Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/c92e33872c982cb9fded36f989d942d114d3f780.roa
File:                     c92e33872c982cb9fded36f989d942d114d3f780.roa (raw, json)
Hash identifier:          Bclzdzw4d/df824eUX8udKEcw4uFgNRO209YBrtxAek=
Subject key identifier:   70:A6:A4:38:A5:50:47:49:F1:16:17:52:6B:5E:34:31:4D:A4:8D:CA
Certificate issuer:       /CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
Certificate serial:       01D7EC
Authority key identifier: 2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/c92e33872c982cb9fded36f989d942d114d3f780.roa
Signing time:             Wed 10 Apr 2024 20:39:36 +0000
ROA not before:           Wed 10 Apr 2024 20:39:36 +0000
ROA not after:            Fri 10 Apr 2026 20:39:36 +0000
asID:                     273165
IP address blocks:        45.68.52.0/23 maxlen: 23
                          45.68.52.0/24 maxlen: 24
                          45.68.53.0/24 maxlen: 24
                          45.68.54.0/23 maxlen: 23
                          45.68.54.0/24 maxlen: 24
                          45.68.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120812 (0x1d7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
        Validity
            Not Before: Apr 10 20:39:36 2024 GMT
            Not After : Apr 10 20:39:36 2026 GMT
        Subject: CN=c92e33872c982cb9fded36f989d942d114d3f780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:cb:02:2d:75:a4:01:44:8d:d0:ff:fb:52:
                    21:22:35:1e:55:07:cb:29:00:a0:87:b9:d6:72:8a:
                    f1:bd:a3:3e:3b:1a:be:86:73:a8:5c:9e:3c:28:2f:
                    fd:28:4d:be:c6:73:39:5b:b8:1f:4f:dc:7e:60:68:
                    6f:de:1e:39:fd:da:0d:bb:a9:40:71:04:9d:ec:29:
                    cc:94:60:20:16:ad:e4:86:b6:54:6b:21:6f:3a:ed:
                    d1:4c:47:77:0c:a7:a0:10:bf:98:23:ae:71:f9:64:
                    e6:00:60:a9:ba:74:13:3e:24:43:ad:2a:82:67:60:
                    d1:1e:f5:6f:89:73:79:b7:5d:4c:42:10:93:96:95:
                    23:c2:10:ab:6b:09:6d:7d:7d:25:91:6b:f4:fc:6f:
                    82:bb:2b:7b:f5:bc:a1:9d:f1:a8:28:29:a6:6d:4c:
                    35:0a:01:69:23:c0:14:f7:54:fe:31:7c:50:b7:32:
                    0a:cf:cc:1a:6b:c4:8d:1f:49:14:7e:6e:b3:7f:99:
                    76:78:37:20:c2:91:68:20:ec:3f:b6:2f:b3:c4:4f:
                    01:cc:89:c9:90:16:be:49:4a:90:7f:75:b0:4d:19:
                    96:7c:64:bc:16:55:57:e2:50:b6:35:96:2a:8e:ca:
                    8c:1e:d9:09:92:ec:07:eb:3c:93:45:b2:e0:04:c4:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A6:A4:38:A5:50:47:49:F1:16:17:52:6B:5E:34:31:4D:A4:8D:CA
            X509v3 Authority Key Identifier:
                keyid:2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/c92e33872c982cb9fded36f989d942d114d3f780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:20:85:bf:22:60:59:6b:57:d5:4e:72:e3:ab:ff:62:a9:24:
         57:f7:35:43:6f:bf:07:d2:9c:36:cd:86:90:bd:d5:be:1f:33:
         6d:b8:cf:39:84:ed:f9:66:5e:b2:d2:5a:cf:2c:2c:ba:ff:78:
         35:30:81:db:32:27:d6:5b:24:c7:bc:22:54:b9:3e:9d:ee:3f:
         42:55:81:d7:09:53:88:0b:41:c2:39:15:70:14:6f:d3:9f:ac:
         e8:c2:8a:92:18:ed:3f:fb:73:2e:89:95:4a:d1:6c:ef:e0:64:
         a4:b2:07:c0:bd:63:6b:32:c8:ae:84:36:61:49:14:66:5b:9f:
         f5:f0:7b:e7:33:5d:3b:93:d9:41:cd:6d:08:b8:2c:2a:a3:bb:
         30:81:23:91:45:5e:5e:6f:f3:35:06:0d:c9:6a:8e:8d:72:65:
         27:40:70:f5:65:d2:37:0c:dc:da:2e:72:2a:50:95:be:b9:82:
         48:03:2a:21:a6:6f:92:a4:dd:6e:4c:54:81:cf:31:27:87:d5:
         5c:23:12:56:15:ae:ac:96:f3:30:e5:80:83:9e:b0:7e:af:bd:
         93:96:27:83:c6:27:5a:30:36:c3:7f:dc:e6:7a:0d:32:2c:f6:
         32:d5:26:2d:f9:69:77:73:1d:16:3f:74:7d:d0:ae:c6:13:e5:
         e9:b8:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org