Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/748529f3e26351430eb6beee3b0099880b4c248f.roa
File:                     748529f3e26351430eb6beee3b0099880b4c248f.roa (raw, json)
Hash identifier:          vogFFh1eCv6GSVfIg6J2MzVV8fguhhTIoDpxM81KU3o=
Subject key identifier:   A2:98:5D:88:82:D5:56:6B:F4:7E:76:DF:F9:85:21:16:03:F9:74:BF
Certificate issuer:       /CN=cec79d826aaec80dee0e36071922c85774502396
Certificate serial:       270695
Authority key identifier: E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/748529f3e26351430eb6beee3b0099880b4c248f.roa
Signing time:             Thu 08 Feb 2024 22:04:01 +0000
ROA not before:           Thu 08 Feb 2024 22:04:01 +0000
ROA not after:            Sun 08 Feb 2026 22:04:01 +0000
asID:                     266907
IP address blocks:        45.224.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2557589 (0x270695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec79d826aaec80dee0e36071922c85774502396
        Validity
            Not Before: Feb  8 22:04:01 2024 GMT
            Not After : Feb  8 22:04:01 2026 GMT
        Subject: CN=748529f3e26351430eb6beee3b0099880b4c248f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:ed:21:62:b7:fe:df:ac:5a:74:fb:de:fd:
                    42:72:25:22:3b:2c:49:33:03:35:2e:0c:08:49:2a:
                    04:11:2a:a2:46:f5:a7:69:7d:56:f4:0b:9f:cd:5a:
                    94:8e:e1:17:9a:9e:9f:86:64:00:ec:11:0e:45:8e:
                    b7:a7:35:81:8c:7d:67:d3:54:2b:83:d0:dc:73:a2:
                    72:f3:c3:cb:22:df:15:ac:b2:0a:e0:8c:6e:3a:04:
                    1e:10:fa:1e:da:f7:a5:72:6c:8c:2d:86:12:69:f0:
                    3a:bf:9f:48:83:f7:63:67:8f:85:12:c7:f5:39:de:
                    14:9c:51:4c:d4:6f:0d:3b:a7:51:01:ee:09:4d:4a:
                    01:ad:1e:45:2a:ee:18:f8:2d:4e:cd:51:63:4b:bf:
                    72:fd:20:0c:79:e9:f6:14:41:cc:e2:19:8c:20:be:
                    8c:51:94:94:f3:a4:eb:86:b0:8f:17:8b:d0:6c:5f:
                    01:77:47:73:45:ba:3f:22:33:47:dc:85:ae:1f:a5:
                    48:5c:50:c3:c9:12:49:d6:5d:04:3c:df:8e:20:d1:
                    a1:ab:ef:e2:2b:26:c6:0d:c6:51:55:9f:3b:58:61:
                    09:b2:0c:06:28:fa:6f:5c:4d:91:45:ca:2c:26:3b:
                    a2:d4:8c:b6:52:27:4f:53:29:94:58:28:3e:5b:c3:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:98:5D:88:82:D5:56:6B:F4:7E:76:DF:F9:85:21:16:03:F9:74:BF
            X509v3 Authority Key Identifier:
                keyid:E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/748529f3e26351430eb6beee3b0099880b4c248f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/cec79d826aaec80dee0e36071922c85774502396.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:c9:d9:2a:37:8e:3c:e8:03:86:75:e9:7a:3a:86:c2:d2:
         77:35:af:b3:9a:9b:1b:64:96:bb:72:e3:b8:da:61:2a:2f:d3:
         b1:07:39:aa:fc:d9:c3:3e:e2:d2:8c:35:6b:20:55:30:d6:9d:
         5c:99:a8:d4:15:1a:39:9b:93:b7:42:dd:1b:f6:57:bc:e9:14:
         a8:d8:da:f4:6b:a1:28:aa:60:62:72:37:48:22:7d:e0:05:a4:
         77:b9:5e:85:02:f0:22:03:77:4b:a3:38:46:14:51:4a:c8:1f:
         06:98:c2:25:ce:35:b3:f2:6c:bc:08:30:d4:46:a1:b7:1e:ca:
         84:38:e7:42:b3:b2:7b:81:59:f1:58:77:1a:65:c4:ba:93:fd:
         2c:f1:4b:66:96:8d:ee:36:46:65:99:3a:24:81:c8:4e:18:72:
         11:fe:e5:31:c8:07:3a:87:af:f2:0f:2a:93:d1:c3:48:8b:a5:
         28:9e:3f:70:09:59:9d:4c:8d:96:17:0e:0c:d5:64:a0:43:da:
         de:ff:e5:2f:f2:17:5c:44:00:fa:af:1b:a6:5b:6e:5b:ad:bf:
         63:2d:6f:36:b7:51:a4:67:25:9d:b9:e5:d7:cd:f7:71:d5:9b:
         41:92:c4:d4:e1:c5:16:0f:18:d9:88:0f:be:87:8f:e7:8e:a1:
         e2:b0:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org