Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/2fa583b3ab19cc4558645a39eb7dbff49ca50652.roa
File:                     2fa583b3ab19cc4558645a39eb7dbff49ca50652.roa (raw, json)
Hash identifier:          RRIOFTJLScDa0TrrsOR87vQntU4IIik5ysp8Bxs4tbs=
Subject key identifier:   67:62:9A:9D:27:B8:E6:7D:1A:95:D0:19:9F:9E:D2:9B:AD:C6:E1:22
Certificate issuer:       /CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
Certificate serial:       2290
Authority key identifier: EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/2fa583b3ab19cc4558645a39eb7dbff49ca50652.roa
Signing time:             Wed 25 May 2022 18:46:12 +0000
ROA not before:           Wed 25 May 2022 03:00:00 +0000
ROA not after:            Sat 25 May 2024 03:00:00 +0000
asID:                     272136
IP address blocks:        45.68.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8848 (0x2290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
        Validity
            Not Before: May 25 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2024 GMT
        Subject: CN=2fa583b3ab19cc4558645a39eb7dbff49ca50652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:8d:9c:84:97:8a:ec:b3:61:6f:56:08:0c:
                    87:29:f8:d8:81:a4:98:42:bf:98:e6:f7:0a:0a:7c:
                    b2:5a:88:7d:ed:89:81:13:71:db:12:99:91:dd:34:
                    57:5b:63:e0:49:f3:85:93:cc:ae:10:15:c1:b9:79:
                    5f:43:6f:a6:a0:ad:db:dd:3d:a3:a7:89:6e:df:a2:
                    26:3d:53:d3:1e:db:c8:b8:c4:ec:da:e0:af:c8:f1:
                    17:51:b8:74:c6:1d:bc:1c:99:98:f0:f1:8b:49:5f:
                    52:b6:d8:bc:99:00:07:14:85:79:85:64:01:e9:64:
                    fb:06:f0:4a:24:c8:ab:65:96:c7:26:b8:c7:11:12:
                    aa:bb:cd:e4:21:49:ef:c6:1a:7e:21:8d:dc:85:b2:
                    3a:fc:2d:dd:5d:cd:18:a4:b8:94:12:ba:3c:4d:89:
                    ce:8e:f4:1f:f2:0c:85:72:9d:5b:5a:f2:f7:29:6a:
                    2a:db:a4:f2:c2:b6:a9:19:e0:03:1b:90:5d:c2:36:
                    d8:1e:34:85:42:7b:f3:26:c2:31:ab:31:f9:e3:66:
                    e4:fa:54:89:8d:e0:66:af:06:48:d4:24:10:c0:53:
                    51:d0:c4:28:83:20:80:5e:5d:40:fb:72:51:5a:8b:
                    c9:77:0d:f5:d7:f5:3f:10:21:df:cb:8d:89:9a:c1:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:9A:9D:27:B8:E6:7D:1A:95:D0:19:9F:9E:D2:9B:AD:C6:E1:22
            X509v3 Authority Key Identifier:
                keyid:EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/2fa583b3ab19cc4558645a39eb7dbff49ca50652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:34:e2:3e:8f:53:92:5e:0c:d0:b2:f4:3a:d8:38:7f:31:
         94:11:01:ce:8c:7f:e1:83:41:13:66:20:f0:1e:d1:2c:f0:eb:
         d7:b5:ed:74:de:f4:18:68:18:f7:79:e7:ec:78:c5:11:f5:1e:
         f1:69:07:52:d1:cb:47:04:20:6c:90:f5:c7:c9:ac:20:29:bc:
         e4:8c:ed:d5:8c:a8:54:29:a7:e2:ed:1c:be:e1:19:c7:47:9d:
         84:91:1c:3b:48:ab:33:10:3d:b3:22:9d:f0:9a:d9:70:c6:db:
         b1:77:2a:dd:67:69:23:30:08:7b:cf:da:7a:3e:e5:e5:c0:a0:
         f5:0b:d8:4a:61:52:e8:55:25:e2:b1:53:1e:6c:71:df:1a:3e:
         87:78:90:35:0a:bb:e5:ba:e4:16:2a:74:88:11:34:a9:2a:11:
         53:87:7d:11:1c:03:7b:a6:fd:e1:0e:57:6b:a6:14:d0:cf:c5:
         2f:1c:f2:e8:a7:0d:90:04:43:70:ce:9c:12:26:1e:9a:f5:99:
         5d:db:c8:59:26:69:1c:8e:a4:87:d0:e8:bd:a9:82:5a:58:3d:
         f4:cf:6e:8b:18:a7:a8:7a:d6:e1:3d:11:f3:ce:9d:63:15:47:
         38:87:8e:53:68:c1:51:22:4b:fb:05:75:2f:bc:f4:c8:e1:22:
         87:c2:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org