Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/a067c4ed9233d8d1c4cdc1c370c5334e9305bea4.roa
File:                     a067c4ed9233d8d1c4cdc1c370c5334e9305bea4.roa (raw, json)
Hash identifier:          Yr89zozmRnCxG/G8+Im+Yvz2KQv/ZH4vCvV0w3Y4+oQ=
Subject key identifier:   B8:92:35:F6:0F:2C:80:98:3D:49:4F:F2:8A:4A:14:F8:DF:CD:F8:89
Certificate issuer:       /CN=c762b73a56d901ebf3f160eb23df76c2b3b95544
Certificate serial:       15FBEB
Authority key identifier: 44:B8:68:2A:AB:84:8A:3A:3D:5B:36:84:E0:03:5C:1A:09:6C:77:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c762b73a56d901ebf3f160eb23df76c2b3b95544.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/a067c4ed9233d8d1c4cdc1c370c5334e9305bea4.roa
Signing time:             Tue 01 Nov 2022 13:19:48 +0000
ROA not before:           Sun 30 Oct 2022 12:57:42 +0000
ROA not after:            Fri 01 Nov 2024 12:57:42 +0000
asID:                     272878
IP address blocks:        45.191.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440747 (0x15fbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c762b73a56d901ebf3f160eb23df76c2b3b95544
        Validity
            Not Before: Oct 30 12:57:42 2022 GMT
            Not After : Nov  1 12:57:42 2024 GMT
        Subject: CN=a067c4ed9233d8d1c4cdc1c370c5334e9305bea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:fe:3e:60:8f:8d:08:ce:37:bf:fa:94:d0:
                    43:bb:b1:4a:1d:83:29:f4:4a:3f:1e:35:3e:c8:c6:
                    e3:db:36:04:cb:04:58:8a:99:d6:78:ea:5d:38:1c:
                    e0:66:5f:2a:9d:42:5d:90:40:dd:59:3c:58:71:54:
                    4b:e6:e2:c3:ed:d0:c5:74:e3:e1:c8:57:47:9f:c8:
                    be:20:c7:c1:75:54:d6:ba:1a:d1:ce:25:7a:41:6f:
                    10:5d:51:93:b1:aa:28:e8:7c:c6:e3:7a:ae:e8:63:
                    e5:4e:89:77:1b:e1:60:a5:98:51:85:3c:48:44:56:
                    4c:a6:be:48:0d:65:db:ab:bd:aa:58:66:cd:0e:b0:
                    9b:7c:8f:66:06:ba:db:10:1e:6a:d9:84:be:0a:16:
                    31:95:c7:8e:bf:2a:ae:21:34:7e:69:66:1f:e2:8b:
                    b9:d9:bb:0d:a2:ca:3b:33:e8:a9:fc:55:6c:b4:76:
                    26:18:17:b7:75:2a:4f:8a:a4:c4:37:cd:35:a2:96:
                    ab:2c:23:fe:61:34:95:0d:0b:06:21:73:5a:81:76:
                    74:c9:d0:61:ef:9e:69:a3:d3:fb:c5:ac:a2:a4:fb:
                    66:b5:d4:4f:f0:19:95:5b:08:43:d3:17:30:ed:d1:
                    8a:ed:c7:ae:68:be:3e:06:c6:a0:33:eb:09:68:a5:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:35:F6:0F:2C:80:98:3D:49:4F:F2:8A:4A:14:F8:DF:CD:F8:89
            X509v3 Authority Key Identifier:
                keyid:44:B8:68:2A:AB:84:8A:3A:3D:5B:36:84:E0:03:5C:1A:09:6C:77:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c762b73a56d901ebf3f160eb23df76c2b3b95544.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/a067c4ed9233d8d1c4cdc1c370c5334e9305bea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59222e0d-b279-4214-92a1-94e194a88d51/c762b73a56d901ebf3f160eb23df76c2b3b95544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:55:e1:19:6b:b9:38:6f:a6:31:db:2a:52:12:9a:bc:7d:8c:
         d8:57:15:d6:5d:56:8d:9b:95:b9:26:2c:40:a2:11:8c:c9:e7:
         75:da:c7:c8:b7:9f:83:b2:c8:28:09:24:59:1f:18:d2:fc:c2:
         6d:c7:05:40:47:b6:3e:1e:1e:be:14:f3:ba:0b:ac:77:4d:1c:
         54:3f:f2:4a:ea:c7:0f:c8:63:14:6d:ed:ec:a5:89:7a:6f:22:
         37:e9:92:84:89:b1:06:e8:0e:a9:1f:96:f4:c8:b3:2d:2e:a3:
         e1:99:b5:14:ec:a5:bd:8a:35:5d:48:26:4e:c4:9e:ce:6f:18:
         01:fb:72:30:3d:ea:f9:94:b0:c3:27:db:f9:4b:52:c0:fa:3d:
         64:0a:d1:ec:33:a9:89:0b:9c:55:3c:15:d8:9c:8f:73:da:53:
         64:f7:09:d3:82:6c:6b:92:1c:ac:42:63:6a:d7:87:7a:4f:25:
         2e:39:e3:18:2e:d3:74:d5:fb:d3:64:3e:6b:cd:df:2b:c0:39:
         0b:89:48:37:6b:16:35:82:03:4b:1c:4e:4f:b3:18:7c:1c:88:
         49:cb:da:02:14:a4:c6:a8:36:c3:8a:b8:3b:88:b7:af:b0:00:
         48:eb:a8:22:e0:a3:ce:13:ef:27:2c:10:1c:84:df:24:1e:af:
         a8:db:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org