Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/a59e99a6b8ce920a29b2529d5f2c240018e30682.roa
File:                     a59e99a6b8ce920a29b2529d5f2c240018e30682.roa (raw, json)
Hash identifier:          9WxxYY5OkcpLLY3Sl+UaiLPeiKKMARjzyrK8aVq9zw4=
Subject key identifier:   BB:B7:5E:A0:98:14:8C:B6:5A:95:34:24:45:56:FA:9C:73:EF:07:70
Certificate issuer:       /CN=9dcf18a346927814b6691b49d822d55f0dc1093b
Certificate serial:       13B4E1
Authority key identifier: CE:2C:E9:B9:A2:FC:3A:4A:A0:C4:13:39:3B:72:F8:12:DF:25:03:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dcf18a346927814b6691b49d822d55f0dc1093b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/a59e99a6b8ce920a29b2529d5f2c240018e30682.roa
Signing time:             Sun 23 Jan 2022 20:03:18 +0000
ROA not before:           Sun 23 Jan 2022 03:00:00 +0000
ROA not after:            Tue 23 Jan 2024 03:00:00 +0000
asID:                     270094
IP address blocks:        45.237.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291489 (0x13b4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dcf18a346927814b6691b49d822d55f0dc1093b
        Validity
            Not Before: Jan 23 03:00:00 2022 GMT
            Not After : Jan 23 03:00:00 2024 GMT
        Subject: CN=a59e99a6b8ce920a29b2529d5f2c240018e30682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:e3:43:02:ec:fe:00:86:1b:a7:6d:1b:1e:
                    8b:f7:17:de:63:00:ca:04:db:6c:bf:b9:4d:96:6a:
                    a9:c1:4a:48:24:b9:72:3b:e7:ca:61:0e:d8:f0:8c:
                    95:31:50:6e:6e:68:7d:b3:e4:0b:22:69:c0:7e:d4:
                    86:65:ba:86:f2:b9:01:65:4f:aa:50:3f:2e:7c:36:
                    a3:00:04:55:40:fb:f6:54:d1:ce:58:f3:59:24:11:
                    de:f6:5b:63:ad:5e:df:6a:1d:01:9b:86:f0:c9:b2:
                    0e:55:d4:e0:1b:36:b4:78:50:32:ab:96:c7:65:e9:
                    04:95:3c:7b:ab:3a:99:4c:ee:54:e5:cf:85:f2:86:
                    f8:12:13:eb:ba:fa:e6:33:99:c9:53:27:dc:6a:bc:
                    3b:35:ec:ab:f8:5a:81:17:e0:cc:68:66:3e:e9:87:
                    af:99:ae:f0:e9:94:4a:95:98:1c:36:12:ee:ca:fe:
                    a1:84:b1:19:14:8d:30:8d:07:57:d0:97:68:9e:05:
                    d9:f1:1e:56:54:6a:3f:42:3e:39:35:89:1f:fb:42:
                    ec:0b:90:01:da:48:7d:e8:68:d0:1b:55:5a:76:76:
                    63:b3:f3:e4:66:da:e0:6f:ee:39:59:97:76:e1:e7:
                    c9:7b:70:10:4b:24:68:f0:62:c0:e6:47:b3:20:54:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:5E:A0:98:14:8C:B6:5A:95:34:24:45:56:FA:9C:73:EF:07:70
            X509v3 Authority Key Identifier:
                keyid:CE:2C:E9:B9:A2:FC:3A:4A:A0:C4:13:39:3B:72:F8:12:DF:25:03:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dcf18a346927814b6691b49d822d55f0dc1093b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/a59e99a6b8ce920a29b2529d5f2c240018e30682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/9dcf18a346927814b6691b49d822d55f0dc1093b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:0e:ed:45:ac:e7:14:46:80:fa:7a:e9:ca:b3:de:a3:9d:
         35:99:7f:68:c8:50:ef:2a:5e:32:47:33:2d:3a:a3:d9:df:84:
         93:62:bd:73:2f:29:38:16:d9:3f:d8:33:ac:ac:d4:6a:af:b6:
         46:ac:1b:e0:f9:45:ac:02:9b:35:4f:a7:9b:a3:d4:7b:10:1f:
         76:2e:23:ac:66:cb:ff:ff:d5:96:5c:00:80:66:08:04:53:7c:
         75:46:4e:5d:d2:fc:35:8b:7b:cc:ce:62:aa:3a:10:15:63:d0:
         7b:16:e0:90:1d:c7:ef:95:76:da:7a:df:3c:ec:6c:10:a1:ea:
         63:ac:85:f5:65:93:e5:3a:b6:81:7a:e0:2d:0e:6a:3f:c2:4a:
         6e:02:97:25:1c:6b:ae:42:a6:d5:69:f6:93:97:c6:33:4b:22:
         df:98:7c:1b:af:b6:cd:79:ce:24:04:00:13:15:9d:5c:05:ab:
         d9:ba:6e:a2:36:4e:e0:8e:09:4f:7a:fb:09:d7:85:90:da:18:
         e6:49:c7:e8:49:83:44:e0:0f:50:dd:45:0a:b2:43:64:a1:a9:
         f1:a3:6a:5a:13:1a:81:23:e4:d5:42:c1:b2:06:36:05:42:26:
         36:4d:5b:0b:70:a1:86:ee:b9:8d:e7:0f:98:22:6e:ed:77:4e:
         f1:a5:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org