Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/69b7cd9a0f167a00c2adc4bc856af762cf3339c8.roa
File:                     69b7cd9a0f167a00c2adc4bc856af762cf3339c8.roa (raw, json)
Hash identifier:          qTPKlfvahUanu+gVM/tS4x56X6zJO1pU+2p5YwVknA4=
Subject key identifier:   6B:63:05:E5:22:B4:F6:C5:1F:07:FA:0C:1F:56:6D:AE:D6:39:5B:FF
Certificate issuer:       /CN=cec79d826aaec80dee0e36071922c85774502396
Certificate serial:       27BB47
Authority key identifier: E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/69b7cd9a0f167a00c2adc4bc856af762cf3339c8.roa
Signing time:             Mon 04 Mar 2024 17:13:46 +0000
ROA not before:           Mon 04 Mar 2024 17:13:46 +0000
ROA not after:            Wed 04 Mar 2026 17:13:46 +0000
asID:                     28110
IP address blocks:        45.224.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603847 (0x27bb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec79d826aaec80dee0e36071922c85774502396
        Validity
            Not Before: Mar  4 17:13:46 2024 GMT
            Not After : Mar  4 17:13:46 2026 GMT
        Subject: CN=69b7cd9a0f167a00c2adc4bc856af762cf3339c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:a8:2a:d8:62:78:61:28:ac:1c:96:27:01:
                    63:fa:e1:18:53:3f:9f:ab:b0:62:0d:47:43:0b:81:
                    f3:c7:de:22:fb:a2:89:64:6d:ca:31:ce:a1:ef:97:
                    b0:b4:55:47:d3:5f:a2:b2:ff:4b:71:19:24:39:a8:
                    60:84:38:87:12:9b:71:a0:7e:2f:5c:61:c3:08:9e:
                    db:c0:c3:28:24:0a:17:b9:b5:39:4a:fe:e4:3e:06:
                    11:d5:5b:af:85:2d:9a:11:79:cb:14:f3:1c:72:81:
                    4d:75:a0:4c:33:eb:53:99:50:13:e4:a3:02:7e:84:
                    7f:20:ef:6f:4b:be:a6:86:b9:d7:e0:eb:49:25:00:
                    dc:d7:b4:d0:a9:4d:27:32:96:51:de:67:85:0d:0f:
                    01:ef:ac:a9:cd:28:ab:f3:cf:e8:a4:8f:2d:75:84:
                    d5:aa:c4:c8:9e:1f:14:77:27:24:b0:6f:53:f6:49:
                    a0:d1:3d:bf:30:d0:7d:0b:73:b1:40:60:60:75:10:
                    42:67:34:0a:84:58:7c:a7:c3:ac:e4:f3:80:d0:9e:
                    15:08:7a:f3:6f:4d:e2:79:97:46:70:12:29:e6:73:
                    f0:2d:23:05:a9:a7:f1:d2:27:39:6a:83:d5:42:67:
                    1f:ff:49:3f:1d:fb:3f:42:c2:db:0d:74:f0:cd:e7:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:05:E5:22:B4:F6:C5:1F:07:FA:0C:1F:56:6D:AE:D6:39:5B:FF
            X509v3 Authority Key Identifier:
                keyid:E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/69b7cd9a0f167a00c2adc4bc856af762cf3339c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/cec79d826aaec80dee0e36071922c85774502396.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:c1:db:c1:77:f1:f1:c9:48:a5:8f:1f:a8:3a:a7:2d:a1:
         5f:51:77:45:1c:c5:c7:67:42:e0:7c:6a:57:13:d8:02:8f:96:
         46:8f:09:bd:4b:74:5f:6f:2c:44:42:47:10:4c:01:5f:98:92:
         f4:47:82:65:3a:5b:04:d1:4a:a9:7b:15:4c:a7:57:b1:87:5a:
         f4:55:24:42:ef:ae:cb:24:6b:d0:f2:8d:2e:f5:3a:49:4c:0b:
         83:4e:a9:75:fc:9b:bc:3a:10:a2:e8:a7:05:3e:2d:63:6c:0b:
         5a:55:5a:47:41:7b:20:9f:7c:1c:bb:01:af:8d:75:ac:81:9e:
         f9:90:3b:90:33:e4:82:aa:38:37:b5:2e:fb:8c:99:de:c9:af:
         70:c2:1a:37:b0:57:b8:70:b6:0a:cb:53:f4:5a:de:ff:c7:75:
         20:47:24:41:48:4a:64:2e:11:c5:2d:79:c9:1e:09:57:6c:a3:
         2e:2d:e8:76:bf:e6:a7:a6:5c:df:7b:16:c8:d7:cf:d9:7a:3e:
         10:48:92:a4:d8:7c:cf:9a:f8:cf:c5:f7:98:ae:6d:4e:9f:71:
         a5:19:74:74:87:e5:18:f6:41:1d:13:5d:b1:3b:9e:14:fb:3f:
         c8:7c:36:65:e1:16:c3:3a:78:9d:c6:31:10:fc:1b:38:be:f8:
         22:ae:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org