Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/84c1c25e4c83bd26e7cb695bb0c06b775c9f608f.roa
File:                     84c1c25e4c83bd26e7cb695bb0c06b775c9f608f.roa (raw, json)
Hash identifier:          9YWrrTLX+TDYulQJgAh9LPsPdR7FjX4Hu4BmtQ70bvk=
Subject key identifier:   17:9F:A1:B6:D5:C4:75:6A:D0:18:ED:12:50:40:DC:4D:52:CC:3E:78
Certificate issuer:       /CN=cec79d826aaec80dee0e36071922c85774502396
Certificate serial:       27C1F1
Authority key identifier: E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/84c1c25e4c83bd26e7cb695bb0c06b775c9f608f.roa
Signing time:             Mon 04 Mar 2024 17:15:22 +0000
ROA not before:           Mon 04 Mar 2024 17:15:22 +0000
ROA not after:            Wed 04 Mar 2026 17:15:22 +0000
asID:                     264686
IP address blocks:        45.224.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605553 (0x27c1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec79d826aaec80dee0e36071922c85774502396
        Validity
            Not Before: Mar  4 17:15:22 2024 GMT
            Not After : Mar  4 17:15:22 2026 GMT
        Subject: CN=84c1c25e4c83bd26e7cb695bb0c06b775c9f608f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:57:22:86:aa:ed:63:94:ea:b3:54:f6:21:
                    7f:74:c0:bd:fb:31:ab:b8:29:3b:29:24:1c:f3:fc:
                    80:22:45:44:2c:aa:e6:9e:8e:64:07:ee:dd:4e:a2:
                    e6:3e:91:5f:1c:e2:2b:ce:04:ce:48:80:3b:8d:59:
                    cc:5d:e8:d6:e5:62:12:a0:b6:58:26:c8:e1:d0:6a:
                    2c:77:17:9a:1b:34:a8:81:d1:ea:91:c4:31:30:d4:
                    10:99:83:36:8b:20:d3:fe:c4:26:ea:e4:25:c4:8c:
                    1e:79:68:2b:f0:cc:f2:ec:79:d8:8d:60:96:d4:a8:
                    03:9d:9a:fa:f6:ed:51:a6:b9:0a:64:af:c2:e9:73:
                    70:13:e3:37:ef:a3:45:b9:6c:17:3c:29:6c:67:78:
                    55:ab:a4:f4:bb:94:04:f3:b7:f0:10:85:1c:85:e8:
                    49:b3:cc:db:92:76:37:ba:a3:73:84:1f:e9:01:39:
                    3c:42:fd:1e:23:d0:3e:d7:84:c0:80:32:de:bf:43:
                    28:94:84:69:9e:8b:45:2a:f8:11:d2:3b:22:c5:93:
                    28:0c:ba:df:6e:65:9c:c2:4d:81:8e:2d:b4:0e:7d:
                    00:9b:14:cb:a9:0f:db:eb:7d:af:8e:08:ad:de:6a:
                    bc:5b:5d:3e:6d:7f:76:4b:e4:14:57:59:2f:52:d3:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:A1:B6:D5:C4:75:6A:D0:18:ED:12:50:40:DC:4D:52:CC:3E:78
            X509v3 Authority Key Identifier:
                keyid:E3:47:3D:02:46:72:B4:CD:81:49:CD:70:45:B7:71:50:CA:00:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec79d826aaec80dee0e36071922c85774502396.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/84c1c25e4c83bd26e7cb695bb0c06b775c9f608f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64ba1d92-f1e0-4fdf-b48e-f1007a77157f/cec79d826aaec80dee0e36071922c85774502396.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:69:31:b4:14:41:02:a3:04:1a:64:62:8b:67:3e:3e:8f:
         9d:e3:d2:34:83:f1:d1:09:fa:ef:18:63:3f:e7:87:ea:47:7f:
         fe:2f:57:cc:0e:1f:a4:f1:17:0f:af:54:c4:5f:dd:42:46:71:
         f1:3f:f2:60:f3:78:a3:6c:48:bc:a0:fb:e9:19:d7:d5:a9:47:
         81:12:45:3d:3a:cc:a7:11:11:bc:e6:47:8c:ba:da:1d:db:08:
         4c:0e:f6:bd:b3:2e:0a:7f:71:68:cb:85:78:a7:22:f5:06:7b:
         99:41:f8:43:48:8a:8e:a9:c6:db:e6:87:58:7b:ff:3a:59:63:
         9a:18:ad:07:2b:e9:a7:d2:55:bc:1e:96:bb:51:ce:63:04:f8:
         db:02:2f:3b:d8:7c:25:0a:7b:b3:45:25:cb:b2:1b:4d:41:0e:
         6f:cc:8a:32:91:17:df:2c:62:a6:bf:4c:1a:6b:53:d6:fb:da:
         d1:f3:41:37:2b:f2:b4:f9:25:d2:bc:dd:0c:fa:3e:14:7a:48:
         84:42:01:c7:fb:bf:43:89:45:a4:41:a0:f5:46:2e:28:36:31:
         45:8a:f2:29:e1:02:06:b8:22:e0:67:d3:15:2f:d5:c6:ac:44:
         8b:0b:ed:00:33:41:b8:6a:3d:7d:94:3a:82:1a:a2:92:6c:1c:
         35:63:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org