Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/ef9d678538cab83c88f78f6dcc32ba1ea507e797.roa
File:                     ef9d678538cab83c88f78f6dcc32ba1ea507e797.roa (raw, json)
Hash identifier:          VIfKdhgGZcNLCE0/8t6Gi+CfmDmnJAXEGbWonMutJ7M=
Subject key identifier:   80:E9:92:9B:A5:9E:A5:7F:F3:99:3A:D7:1A:FC:B0:17:BF:63:DA:FA
Certificate issuer:       /CN=9a70223a7072e26ee6c67536cef9197634c52008
Certificate serial:       1DA4AE
Authority key identifier: 41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/ef9d678538cab83c88f78f6dcc32ba1ea507e797.roa
Signing time:             Sat 25 Feb 2023 12:40:30 +0000
ROA not before:           Wed 22 Feb 2023 12:39:03 +0000
ROA not after:            Tue 25 Feb 2025 12:39:03 +0000
asID:                     265662
IP address blocks:        45.4.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942702 (0x1da4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a70223a7072e26ee6c67536cef9197634c52008
        Validity
            Not Before: Feb 22 12:39:03 2023 GMT
            Not After : Feb 25 12:39:03 2025 GMT
        Subject: CN=ef9d678538cab83c88f78f6dcc32ba1ea507e797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:25:d7:60:37:7e:a4:64:06:15:87:b8:33:
                    01:66:54:a5:8a:9f:96:56:1d:ca:ae:b0:11:68:f5:
                    22:68:39:57:5b:c6:8e:5a:6c:33:b9:b9:ed:7b:99:
                    89:87:ff:55:72:1c:78:6e:9f:a4:97:be:7b:0f:b6:
                    99:88:59:fa:cd:91:7a:9d:ef:d8:6c:34:ef:1b:b9:
                    2c:63:cd:5a:8e:69:01:16:b1:78:ff:11:de:3b:7d:
                    e8:f9:dd:e0:20:42:72:23:e8:43:a8:c2:28:39:98:
                    dd:a3:a5:f5:62:e0:b2:db:41:73:b0:ec:5c:31:6c:
                    d4:84:3f:3c:06:4a:5f:fc:f5:55:b3:dc:40:7c:64:
                    8d:7f:e4:8c:96:24:e8:a9:1f:38:3e:7a:af:f3:3d:
                    9c:76:ae:7f:66:7a:e2:9d:26:4d:14:94:d3:33:87:
                    84:dc:39:ed:a9:96:6e:25:cf:5b:1b:cc:59:20:c8:
                    2c:7a:f0:ce:f0:32:34:a0:21:10:61:5d:bf:05:0d:
                    c6:db:8b:ab:14:ac:7e:93:60:ba:06:6c:44:3d:69:
                    ca:77:92:0a:d4:2e:6c:9e:60:ff:ed:94:26:00:24:
                    b7:c8:d7:ab:c3:03:45:cd:88:fa:ca:03:7d:94:66:
                    00:b5:06:3a:84:05:05:d4:20:29:0f:78:7d:db:6a:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:92:9B:A5:9E:A5:7F:F3:99:3A:D7:1A:FC:B0:17:BF:63:DA:FA
            X509v3 Authority Key Identifier:
                keyid:41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/ef9d678538cab83c88f78f6dcc32ba1ea507e797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/9a70223a7072e26ee6c67536cef9197634c52008.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:7b:57:38:e3:99:72:8f:d0:35:cb:73:f9:94:c9:c7:02:
         f7:6e:5f:dd:28:8c:d6:54:c5:35:ac:fb:ce:0e:fd:93:5f:7f:
         64:f0:1e:e6:94:2a:fa:c7:72:b3:17:59:8b:40:07:8a:aa:2c:
         83:72:af:cb:b0:8e:33:c9:82:ed:79:21:3c:09:24:c8:ca:03:
         e6:9d:7c:b4:81:c4:47:2f:f3:1e:a9:36:d1:a4:e5:97:18:60:
         e9:09:0f:43:79:4a:4c:b8:ad:fd:a6:ff:8e:b5:26:3f:ab:75:
         a2:9f:65:fb:62:01:9f:dd:43:fe:7b:94:a4:74:ff:b6:6a:dc:
         f2:15:e1:05:7f:63:11:81:cc:5b:b4:8a:7c:20:0c:92:26:6a:
         b6:7b:31:ea:fe:af:b0:58:56:d7:b6:42:5a:34:b9:b5:3e:76:
         c0:79:fb:9b:6e:39:82:42:6b:42:5d:e3:8b:aa:90:ac:a4:14:
         1d:9e:2c:49:bd:c2:79:f5:6e:96:0a:a2:e7:bb:56:53:07:e0:
         c6:7a:97:32:c4:f5:c2:69:07:d9:29:5c:04:19:83:7c:eb:a9:
         ce:78:86:da:b0:1e:91:3f:ca:13:16:bc:c0:63:53:9e:a4:05:
         ec:f0:de:6c:a6:2d:7a:cb:6f:fa:f1:7f:23:3c:ba:5a:59:e2:
         4e:dc:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org