Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/293e1892d9db39c0980aceabe9b11364f3e27271.roa
File:                     293e1892d9db39c0980aceabe9b11364f3e27271.roa (raw, json)
Hash identifier:          TaLTHH7qqpNP9BbzLw0eokonkCP3tnfJbX4FCLeb5V4=
Subject key identifier:   C2:EB:E6:94:82:B0:63:A7:37:81:21:C0:66:8B:D3:D8:27:6F:8A:CC
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       1E2861
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/293e1892d9db39c0980aceabe9b11364f3e27271.roa
Signing time:             Fri 24 Mar 2023 08:30:48 +0000
ROA not before:           Thu 23 Mar 2023 08:30:48 +0000
ROA not after:            Sat 22 Mar 2025 08:30:48 +0000
asID:                     269782
IP address blocks:        45.184.248.0/23 maxlen: 23
                          45.184.248.0/24 maxlen: 24
                          45.184.249.0/24 maxlen: 24
                          45.184.250.0/23 maxlen: 23
                          45.184.250.0/24 maxlen: 24
                          45.184.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976417 (0x1e2861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Mar 23 08:30:48 2023 GMT
            Not After : Mar 22 08:30:48 2025 GMT
        Subject: CN=293e1892d9db39c0980aceabe9b11364f3e27271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:02:50:f4:0d:5a:66:2a:9f:9e:22:d5:2b:
                    26:af:b8:5d:ee:c4:a4:26:dd:6a:bb:33:9e:4b:3b:
                    04:db:45:1c:2f:df:fe:08:da:e6:a7:9a:d8:39:7f:
                    28:fa:77:e1:21:93:d7:e3:7a:f3:74:cd:24:66:19:
                    e5:0b:1f:99:59:d4:4c:47:79:40:47:61:1c:2e:5e:
                    b4:91:f0:10:ff:49:1d:70:f2:bf:70:05:d1:b0:5b:
                    03:0a:fe:f6:0b:c3:8b:68:0c:97:9f:76:82:7d:68:
                    7f:2a:7f:8f:32:37:57:2a:ed:23:e7:22:6e:15:a0:
                    34:80:40:d8:36:7f:58:6c:e2:3d:16:6c:dc:fa:01:
                    ab:6e:9a:cb:af:67:12:3c:dc:a7:a3:97:18:1d:19:
                    9a:35:04:c0:39:b4:f9:b3:11:65:30:b4:9e:91:13:
                    b2:c1:30:a6:94:5b:29:c2:d8:bb:ab:b5:47:0e:94:
                    64:b0:ba:35:29:ae:44:a1:19:23:20:1f:6e:6f:ad:
                    80:ec:26:58:85:ea:9f:b4:55:95:61:b9:d1:8e:63:
                    25:d4:1b:08:e5:79:8a:ff:e9:e5:b4:70:b8:11:cb:
                    14:62:2c:a0:2f:a1:10:61:5f:12:0c:0b:a8:6b:4d:
                    99:ef:ce:58:e4:8c:47:7c:b5:d2:21:94:4d:2e:52:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:E6:94:82:B0:63:A7:37:81:21:C0:66:8B:D3:D8:27:6F:8A:CC
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/293e1892d9db39c0980aceabe9b11364f3e27271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:7a:d0:87:27:a1:62:4f:72:1a:be:95:b2:53:df:8e:c8:
         46:6b:db:80:ef:c4:62:cb:85:fa:ab:a8:38:c5:c6:50:c1:b6:
         fd:a3:ee:35:3b:17:fb:1f:24:1f:de:18:c1:72:0b:f8:fb:b6:
         7d:40:8d:26:09:ae:e7:06:be:bb:d5:e6:f6:b9:95:b2:44:ce:
         58:eb:aa:42:ba:3b:af:25:aa:dc:bb:3d:d9:0e:4b:1f:8d:98:
         1d:0a:ac:92:1b:d4:0f:76:ad:db:99:f7:35:a8:a3:e3:1e:d1:
         e6:94:3b:cc:8a:b9:c3:ca:56:0d:01:16:e6:30:27:48:19:18:
         10:e3:3e:6b:62:34:71:8e:c5:b0:f3:22:1e:43:18:e0:80:53:
         d2:c7:7d:15:73:43:be:9d:62:01:5a:ac:b7:94:55:c6:03:1c:
         b7:65:5c:b8:bf:db:c7:80:f4:64:66:ec:e3:84:9a:a1:3c:cd:
         5b:60:28:3d:7f:18:8c:63:fa:53:84:8d:6a:2f:6b:1b:85:e1:
         16:2a:46:9f:76:50:99:c4:34:0d:29:cd:26:07:2b:54:c2:87:
         57:f4:20:63:99:d3:e8:08:a7:59:06:31:1e:13:fb:83:30:52:
         30:3f:13:8c:a9:0c:cc:98:41:98:b8:e2:27:82:1f:54:ca:1c:
         0f:dd:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org