Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/0bb5ad9c4a8ef70811d72bc4ebb7a22b2e25d8e0.roa
File:                     0bb5ad9c4a8ef70811d72bc4ebb7a22b2e25d8e0.roa (raw, json)
Hash identifier:          AwgBTMvc+/xsjdy1CmTkFDdwb7Nt6FWlvENebB4lGLQ=
Subject key identifier:   F6:D8:4E:5A:15:9F:7E:38:9D:E4:5B:A0:C0:E0:A6:DF:DD:9D:4B:8F
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       1EE76D
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/0bb5ad9c4a8ef70811d72bc4ebb7a22b2e25d8e0.roa
Signing time:             Mon 05 Jun 2023 18:47:25 +0000
ROA not before:           Sun 04 Jun 2023 18:47:25 +0000
ROA not after:            Thu 05 Jun 2025 18:47:25 +0000
asID:                     273006
IP address blocks:        45.189.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025325 (0x1ee76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: Jun  4 18:47:25 2023 GMT
            Not After : Jun  5 18:47:25 2025 GMT
        Subject: CN=0bb5ad9c4a8ef70811d72bc4ebb7a22b2e25d8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:53:bf:cb:61:18:70:1a:28:87:6c:92:e4:
                    c3:ca:c3:3d:9a:17:d2:b8:4b:99:93:85:5b:4c:e2:
                    34:64:f1:1e:8b:af:da:18:c3:ed:1b:31:51:4b:dc:
                    77:c3:76:eb:5d:3b:09:08:74:ba:17:18:ce:cc:27:
                    14:63:fd:70:f3:d5:0a:f9:4f:5d:4d:d1:a2:ad:4e:
                    83:20:17:9f:96:a2:ed:95:14:a0:41:71:03:f6:6a:
                    44:a6:5f:14:3c:d8:a7:3c:63:74:5e:7b:ff:d6:77:
                    ac:64:41:f9:6e:6b:1d:c8:ca:e2:54:26:93:6e:a3:
                    41:8e:a2:35:5d:7e:22:48:a4:f3:79:b3:f2:23:4a:
                    9c:68:94:5c:b0:e7:65:97:25:7a:f7:8f:ab:69:82:
                    06:5d:d9:56:4f:ed:e4:50:9e:a8:ed:31:ef:c3:ca:
                    93:0e:83:36:48:12:a6:80:00:78:50:b5:86:6a:e2:
                    f0:e2:1e:0d:a6:a8:47:62:fc:32:e9:52:6f:33:8d:
                    47:fb:a9:f9:23:b0:b6:67:ac:4a:fb:0a:85:1d:94:
                    50:9d:61:46:ce:d6:ac:37:d6:81:b3:1f:b4:7b:55:
                    12:f3:63:38:80:9c:36:4a:8c:e8:9f:ab:ad:58:67:
                    78:ed:ff:60:61:8f:35:41:8a:e1:9b:4f:de:32:3a:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D8:4E:5A:15:9F:7E:38:9D:E4:5B:A0:C0:E0:A6:DF:DD:9D:4B:8F
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/0bb5ad9c4a8ef70811d72bc4ebb7a22b2e25d8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:9b:1a:ba:26:0a:2e:9e:3b:e0:3b:bf:6a:39:c8:db:96:
         2b:5c:87:03:a5:0d:4b:9a:97:8e:21:84:1c:c8:8f:a4:2c:a2:
         6d:bf:9f:ab:2f:b0:d6:38:30:41:15:8f:39:6a:94:21:32:53:
         a2:e0:07:10:c6:2f:87:9c:6a:a9:6b:dd:ca:3d:3c:4c:bc:ae:
         ba:49:c6:b9:85:49:f1:61:8e:9c:d5:bc:9b:d7:3b:90:a1:bc:
         26:df:2e:ba:97:ef:8c:0a:77:8f:b4:55:22:32:56:ab:79:33:
         ca:c6:32:89:dd:b6:5c:8e:ca:a2:23:69:94:3e:ee:9b:4a:ab:
         80:d3:ce:78:7d:07:79:37:bb:51:21:69:e6:38:c0:01:e6:ee:
         85:17:f3:0a:3e:54:63:9e:73:d8:d2:8c:df:ae:9b:b6:a6:6c:
         f8:26:c1:37:b2:69:d1:e5:e7:2a:91:e9:85:7b:93:89:08:89:
         74:37:89:57:7d:68:53:07:18:00:6c:05:97:cf:09:fa:a0:5e:
         fe:f4:c0:25:42:2b:4e:0a:85:5a:48:cd:92:24:f4:0b:39:04:
         3d:88:8b:6d:f8:25:c0:04:f8:82:9c:78:7f:6f:b1:ac:cd:55:
         40:6f:09:ab:40:72:5b:84:5d:e4:c9:41:a4:c0:e8:86:7d:23:
         1a:9f:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org