Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/720b6918a3b20cd568efef71cbad3d7af5c27302.roa
File:                     720b6918a3b20cd568efef71cbad3d7af5c27302.roa (raw, json)
Hash identifier:          W4DGIcHzF7Wsn48TSVPL/7oVShOPpUpP9QMwfm7CwLc=
Subject key identifier:   42:58:F0:25:34:8B:C8:76:17:9E:5A:02:3B:6E:C1:78:A7:66:4A:17
Certificate issuer:       /CN=972388b64b903e27a472d5d232b9cd9c3a2594d4
Certificate serial:       1E3249
Authority key identifier: 4C:B6:7B:0A:04:91:31:73:32:0E:78:F6:DE:04:64:44:F3:AF:A0:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972388b64b903e27a472d5d232b9cd9c3a2594d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/720b6918a3b20cd568efef71cbad3d7af5c27302.roa
Signing time:             Thu 11 May 2023 02:50:03 +0000
ROA not before:           Wed 10 May 2023 02:50:03 +0000
ROA not after:            Sun 11 May 2025 02:50:03 +0000
asID:                     267897
IP address blocks:        45.177.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978953 (0x1e3249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972388b64b903e27a472d5d232b9cd9c3a2594d4
        Validity
            Not Before: May 10 02:50:03 2023 GMT
            Not After : May 11 02:50:03 2025 GMT
        Subject: CN=720b6918a3b20cd568efef71cbad3d7af5c27302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:34:8b:0b:7d:c1:fc:b3:29:c2:b2:44:8f:
                    e2:74:b5:35:e6:58:3e:04:6e:62:22:a4:92:22:0f:
                    94:52:63:73:72:74:d8:3e:a2:3a:60:1d:52:70:82:
                    4c:2f:3c:cf:1b:b7:1c:23:35:e4:1c:bf:b7:c0:bd:
                    98:2b:00:24:eb:13:b5:78:e4:d3:e9:a3:f1:71:22:
                    47:ff:35:8a:8b:bb:dd:f8:21:65:ac:ac:51:44:94:
                    fa:52:c7:13:c1:9f:9e:0c:3f:3d:29:c7:3e:bf:7c:
                    aa:7d:91:4f:ea:14:5f:78:68:9d:59:22:bb:e4:e5:
                    ab:e7:ed:81:1b:4d:80:78:84:e3:bf:78:00:e4:df:
                    14:b8:43:d8:58:4d:ea:66:24:80:75:f8:89:51:ef:
                    01:75:b8:6f:68:1b:75:9d:38:85:37:a6:36:61:4d:
                    8f:ea:0b:45:8b:f6:24:f6:9d:96:f7:80:2e:4f:5d:
                    50:e5:c1:76:70:38:65:d2:08:f4:e9:d6:d9:46:68:
                    7d:8e:49:6e:ad:04:bc:03:4d:36:c8:e3:a5:ac:7c:
                    3c:f4:0e:8f:ca:60:5a:98:94:16:b5:1d:d7:8e:bd:
                    00:4a:f4:55:09:09:ca:ea:7b:e2:9b:9d:5d:1c:27:
                    bb:db:c4:fe:b7:b6:a8:ae:01:ec:10:89:a5:e9:a3:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:F0:25:34:8B:C8:76:17:9E:5A:02:3B:6E:C1:78:A7:66:4A:17
            X509v3 Authority Key Identifier:
                keyid:4C:B6:7B:0A:04:91:31:73:32:0E:78:F6:DE:04:64:44:F3:AF:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972388b64b903e27a472d5d232b9cd9c3a2594d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/720b6918a3b20cd568efef71cbad3d7af5c27302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/972388b64b903e27a472d5d232b9cd9c3a2594d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:f9:58:e7:74:09:14:3e:05:73:b6:d2:d8:c4:8c:dd:cf:
         da:07:c1:1f:cc:f6:72:e3:45:05:67:39:67:b4:52:5d:5b:50:
         8b:c2:b9:ea:60:ed:b4:48:be:f6:17:fa:84:22:b9:be:a6:33:
         43:ad:ca:70:97:35:5b:80:35:3f:d1:14:d1:8e:31:a8:be:41:
         bf:db:10:77:9b:91:34:83:c4:b3:96:55:27:ac:10:e9:9c:2f:
         62:81:a7:43:da:b2:4b:47:f4:38:53:8e:1c:d9:1c:0f:a6:53:
         68:b3:1a:2e:b5:97:ad:16:03:68:11:a3:2b:b5:4d:32:1a:13:
         b4:e9:5c:fb:24:10:32:7f:c6:66:34:f9:16:2e:62:0c:65:58:
         71:9d:c2:04:cf:78:e0:6d:6f:36:36:cc:e4:b6:e1:6e:7b:ea:
         51:c9:4c:40:7e:d8:f9:d4:4e:03:93:1c:e7:db:d0:5d:50:ee:
         53:99:b6:9c:7d:46:6f:bd:04:fa:4a:42:80:78:23:fe:77:07:
         00:ad:d0:65:ff:c3:41:03:a0:d2:96:91:b8:e2:1d:55:ca:f4:
         e7:72:96:5b:c4:9e:24:1e:13:6f:f1:43:64:4a:c7:36:44:23:
         9f:7a:61:5d:0b:a3:c4:63:04:cc:93:72:ab:6e:49:d7:d4:45:
         61:87:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org