Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/2596160c24ec6cd6d3336d45da7483863ccdd3b2.roa
File:                     2596160c24ec6cd6d3336d45da7483863ccdd3b2.roa (raw, json)
Hash identifier:          Pnfx6znvTDat4XfLLGWGNBqUxAZ6z7gDt8rjh+37u5o=
Subject key identifier:   AB:E1:54:B9:E4:64:D9:C6:AC:25:1D:22:1E:0E:A3:36:FD:16:FB:2F
Certificate issuer:       /CN=b89e6f83f092429d4e523cebb3044e5f86895d46
Certificate serial:       18E4BB
Authority key identifier: BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/2596160c24ec6cd6d3336d45da7483863ccdd3b2.roa
Signing time:             Wed 05 Oct 2022 08:35:31 +0000
ROA not before:           Wed 05 Oct 2022 08:35:20 +0000
ROA not after:            Sat 05 Oct 2024 09:35:20 +0000
asID:                     265825
IP address blocks:        45.71.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631419 (0x18e4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89e6f83f092429d4e523cebb3044e5f86895d46
        Validity
            Not Before: Oct  5 08:35:20 2022 GMT
            Not After : Oct  5 09:35:20 2024 GMT
        Subject: CN=2596160c24ec6cd6d3336d45da7483863ccdd3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:49:de:e3:a6:8c:09:cd:d7:98:0a:80:86:
                    1b:4e:16:6b:b4:8c:d2:ce:0a:ba:6e:07:56:25:6c:
                    cc:60:bd:fa:78:63:4f:f6:1b:25:ca:55:4a:e2:d0:
                    03:5d:a3:e7:2e:84:de:b9:e3:ef:31:7a:56:8a:e6:
                    47:01:9e:a0:a3:30:06:fc:1a:4b:d9:bf:a9:44:d6:
                    c7:15:6d:68:a5:de:0f:d6:de:ff:52:08:16:05:d9:
                    a4:e8:85:37:b5:a7:c1:00:ca:9a:91:a0:85:c6:c5:
                    a0:27:64:cd:4d:3f:5f:f2:25:95:4a:76:81:a9:e6:
                    1b:6c:59:6c:c1:2a:10:69:ad:98:68:80:fc:fd:a6:
                    3a:01:bb:81:64:e3:0a:bf:75:4d:0b:65:e4:85:89:
                    9d:33:1e:fb:7b:8a:d9:31:3a:35:81:a2:23:a1:c4:
                    ee:7b:10:ef:74:15:f8:fa:eb:93:5f:22:34:10:49:
                    4e:79:6b:72:47:f0:96:93:d4:21:22:33:5f:f6:50:
                    8c:97:11:4f:7f:20:df:64:85:0b:a5:b9:f3:67:63:
                    9a:ac:a6:9e:b6:c4:cb:02:9b:51:74:79:c7:cd:a5:
                    fc:78:51:4c:c5:81:ba:c6:f4:18:9a:3e:43:10:6a:
                    49:01:ec:a7:bc:6d:3f:58:ad:a5:00:05:38:79:fd:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:54:B9:E4:64:D9:C6:AC:25:1D:22:1E:0E:A3:36:FD:16:FB:2F
            X509v3 Authority Key Identifier:
                keyid:BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/2596160c24ec6cd6d3336d45da7483863ccdd3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/b89e6f83f092429d4e523cebb3044e5f86895d46.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:af:5e:82:fe:e5:a6:8a:1d:0a:89:33:88:ed:e7:6d:40:62:
         4c:92:85:79:1d:89:40:05:aa:e1:55:d2:8e:54:bc:87:2d:8d:
         eb:9a:0a:84:08:77:38:15:3e:89:e5:e2:d2:17:4b:52:61:2a:
         ee:d1:b2:3b:61:e0:a7:48:52:ec:45:92:db:0c:c1:90:78:b3:
         52:d4:96:18:27:15:68:0f:18:4b:62:9b:cc:08:3a:a7:5b:8a:
         b9:50:98:71:2a:ca:3b:c8:52:af:14:61:8b:98:b3:0b:3b:2d:
         62:f4:0e:a5:32:b6:f2:d6:39:e0:b4:f4:53:4c:ef:1f:eb:51:
         62:1d:cf:9a:fd:79:e7:7c:7a:34:ff:68:92:52:1e:3a:f0:49:
         c0:b7:fd:4b:18:a5:fc:97:83:43:3e:5e:af:a9:1c:7e:0d:40:
         c2:c7:52:68:65:41:a7:57:d0:57:f0:5b:2a:51:eb:df:54:7b:
         d8:3b:e5:4d:a0:c2:c0:fb:76:71:45:07:4d:30:6e:47:b7:0d:
         47:cb:5d:ba:a1:1e:1f:b0:c9:ac:7d:31:c0:c8:38:89:bf:a6:
         24:4a:f7:9b:9d:b0:88:4c:98:68:3c:19:ca:75:54:d1:46:fa:
         14:ba:e1:21:be:97:11:e3:45:1f:83:d8:3c:a4:6c:0a:56:ce:
         26:44:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org