Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/9db1c0de635def5e394343b01c849baee0e05123.roa
File:                     9db1c0de635def5e394343b01c849baee0e05123.roa (raw, json)
Hash identifier:          KyP+ItNu4laNBQ2fmikdq/XCxA3DqJBqYn5ZcSVl3xE=
Subject key identifier:   03:16:04:56:D0:F5:E8:F5:F0:48:0C:6B:9F:2D:76:81:95:A5:51:F3
Certificate issuer:       /CN=ccdb97cf62e833130f9a26635a4dd549cfb148ee
Certificate serial:       26FE83
Authority key identifier: 58:B3:52:F4:7C:1F:FE:E8:12:53:83:B4:E5:57:57:D4:7A:79:62:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccdb97cf62e833130f9a26635a4dd549cfb148ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/9db1c0de635def5e394343b01c849baee0e05123.roa
Signing time:             Thu 15 Feb 2024 16:20:00 +0000
ROA not before:           Thu 15 Feb 2024 16:20:00 +0000
ROA not after:            Sun 15 Feb 2026 16:20:00 +0000
asID:                     266786
IP address blocks:        45.226.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555523 (0x26fe83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdb97cf62e833130f9a26635a4dd549cfb148ee
        Validity
            Not Before: Feb 15 16:20:00 2024 GMT
            Not After : Feb 15 16:20:00 2026 GMT
        Subject: CN=9db1c0de635def5e394343b01c849baee0e05123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:07:34:1e:87:01:e6:f2:30:2f:c9:65:ea:56:
                    a7:52:fe:1f:c6:1e:e6:43:65:de:bc:70:c5:d7:3f:
                    19:28:04:04:88:2f:c2:99:3d:4a:90:2d:ea:85:f6:
                    da:e0:da:94:26:06:7e:ed:87:e1:c7:c5:14:40:f0:
                    b4:8b:c6:1d:33:2a:3f:bc:4b:28:cc:88:f3:05:70:
                    10:d4:13:80:d4:01:b6:75:dd:d0:92:15:c4:0b:2d:
                    9c:26:71:aa:ae:5b:26:13:0f:8f:4c:e0:3d:2b:3b:
                    41:ce:c6:bf:bd:80:55:61:96:23:a9:37:1b:74:86:
                    ba:98:b3:72:52:14:54:cf:b0:1a:3e:ed:b3:07:02:
                    2a:e2:98:5c:c0:e8:fd:68:a7:d4:f8:76:cb:f6:13:
                    70:6f:93:d9:8d:2d:22:25:1b:39:a8:f8:d4:84:82:
                    52:56:2d:c4:b6:96:d9:37:76:9a:b6:a5:4d:5e:46:
                    70:fb:6f:a0:8f:71:17:9a:44:d1:50:2b:06:40:41:
                    f0:e9:ba:e4:29:92:46:68:9e:9e:0c:dd:9b:1e:c3:
                    36:27:01:c7:44:5a:92:f7:12:10:fc:e8:6a:71:4c:
                    95:b4:2f:6c:3b:a2:33:32:f5:eb:58:3f:10:ae:7d:
                    a9:10:ee:53:99:6c:9e:91:55:ba:be:d0:9b:32:df:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:04:56:D0:F5:E8:F5:F0:48:0C:6B:9F:2D:76:81:95:A5:51:F3
            X509v3 Authority Key Identifier:
                keyid:58:B3:52:F4:7C:1F:FE:E8:12:53:83:B4:E5:57:57:D4:7A:79:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccdb97cf62e833130f9a26635a4dd549cfb148ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/9db1c0de635def5e394343b01c849baee0e05123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/ccdb97cf62e833130f9a26635a4dd549cfb148ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:b8:e2:bf:bc:69:20:d9:27:7e:23:de:0e:61:53:5c:c1:
         32:bb:aa:8a:91:39:73:b8:b6:05:dc:f9:5b:8d:ca:c1:a0:8d:
         20:9b:e4:c3:8c:5c:bf:77:c6:82:08:1e:3b:35:db:eb:5c:7d:
         55:bb:70:d8:b5:87:81:f9:74:37:c2:41:87:2a:89:7c:ca:88:
         b2:c3:c1:70:8b:ed:68:5a:bd:a8:23:16:e6:69:1d:48:0a:57:
         99:4f:bb:dd:a0:b2:cd:1d:43:fd:71:d6:1f:29:3b:32:fc:d1:
         94:8f:93:20:06:61:d3:0a:5c:5d:9a:fb:48:ed:35:e6:41:16:
         a0:98:79:00:b1:ce:f4:42:92:1e:6e:c9:2f:bf:07:e5:39:f1:
         a3:0f:a7:88:3f:cb:ae:21:e8:d5:ee:13:ea:e7:32:3d:c3:89:
         5a:3e:e5:6b:d0:1d:5a:ea:14:e4:98:39:c9:c6:52:8f:92:f4:
         52:cc:8e:94:9d:7f:5e:6b:d2:6f:59:3a:0e:cc:7b:33:ef:59:
         e6:d5:4c:ff:84:89:54:dc:a0:61:6b:96:bf:26:97:36:f1:78:
         88:20:76:5c:0e:3f:46:6f:bc:8d:26:7d:b9:f3:be:fe:0f:0d:
         7e:cb:2f:47:3c:2a:5b:57:8b:c1:0d:9a:7b:c4:d1:67:99:8c:
         80:4a:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org