Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/258e56005fcbda22717981e5d691b17e69a48978.roa
File:                     258e56005fcbda22717981e5d691b17e69a48978.roa (raw, json)
Hash identifier:          rZy1p+vMyonuRFX9fA89QInHUZa2yhg7GGSln1irMOI=
Subject key identifier:   E1:E2:3F:4B:23:24:FC:99:6A:8C:63:65:C7:3C:65:16:70:5F:17:C0
Certificate issuer:       /CN=f26964717aee328aa075133d358d96bd312b9bed
Certificate serial:       2739D4
Authority key identifier: 69:D7:29:83:99:8B:1B:75:D8:B6:0B:7A:37:6D:43:F3:D3:FE:AF:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f26964717aee328aa075133d358d96bd312b9bed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/258e56005fcbda22717981e5d691b17e69a48978.roa
Signing time:             Thu 21 Mar 2024 18:42:26 +0000
ROA not before:           Thu 21 Mar 2024 18:42:26 +0000
ROA not after:            Sat 21 Mar 2026 18:42:26 +0000
asID:                     266696
IP address blocks:        45.228.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570708 (0x2739d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26964717aee328aa075133d358d96bd312b9bed
        Validity
            Not Before: Mar 21 18:42:26 2024 GMT
            Not After : Mar 21 18:42:26 2026 GMT
        Subject: CN=258e56005fcbda22717981e5d691b17e69a48978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:f6:c4:51:66:3f:97:1e:ca:79:9b:62:06:
                    2e:57:93:21:8a:f1:87:77:15:30:de:1a:e5:42:63:
                    ed:12:f4:18:95:03:a1:58:9c:e6:75:9d:42:67:22:
                    1c:a5:83:9e:8c:ea:ed:8b:49:88:58:63:5f:ed:03:
                    97:af:2a:bc:d4:0e:46:76:32:5c:31:74:7f:b7:84:
                    30:b7:af:27:4d:b9:60:1b:32:50:6e:39:b6:f4:81:
                    39:4f:ba:9d:2f:ca:8a:ec:84:e0:f4:cf:54:6a:cc:
                    1a:49:27:43:a3:ab:b3:d7:c4:f7:fd:f2:08:2d:d0:
                    34:43:60:b3:07:b9:58:69:3c:27:3b:46:2b:9a:4a:
                    31:a8:f0:94:8d:8f:2d:e8:d2:80:10:05:b8:85:94:
                    74:06:e7:ec:8b:55:92:12:2b:9b:ca:ee:9c:7c:75:
                    c9:9a:c0:96:75:db:63:80:df:57:ed:e9:5a:12:00:
                    6e:97:ef:74:e2:49:7e:f1:a0:cd:73:18:16:e1:d7:
                    45:50:ca:33:65:33:fa:21:ae:7e:b3:ba:39:d2:9a:
                    ff:5b:47:f5:1e:7d:ac:9e:f5:3c:ca:5f:57:ac:fd:
                    99:ad:f9:44:7c:b9:b1:94:6d:3c:4b:a6:9e:16:c4:
                    9d:90:b2:ed:99:8c:91:54:1f:b1:3b:51:33:3c:8e:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:3F:4B:23:24:FC:99:6A:8C:63:65:C7:3C:65:16:70:5F:17:C0
            X509v3 Authority Key Identifier:
                keyid:69:D7:29:83:99:8B:1B:75:D8:B6:0B:7A:37:6D:43:F3:D3:FE:AF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f26964717aee328aa075133d358d96bd312b9bed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/258e56005fcbda22717981e5d691b17e69a48978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/f26964717aee328aa075133d358d96bd312b9bed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:06:27:18:ca:de:0b:43:0e:5b:2c:94:b1:94:58:11:ce:e3:
         68:18:12:e1:77:71:87:c0:1d:8f:cf:92:e3:0c:8f:31:42:67:
         a8:7f:69:1e:dd:de:f8:d3:b0:bb:90:da:88:83:a1:47:e8:b0:
         50:77:c1:74:07:a0:54:c6:ff:26:57:3d:b8:11:03:b6:55:f1:
         39:ea:a7:fe:1c:47:d5:d3:54:56:cc:f8:f6:ac:3c:1a:f3:e5:
         62:d2:ea:d8:a3:a4:0a:4f:99:9e:51:38:7f:30:7f:25:92:2a:
         1c:05:cb:86:14:d6:e3:22:05:02:cf:67:0e:fc:61:ee:f6:47:
         b3:5b:00:7b:97:1d:7c:5b:2f:80:5f:bc:49:b6:64:43:75:36:
         90:72:d7:e4:ed:34:99:d9:5b:89:c1:53:11:49:9c:d1:8e:3f:
         e2:9b:cf:88:cf:8f:7a:1d:d1:80:5d:7b:c3:90:1d:32:bb:25:
         5c:02:a9:c7:71:1a:6d:a4:e5:54:43:2a:90:c8:51:82:f7:ae:
         29:b0:c4:8c:87:0b:9c:14:ff:b6:df:fd:36:29:d8:92:cc:da:
         55:2b:0a:b0:b0:7d:30:88:bc:88:6c:51:8c:c5:e7:50:57:1e:
         c2:6a:60:c2:f9:62:cb:7c:16:cf:86:57:b4:ee:69:82:45:36:
         48:f1:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org