Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/4dc5fd2fea0368eb7e1b1c5bb5d787c49affb9da.roa
File:                     4dc5fd2fea0368eb7e1b1c5bb5d787c49affb9da.roa (raw, json)
Hash identifier:          yMXk7R8vq304LLRI/byw/A/qFpMs9zT30bkhjbI6eas=
Subject key identifier:   D7:57:09:21:AB:1B:1B:FE:B0:E4:0F:AD:66:47:2E:3B:A8:81:A6:6C
Certificate issuer:       /CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
Certificate serial:       1FAA7B
Authority key identifier: 55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/4dc5fd2fea0368eb7e1b1c5bb5d787c49affb9da.roa
Signing time:             Sun 14 May 2023 00:33:51 +0000
ROA not before:           Sat 13 May 2023 00:33:51 +0000
ROA not after:            Wed 14 May 2025 00:33:51 +0000
asID:                     267881
IP address blocks:        45.177.124.0/22 maxlen: 22
                          45.177.124.0/24 maxlen: 24
                          45.177.125.0/24 maxlen: 24
                          45.177.126.0/24 maxlen: 24
                          45.177.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075259 (0x1faa7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
        Validity
            Not Before: May 13 00:33:51 2023 GMT
            Not After : May 14 00:33:51 2025 GMT
        Subject: CN=4dc5fd2fea0368eb7e1b1c5bb5d787c49affb9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:22:cc:01:b1:27:f7:83:02:20:fd:1d:33:ee:
                    60:a5:c9:d2:2a:b3:1b:4b:81:0c:be:44:08:0f:db:
                    86:39:80:01:d3:16:8e:ec:f8:c1:a8:0f:7a:7f:bd:
                    09:75:b5:48:87:8f:8f:71:fe:a0:ee:bc:70:b0:54:
                    fe:da:65:bd:51:71:92:77:6f:9d:0c:81:a7:ee:c7:
                    25:74:f5:1c:a3:b3:8c:8e:3e:23:ab:f6:8b:38:44:
                    3e:89:39:95:80:a5:2c:80:aa:c3:b6:d4:f2:f5:5f:
                    58:43:58:4e:3f:30:8e:7b:02:4a:00:7b:c1:3a:53:
                    ef:0b:91:59:6c:06:20:5c:4d:e8:53:8a:4f:af:79:
                    18:2f:dd:d5:fc:26:29:a4:be:a1:07:4b:69:f3:ed:
                    75:8b:31:63:17:9e:ec:97:ab:c7:ce:53:f6:23:88:
                    fd:33:e1:4e:6f:a0:79:b3:f4:74:52:5c:a2:7e:10:
                    4d:ee:17:22:a4:5c:f1:bc:25:05:60:4c:13:e6:f6:
                    c8:c9:fc:f0:7d:a0:a9:79:3c:c0:1a:6e:ad:0e:4a:
                    e4:6d:2b:de:86:4f:d8:e4:6b:bc:52:9a:06:47:d1:
                    25:57:ce:4c:d2:3f:32:a8:f7:69:47:47:22:94:66:
                    47:62:16:4b:76:b7:d3:4d:a0:e5:72:66:d5:ab:3d:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:57:09:21:AB:1B:1B:FE:B0:E4:0F:AD:66:47:2E:3B:A8:81:A6:6C
            X509v3 Authority Key Identifier:
                keyid:55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/4dc5fd2fea0368eb7e1b1c5bb5d787c49affb9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:dc:9e:07:18:40:69:ee:b0:06:64:eb:12:04:8d:09:12:61:
         fa:9f:d5:47:5d:19:39:09:73:46:51:3f:74:68:ea:02:fe:c2:
         98:7e:d7:f2:b2:9f:16:9b:91:06:4e:ba:e8:08:e6:f0:28:3f:
         0b:bf:bd:4a:02:85:c9:d7:44:d4:b4:2f:86:1d:97:92:2b:40:
         02:75:99:7e:13:52:4d:09:57:3c:b7:55:28:75:9a:91:50:d8:
         8f:ef:73:bd:c3:88:6d:7d:c4:5f:51:f8:33:59:e5:42:df:c0:
         f4:2d:ec:6f:08:65:c4:3e:9b:ee:18:f0:4c:dc:51:a6:ec:e0:
         06:86:59:0e:8e:9d:a4:f6:cf:c6:d4:e1:91:c2:b3:80:ac:4b:
         5b:1f:06:82:63:7b:02:0d:f3:6e:6a:4b:e5:f3:72:89:70:40:
         63:e6:c3:6d:23:cd:61:8c:63:46:14:42:6d:7e:14:f1:ab:1c:
         98:34:4b:8a:bb:79:c9:f2:d1:1f:3f:78:7f:6e:be:72:dd:21:
         f2:01:90:f6:e8:e5:f9:09:ae:c4:bd:29:ea:37:5e:9f:68:e8:
         1a:c0:3f:16:73:d4:dd:cf:a3:72:6f:0a:79:ab:4a:cd:ed:b0:
         c5:a0:a6:df:2e:fc:19:5b:02:94:14:63:b3:0c:7c:2c:d2:9f:
         a9:b7:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org