7b:57:61:db:ba:11:d9:8e:23:ad:e2:61:37:d0:2c:2c:
         fd:a0:5b:58:d2:9a:a2:da:b9:e3:74:c2:e0:e5:d7:f9:db:57:
         6b:52:04:1f:9a:b6:25:3d:76:cb:ef:f7:b4:54:70:62:5d:5b:
         16:c7:d8:a8:e9:00:e8:74:78:8a:79:ba:b1:be:e8:e0:1d:c6:
         7e:a7:c2:eb:77:80:d5:6e:fd:83:e3:8b:b1:38:a2:87:90:24:
         3e:70:8a:56:f2:b8:8c:3e:e3:26:98:d9:84:7e:02:6b:f2:a8:
         5e:9e:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org