Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/d15d02c09f7c752c8e5b5fd646741852121a211c.roa
File:                     d15d02c09f7c752c8e5b5fd646741852121a211c.roa (raw, json)
Hash identifier:          kJYNJFnMwxN2gCT46W6WST2pbNGrRijhMR+UYm5EbrY=
Subject key identifier:   CD:A8:8A:73:F1:61:FA:1C:38:29:7A:0A:59:BD:57:71:B0:E6:89:97
Certificate issuer:       /CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Certificate serial:       1EA373
Authority key identifier: EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/d15d02c09f7c752c8e5b5fd646741852121a211c.roa
Signing time:             Sun 09 Apr 2023 08:30:00 +0000
ROA not before:           Sat 08 Apr 2023 08:30:00 +0000
ROA not after:            Mon 07 Apr 2025 08:30:00 +0000
asID:                     265675
IP address blocks:        45.171.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007923 (0x1ea373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Validity
            Not Before: Apr  8 08:30:00 2023 GMT
            Not After : Apr  7 08:30:00 2025 GMT
        Subject: CN=d15d02c09f7c752c8e5b5fd646741852121a211c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:a5:9c:1e:21:a2:a7:e2:3a:fa:0e:81:44:
                    23:d6:9c:9a:8c:6a:4b:f0:f4:21:78:cb:b1:01:a3:
                    cc:66:89:46:e1:f6:8e:a3:16:d4:70:6c:4b:39:3a:
                    1e:a0:56:ed:ec:fd:0a:c3:be:9f:e8:36:0b:6b:d4:
                    6a:a9:c5:b6:29:cf:55:b1:71:ca:48:94:8b:86:87:
                    d5:dd:5f:27:86:f0:64:5a:a1:e1:18:74:5e:53:5c:
                    c9:ea:2f:3b:05:7d:3a:19:a1:ad:f6:ec:29:62:4a:
                    db:1d:d1:28:f5:70:1a:dc:48:88:5c:b7:00:71:f9:
                    24:b8:48:26:a7:e7:df:ab:31:e9:8b:4a:b7:2d:51:
                    63:b3:5e:fe:84:5c:c6:33:f7:21:53:1f:3c:f5:ee:
                    9a:03:a7:47:38:19:dc:18:ab:ca:84:bc:8f:85:65:
                    06:35:3d:7a:af:b0:d2:29:ac:1c:dc:6f:9f:c9:6b:
                    7c:50:eb:cc:51:e6:ff:67:b7:4b:85:64:79:d8:21:
                    7e:92:dd:59:e7:47:6f:bc:07:d8:b8:41:c1:b9:cf:
                    ea:68:9b:09:23:6c:83:c7:d8:3f:8b:90:f3:3f:3e:
                    e1:03:4b:46:d2:f2:a7:a3:5f:c2:63:64:b8:8f:cc:
                    cd:55:2a:fd:f9:06:2f:1a:a2:09:1d:38:bf:5e:2f:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:8A:73:F1:61:FA:1C:38:29:7A:0A:59:BD:57:71:B0:E6:89:97
            X509v3 Authority Key Identifier:
                keyid:EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/d15d02c09f7c752c8e5b5fd646741852121a211c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f9:a5:59:b8:06:33:f0:10:4a:30:44:44:bf:7f:a1:2e:48:
         45:6d:f4:b4:e6:61:2b:c7:28:5e:55:7a:c4:9a:bd:cf:84:d6:
         5a:b2:e7:e5:03:cb:7c:3e:ad:18:43:ec:0c:4d:f3:7c:4f:c2:
         af:03:93:6c:2e:3f:39:49:20:8a:d6:33:05:73:9a:4e:24:84:
         12:07:cb:27:cc:2b:f1:df:e9:cd:21:82:0e:1f:2e:cf:44:3a:
         4f:d8:a0:bf:7d:e0:34:4d:b5:8c:9a:51:e2:2c:87:d1:71:b8:
         86:3f:5a:62:d6:6a:03:c8:e5:83:21:49:a9:18:36:f2:3b:df:
         02:6f:6a:b4:a2:76:27:77:a8:13:df:e4:92:25:79:75:b2:5b:
         a4:5a:f1:d4:e0:02:8b:cb:25:ad:ea:bd:65:cb:5f:24:87:9a:
         b0:fd:83:86:fd:f2:fe:ab:3e:8b:71:16:d5:a9:ac:9a:bb:8c:
         3c:21:10:e1:55:2f:d4:eb:cc:4b:b4:5d:62:0b:72:42:d3:98:
         a3:bb:51:39:d8:89:2d:e2:e8:73:ad:ec:b2:42:95:1b:64:a2:
         c3:c6:99:2d:a3:18:1a:fe:60:47:dc:64:ab:c4:8f:2b:60:6c:
         54:f7:16:e4:22:13:e3:d9:f6:1f:cd:36:da:87:16:98:e7:2c:
         6f:ef:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org