Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/16e7c22de2b1e2f40baf0dbbc4f6f672e4eeefe0.roa
File:                     16e7c22de2b1e2f40baf0dbbc4f6f672e4eeefe0.roa (raw, json)
Hash identifier:          h9oG0fwP/t+0fvQ+AGiBbyTUNrSgFsgijrDP9CikUhc=
Subject key identifier:   00:8F:9C:A6:D1:71:F9:95:52:12:DB:C3:A3:E4:9D:8A:53:CB:1C:86
Certificate issuer:       /CN=ba15cd105e76f4ef4d48f052479936348096c515
Certificate serial:       1618CC
Authority key identifier: 39:58:90:E7:99:84:37:CA:81:AF:85:8B:85:35:CF:3F:E2:47:B9:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba15cd105e76f4ef4d48f052479936348096c515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/16e7c22de2b1e2f40baf0dbbc4f6f672e4eeefe0.roa
Signing time:             Wed 10 May 2023 11:27:52 +0000
ROA not before:           Tue 09 May 2023 11:27:51 +0000
ROA not after:            Sat 10 May 2025 11:27:51 +0000
asID:                     267920
IP address blocks:        45.179.192.0/22 maxlen: 24
                          2803:2e60::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448140 (0x1618cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba15cd105e76f4ef4d48f052479936348096c515
        Validity
            Not Before: May  9 11:27:51 2023 GMT
            Not After : May 10 11:27:51 2025 GMT
        Subject: CN=16e7c22de2b1e2f40baf0dbbc4f6f672e4eeefe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:d7:52:9c:5b:81:e4:44:e6:0d:fc:e9:f9:
                    46:bc:f9:0e:6e:9b:a4:3a:d9:51:44:3a:e6:d0:cb:
                    42:d1:53:d9:80:34:cd:2a:c1:70:e5:ef:b1:db:4f:
                    0d:37:a3:89:5f:da:bf:50:af:ca:8f:85:53:c2:a9:
                    96:c4:67:9d:07:b1:a9:8c:8e:12:d7:b2:8d:81:fe:
                    97:81:17:7b:b7:ed:4d:78:72:f6:fe:4e:4b:b7:90:
                    01:58:a2:53:47:a7:c3:1e:4a:69:79:3f:8f:49:ed:
                    24:ec:5d:d7:58:68:4e:96:38:17:f1:c7:10:40:0f:
                    d5:40:b4:a6:9c:86:0a:ce:4f:df:46:cf:e1:df:81:
                    c2:1f:ca:f4:57:4c:bc:af:05:4a:aa:2a:9e:d3:c7:
                    8e:22:37:cc:4f:e8:d9:41:f5:50:2d:f2:be:54:f1:
                    e2:82:20:bb:3f:0f:b3:06:15:72:bd:09:e1:b9:0e:
                    7f:35:0b:3f:05:b5:8a:3e:3e:7a:d3:33:63:c8:a9:
                    e9:5f:13:5c:0a:5e:6a:b4:65:65:26:7b:93:7d:e6:
                    1f:1f:b5:a3:95:06:1d:64:5c:41:aa:ab:71:eb:f9:
                    eb:b9:9e:f3:8d:a5:ae:54:6f:1e:e2:b8:0a:01:2c:
                    a4:f1:a7:de:e7:fc:99:99:c6:89:c1:5c:54:c2:23:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8F:9C:A6:D1:71:F9:95:52:12:DB:C3:A3:E4:9D:8A:53:CB:1C:86
            X509v3 Authority Key Identifier:
                keyid:39:58:90:E7:99:84:37:CA:81:AF:85:8B:85:35:CF:3F:E2:47:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba15cd105e76f4ef4d48f052479936348096c515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/16e7c22de2b1e2f40baf0dbbc4f6f672e4eeefe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/ba15cd105e76f4ef4d48f052479936348096c515.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.192.0/22
                IPv6:
                  2803:2e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:e9:66:3b:7a:42:ee:a4:ca:6e:f0:4f:e3:56:e6:2c:94:
         b4:ef:ad:ea:6e:c6:3b:0e:6f:2b:49:e8:38:30:eb:32:58:29:
         f4:e0:e1:08:8f:66:3d:4f:0f:97:7e:32:86:29:21:55:3c:6b:
         08:1c:82:6e:c7:5f:42:82:65:90:ac:1b:96:be:49:a8:dd:06:
         a3:ab:2d:4b:22:07:40:e3:41:3a:70:ce:f7:34:b7:e9:f7:3a:
         61:58:8a:13:ca:55:14:a5:ce:12:1b:92:b5:e0:20:1c:4c:b3:
         6c:94:09:e3:67:f3:c7:53:5b:08:06:b3:c3:79:08:3f:1d:aa:
         b9:4b:4f:1d:0a:41:84:c1:39:92:96:fd:77:9c:2d:ba:1f:d1:
         38:0c:ee:48:ad:9f:27:21:83:da:05:e2:c4:e1:19:94:e5:a3:
         45:56:bc:4d:fa:4a:41:04:bb:89:d9:ac:8d:d7:22:76:63:a1:
         c2:93:bc:7a:8b:f2:ae:19:11:42:69:d5:2e:fa:36:5b:fd:84:
         92:8c:58:37:16:5d:75:50:17:1a:b5:65:b4:c4:b8:9b:64:65:
         96:06:4e:54:2d:10:dc:43:0b:d2:24:c2:0d:40:cb:7c:25:74:
         19:a0:54:10:6e:31:1a:e4:54:6f:f8:e9:f0:1a:34:0b:e9:64:
         e1:0b:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org