Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/34352e3232372e34382e302f32322d3234203d3e20323634383338.roa
File:                     34352e3232372e34382e302f32322d3234203d3e20323634383338.roa (raw, json)
Hash identifier:          eqfeYeFKHyiQiHbm/Tx45DlHA+MVaG39SeM3Xde6GaA=
Subject key identifier:   1F:2B:8A:D4:09:EB:16:B2:5F:91:0F:1B:C4:FA:A4:20:5D:FD:FE:B6
Certificate issuer:       /CN=B243FA1E3B6F9E73B680DC1ADBB375AE28A45254
Certificate serial:       4322F63748E61751C7108CA042ED0B59C4B8141A
Authority key identifier: B2:43:FA:1E:3B:6F:9E:73:B6:80:DC:1A:DB:B3:75:AE:28:A4:52:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B243FA1E3B6F9E73B680DC1ADBB375AE28A45254.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/34352e3232372e34382e302f32322d3234203d3e20323634383338.roa
Signing time:             Mon 16 Sep 2024 22:00:00 +0000
ROA not before:           Mon 16 Sep 2024 21:55:00 +0000
ROA not after:            Mon 15 Sep 2025 22:00:00 +0000
asID:                     264838
IP address blocks:        45.227.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:22:f6:37:48:e6:17:51:c7:10:8c:a0:42:ed:0b:59:c4:b8:14:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B243FA1E3B6F9E73B680DC1ADBB375AE28A45254
        Validity
            Not Before: Sep 16 21:55:00 2024 GMT
            Not After : Sep 15 22:00:00 2025 GMT
        Subject: CN=1F2B8AD409EB16B25F910F1BC4FAA4205DFDFEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:03:d7:fa:12:23:df:8b:eb:8c:b4:7b:48:
                    04:4e:42:48:ba:2d:6f:9b:31:fa:2a:9b:30:4e:c7:
                    89:1d:ab:85:07:1f:a1:9a:e3:91:ec:9f:9f:1a:b3:
                    2f:c1:bd:af:26:53:1d:74:9f:cd:39:7b:46:1c:23:
                    f9:f3:de:12:4a:e0:21:04:a1:2a:ea:03:bb:47:7a:
                    03:d8:98:d4:f4:61:3d:cf:2e:8c:b9:4a:51:b2:78:
                    21:42:37:ce:e6:31:e9:11:f6:82:cf:b1:d1:f3:ef:
                    cb:03:e6:1a:4b:d1:a7:89:06:67:79:2b:9d:65:2a:
                    46:95:c0:09:d3:c0:16:0d:a5:b2:f0:d2:a9:fa:68:
                    83:50:ff:0c:41:0d:78:59:40:dc:c5:21:18:2f:94:
                    6e:fc:ff:fc:67:f6:97:1f:44:63:c3:c5:cd:ed:e7:
                    6b:b1:05:1f:b4:58:ea:99:29:b4:a9:2f:d7:4c:70:
                    71:60:9a:b1:ba:41:1e:18:18:fb:62:23:74:3a:79:
                    97:31:cc:51:9f:4e:dd:99:bc:4e:fa:6f:90:e9:eb:
                    bc:64:8b:ca:81:5e:ef:47:73:1f:ee:99:2a:5e:54:
                    b3:f9:20:b9:17:ee:bb:c7:73:83:e1:f2:d6:7f:25:
                    4e:9c:6c:00:75:db:a3:04:5d:05:cc:54:3f:0a:cc:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:8A:D4:09:EB:16:B2:5F:91:0F:1B:C4:FA:A4:20:5D:FD:FE:B6
            X509v3 Authority Key Identifier:
                keyid:B2:43:FA:1E:3B:6F:9E:73:B6:80:DC:1A:DB:B3:75:AE:28:A4:52:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/B243FA1E3B6F9E73B680DC1ADBB375AE28A45254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B243FA1E3B6F9E73B680DC1ADBB375AE28A45254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/34352e3232372e34382e302f32322d3234203d3e20323634383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:d1:23:54:5e:2b:5a:aa:e5:e4:e3:4b:74:d3:bb:2c:f0:
         f4:77:09:21:32:e9:d1:9c:1c:09:66:7e:eb:10:fc:e6:af:9b:
         6f:68:81:12:27:eb:43:60:df:5f:08:1e:d0:83:5d:cd:31:f9:
         92:a1:98:df:ad:53:f0:bb:af:86:4e:8f:5d:6c:74:04:8d:66:
         b7:22:c1:99:16:c0:8e:f5:66:64:21:18:bb:33:ab:f7:37:57:
         88:21:c1:3c:a2:84:ba:08:37:ae:76:1a:fa:ad:fa:bf:93:a6:
         12:d8:6e:a0:c7:05:0e:09:f4:dc:52:04:77:92:37:85:23:da:
         69:ba:ba:ff:b2:29:88:72:39:d4:25:a4:9e:1d:78:dc:df:18:
         d4:a3:fe:60:ff:df:34:bf:0a:ab:fe:ff:5d:5e:ab:f6:59:70:
         27:fd:0f:0a:ee:92:7e:bc:a1:6f:4b:f5:7d:b8:1b:50:57:f0:
         91:8a:8d:ed:25:3b:14:ac:13:be:72:32:db:82:cb:48:aa:9d:
         2e:d3:07:55:0b:b4:9f:4a:09:36:26:64:99:78:76:e8:12:eb:
         96:29:df:14:db:98:70:ac:ec:68:9f:5e:2d:c9:2f:a2:3a:ad:
         c1:03:f1:99:f4:49:9e:48:b9:2c:98:df:f7:11:b1:64:e3:de:
         7e:11:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 18:26:50 2024 by rpki-client on console-ams.rpki-client.org