Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/0d729882bec4909936d04bd6f30011d9f2e6b003.roa
File:                     0d729882bec4909936d04bd6f30011d9f2e6b003.roa (raw, json)
Hash identifier:          dhdHaFszvJyOYWDNpevmeFyI6bKUZJDBbYp09KOe8d8=
Subject key identifier:   A4:6D:59:FF:1F:50:A6:99:29:9A:BF:93:1E:85:F4:B9:07:2E:06:02
Certificate issuer:       /CN=628922650fa5a87787a3f72fc142195f570c8c4e
Certificate serial:       2581BE
Authority key identifier: 6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/0d729882bec4909936d04bd6f30011d9f2e6b003.roa
Signing time:             Tue 30 Jan 2024 07:30:00 +0000
ROA not before:           Tue 30 Jan 2024 07:30:00 +0000
ROA not after:            Thu 29 Jan 2026 07:30:00 +0000
asID:                     267856
IP address blocks:        45.176.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2458046 (0x2581be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628922650fa5a87787a3f72fc142195f570c8c4e
        Validity
            Not Before: Jan 30 07:30:00 2024 GMT
            Not After : Jan 29 07:30:00 2026 GMT
        Subject: CN=0d729882bec4909936d04bd6f30011d9f2e6b003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:8f:55:df:32:ef:22:13:c3:4c:9d:d6:3c:
                    45:90:4f:16:3b:ed:79:a1:37:b8:10:a1:ef:3d:db:
                    c4:98:d7:97:15:92:25:f5:e8:14:b3:c6:f6:70:10:
                    c5:e5:09:8d:38:9e:2f:f0:70:ae:a4:ac:21:1d:a4:
                    2e:85:fd:96:d9:ed:1e:3e:2a:44:e9:04:a8:84:d1:
                    2b:18:f8:fc:32:54:fc:ee:ec:06:28:5e:06:9b:c8:
                    76:4e:75:d5:c4:cf:39:ac:bd:87:81:a0:7b:e5:7d:
                    29:a2:92:3b:1d:db:96:b6:13:0c:e3:b6:75:d5:a6:
                    b8:40:f1:63:9e:46:bc:ae:cf:2b:9f:51:83:4b:74:
                    96:c6:19:c0:c6:a4:42:9d:84:3e:69:20:c4:97:30:
                    aa:6f:9a:2b:38:56:ed:08:04:b7:88:8e:ac:f8:2e:
                    1a:74:08:44:0d:f9:fb:88:d8:55:18:bd:3b:35:5b:
                    e4:b6:a5:45:7f:21:26:3d:90:e7:aa:d4:3b:6f:19:
                    68:35:3c:96:9c:bf:cc:c9:41:d6:b7:0b:71:2a:2a:
                    23:8b:0e:37:b4:08:c1:aa:28:56:d5:df:b6:84:dd:
                    a7:cc:16:49:14:91:56:93:96:ea:db:2e:0e:0d:10:
                    6f:49:a3:e1:f0:2c:67:6c:4f:ce:98:6b:4c:1d:5c:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:59:FF:1F:50:A6:99:29:9A:BF:93:1E:85:F4:B9:07:2E:06:02
            X509v3 Authority Key Identifier:
                keyid:6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/0d729882bec4909936d04bd6f30011d9f2e6b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:93:38:14:0f:df:f7:cf:c4:c0:d6:e1:bf:a7:98:b8:19:69:
         ce:25:a9:8d:88:5e:4d:91:9e:85:36:e8:b3:b7:66:6f:fc:71:
         61:28:6c:06:c8:0e:52:64:82:c5:59:46:65:1e:4a:b5:29:16:
         0b:23:9a:33:a3:de:b3:34:2b:b5:13:91:d0:22:6b:bf:bf:c1:
         3d:f2:76:eb:76:39:b9:0a:19:dc:52:c3:70:39:22:ec:28:88:
         96:b6:f0:f0:8b:8b:92:c2:ed:dd:ab:d1:0a:84:b5:44:3f:38:
         3a:1e:58:0d:a2:be:c9:9d:63:4b:a7:b3:03:30:86:51:e2:3e:
         b6:57:06:f1:d0:dc:39:e2:bd:45:0d:90:dc:12:6f:aa:0d:96:
         08:b3:31:73:84:81:ab:5b:2f:2e:67:52:8c:2f:2d:5e:c0:04:
         24:96:32:19:76:3d:78:c2:66:d7:84:a6:1b:0b:d9:0f:e1:e6:
         e7:9e:19:8e:ce:2f:96:57:08:11:16:b8:cf:eb:55:9c:f0:98:
         44:2c:94:d1:b9:a6:49:cc:0a:1d:7d:a1:7b:7b:f8:81:2f:c0:
         0e:dc:ee:b0:11:e2:d0:c4:6b:b4:6f:65:e3:1c:51:c8:a2:58:
         53:25:54:34:7a:a6:23:f2:1f:ea:77:36:0e:8f:b8:01:c5:1f:
         ac:c9:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org