Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/ea10a1b7b61da3d2f6b90433c19c36431780275d.roa
File:                     ea10a1b7b61da3d2f6b90433c19c36431780275d.roa (raw, json)
Hash identifier:          t7JN9/kWBk3o/gE9fMMCpnKSXOixOlH6wxjJRiUubR8=
Subject key identifier:   76:4E:B9:45:11:B6:A2:C4:C5:94:2F:7E:3B:E3:46:1D:61:F3:4C:6E
Certificate issuer:       /CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
Certificate serial:       01D208
Authority key identifier: 2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/ea10a1b7b61da3d2f6b90433c19c36431780275d.roa
Signing time:             Wed 10 Apr 2024 20:38:05 +0000
ROA not before:           Wed 10 Apr 2024 20:38:05 +0000
ROA not after:            Fri 10 Apr 2026 20:38:05 +0000
asID:                     273165
IP address blocks:        45.68.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119304 (0x1d208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
        Validity
            Not Before: Apr 10 20:38:05 2024 GMT
            Not After : Apr 10 20:38:05 2026 GMT
        Subject: CN=ea10a1b7b61da3d2f6b90433c19c36431780275d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:0c:3b:fa:78:dd:80:f7:af:a0:16:0c:0b:
                    d7:ac:6f:83:80:94:5e:30:da:02:2e:94:92:76:c6:
                    be:7e:ac:2b:91:25:78:3c:f7:d1:f4:7b:3e:ee:35:
                    d0:07:d4:22:e7:b7:78:9b:d6:f7:ec:1d:ab:3b:7f:
                    20:02:fe:b0:31:a5:69:8c:aa:65:6e:e2:1a:c7:f1:
                    ab:9c:d1:ab:c1:53:18:8a:fa:37:e7:d6:37:6f:80:
                    9d:a4:d8:85:09:dd:ae:b0:a0:fa:9d:66:5e:20:3c:
                    ce:46:d6:36:eb:a1:56:7d:cc:fe:cc:09:25:87:e1:
                    b8:7c:ee:fb:1a:40:61:81:f7:c4:f2:a5:10:42:b9:
                    37:20:16:e2:7a:c8:25:a0:38:49:02:38:59:bb:65:
                    80:30:d2:b2:ac:03:a8:5e:d9:b4:d9:f8:a9:46:f6:
                    5b:07:b5:80:b3:92:8f:41:c5:24:05:6b:f3:bf:23:
                    d9:f8:71:8f:46:91:3b:12:5f:ed:90:0d:9b:1e:9a:
                    5d:ea:80:a8:4d:10:3b:3a:2d:81:fa:af:a9:aa:25:
                    3f:a9:83:97:81:7f:21:72:86:63:73:89:8a:48:61:
                    ad:79:f0:6a:54:81:7e:5e:c8:f7:65:e5:7a:39:06:
                    16:c7:7e:50:d9:fd:d0:87:c4:94:1f:12:3d:d3:06:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4E:B9:45:11:B6:A2:C4:C5:94:2F:7E:3B:E3:46:1D:61:F3:4C:6E
            X509v3 Authority Key Identifier:
                keyid:2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/ea10a1b7b61da3d2f6b90433c19c36431780275d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:fd:8a:fc:3b:7c:08:2d:fd:8a:68:58:61:cf:c3:73:75:
         07:61:38:54:2a:a9:0d:e7:49:93:87:8a:ce:cb:86:0c:81:0a:
         83:7a:e0:74:dd:ee:95:33:ba:0c:d5:6a:67:68:a4:6d:f3:44:
         a4:80:0a:d3:59:81:35:03:d8:f1:6a:71:b4:a5:1d:bb:fe:70:
         33:16:bf:27:aa:a7:9b:0e:66:c2:95:7d:f1:e0:a6:30:4b:4a:
         40:c4:fe:76:5e:05:76:bc:7c:c8:06:b9:ac:1d:d8:f3:62:6c:
         0d:35:c7:3d:fb:2a:ea:e4:8e:d5:d9:21:c5:70:2c:de:c0:f2:
         84:a0:4f:60:ba:59:ce:04:6f:d7:e6:2b:92:ba:50:c0:47:3d:
         22:ca:dd:c4:d4:5d:93:37:48:cc:3b:72:16:2d:32:ff:4a:d5:
         79:5a:8d:e1:71:70:f2:1f:7f:37:5b:09:73:45:a6:fc:c9:a5:
         b2:c9:e6:45:eb:fb:f0:bb:61:c4:e3:2b:dd:09:5d:13:1c:e0:
         48:93:e9:5c:48:08:cc:b8:d6:cc:40:b3:9d:71:48:f8:b0:5e:
         98:fb:c5:9f:8c:62:21:5f:ab:33:51:4a:58:83:a2:26:5f:66:
         8c:a2:3b:0f:23:de:d6:a2:35:d5:1f:4c:13:1f:5b:ff:73:02:
         f9:31:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org