Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/aedf1b32ea761b590c2404f01badc168e2da9339.roa
File:                     aedf1b32ea761b590c2404f01badc168e2da9339.roa (raw, json)
Hash identifier:          J+roNjxi5qkA5xVNLQ1Fuzkvb7CnI/246yD6FYoi4+Y=
Subject key identifier:   A9:D9:5B:F4:ED:87:51:EE:89:D4:F0:20:1E:92:F7:C5:5C:16:B6:00
Certificate issuer:       /CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Certificate serial:       157C8A
Authority key identifier: C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/aedf1b32ea761b590c2404f01badc168e2da9339.roa
Signing time:             Sat 25 Mar 2023 04:58:22 +0000
ROA not before:           Mon 20 Mar 2023 21:07:24 +0000
ROA not after:            Sun 23 Mar 2025 21:07:24 +0000
asID:                     267815
IP address blocks:        45.173.72.0/24 maxlen: 24
                          45.173.73.0/24 maxlen: 24
                          45.173.74.0/24 maxlen: 24
                          45.173.75.0/24 maxlen: 24
                          2803:b060::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408138 (0x157c8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beb9fd789670f1c0912cb57347edb76d8534d3
        Validity
            Not Before: Mar 20 21:07:24 2023 GMT
            Not After : Mar 23 21:07:24 2025 GMT
        Subject: CN=aedf1b32ea761b590c2404f01badc168e2da9339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:38:db:04:40:4c:c7:7e:4d:b7:dc:c8:90:
                    fb:bc:66:5c:2b:7a:03:4c:60:70:0a:8d:45:68:4e:
                    80:aa:3e:95:8e:59:19:d7:8d:e6:12:f9:dd:be:94:
                    f6:c7:6b:0e:8c:96:d2:98:b8:41:eb:bd:2e:d6:95:
                    91:76:19:4b:03:da:6e:93:8e:85:09:1a:39:d3:a6:
                    bd:9d:62:62:9b:33:b2:17:c8:13:4d:53:b7:dc:8f:
                    ed:01:2f:fc:32:4f:10:cb:d2:41:6a:2e:84:13:b1:
                    cd:e2:6e:09:9c:16:4d:a0:72:33:4e:e8:07:4d:c0:
                    1c:fb:f8:c6:70:37:c3:00:c0:b9:86:bc:4d:0f:e8:
                    84:60:28:de:73:91:8c:05:f6:15:d8:c0:da:b2:d9:
                    41:f4:21:22:b6:a4:5e:85:c7:c2:2c:73:f0:9c:6f:
                    8d:ba:d9:e3:01:07:f4:8c:6d:9c:0d:27:7a:78:40:
                    5e:73:0f:62:03:42:20:30:51:44:db:5e:82:11:36:
                    10:30:40:e3:5d:6e:7c:be:73:a5:5f:14:8d:1d:8d:
                    cf:db:8c:48:49:cc:72:14:90:24:79:a1:f5:b9:81:
                    da:f6:99:92:e1:dd:3e:ea:d4:c3:8a:e3:4d:77:76:
                    20:cc:dd:3e:87:c7:cf:75:30:bd:86:ae:88:cb:02:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:5B:F4:ED:87:51:EE:89:D4:F0:20:1E:92:F7:C5:5C:16:B6:00
            X509v3 Authority Key Identifier:
                keyid:C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/aedf1b32ea761b590c2404f01badc168e2da9339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/62beb9fd789670f1c0912cb57347edb76d8534d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.72.0/22
                IPv6:
                  2803:b060::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:1f:ff:16:30:cb:bd:6d:a1:41:7e:cc:1b:ab:63:a7:85:9e:
         97:7a:1f:36:88:b6:cb:f1:a5:59:12:e6:d8:70:4e:26:6f:cd:
         71:f1:64:e3:75:e3:89:29:4a:4c:af:cc:09:2f:6e:e2:31:14:
         7a:45:2d:b8:9e:14:ed:1b:6a:94:d4:81:47:a4:73:21:3b:3c:
         a2:fc:ff:fd:ae:41:0b:88:d2:e8:41:8f:d0:fa:95:c1:cd:9a:
         19:9c:06:6c:87:5f:b1:1b:b1:f1:ac:67:67:ec:9d:ab:91:c7:
         2a:d9:25:c4:c9:ca:07:20:51:0c:22:3c:26:f9:5a:b6:11:3f:
         b4:24:f9:41:f3:39:a2:6e:63:25:7b:aa:e7:cd:c7:6c:59:20:
         65:2d:81:61:e4:71:b4:de:ca:22:f1:67:c0:9c:2e:db:7e:4d:
         0e:e9:32:ee:fa:32:dd:30:a9:03:41:f9:a5:13:8f:94:86:bd:
         b2:7a:b0:14:9c:99:fb:9b:85:6b:4d:95:e4:8b:9d:d7:64:1c:
         65:cf:17:53:35:61:c1:9f:8b:14:6c:bf:80:61:7d:1b:2c:d3:
         f7:7c:89:ae:af:49:cf:c6:7a:c4:46:87:87:f1:fd:45:55:b3:
         de:8d:ad:30:02:89:a9:8e:1f:64:27:7f:ca:6d:a2:4d:9a:3a:
         91:19:cb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org