Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/578ddaa16431f3b892b27c6942e9951456dfa18c.roa
File:                     578ddaa16431f3b892b27c6942e9951456dfa18c.roa (raw, json)
Hash identifier:          7ZwS7L29uag0kywHFrZl9+BO/T+m5VPe2O2wzITy6G0=
Subject key identifier:   26:AF:5E:44:D1:9D:B2:E0:99:90:EA:CC:5E:F2:89:FF:6C:AB:E2:22
Certificate issuer:       /CN=544df6d5af1f71677e39aae8f55f411e4f419ee4
Certificate serial:       075527
Authority key identifier: 27:F8:66:7E:85:1E:66:25:99:B7:E9:81:52:77:87:9F:EA:79:94:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/544df6d5af1f71677e39aae8f55f411e4f419ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/578ddaa16431f3b892b27c6942e9951456dfa18c.roa
Signing time:             Wed 24 Mar 2021 14:47:19 +0000
ROA not before:           Wed 24 Mar 2021 14:47:19 +0000
ROA not after:            Tue 24 Mar 2026 14:47:19 +0000
asID:                     269946
IP address blocks:        45.189.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480551 (0x75527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544df6d5af1f71677e39aae8f55f411e4f419ee4
        Validity
            Not Before: Mar 24 14:47:19 2021 GMT
            Not After : Mar 24 14:47:19 2026 GMT
        Subject: CN=578ddaa16431f3b892b27c6942e9951456dfa18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:bf:52:60:0f:d6:02:e5:10:07:a3:e0:8b:
                    2e:00:c3:d4:f9:8b:71:82:cf:65:9b:17:2a:32:25:
                    94:0b:2c:98:67:dc:f4:5b:67:71:6d:07:46:6c:ab:
                    fd:4c:04:ba:28:3e:e7:55:f2:71:32:7e:fa:cf:49:
                    78:7a:8b:e5:25:36:2d:55:a5:c1:61:fa:d0:dc:47:
                    fe:ec:95:b8:86:2d:fa:f5:3f:b0:45:55:0c:2f:43:
                    92:5b:34:13:97:48:1c:11:5b:16:90:84:db:22:fe:
                    cc:3c:84:b5:5c:36:63:97:b0:d6:20:e3:8f:9d:57:
                    b0:07:f0:c2:f6:dc:70:fe:5e:84:f1:c0:66:83:fd:
                    6a:b9:b3:27:4b:b6:4e:87:be:6c:a6:f7:6a:57:1b:
                    a0:44:b8:67:ff:59:26:05:70:a1:8e:38:a7:e9:f6:
                    f5:e3:37:ce:c2:6c:d8:4f:9b:5c:12:d2:30:dc:7a:
                    da:aa:ed:61:ac:95:d4:c4:22:ff:77:46:81:82:a1:
                    d8:3f:79:19:3e:ca:de:dd:22:90:9a:52:50:6a:49:
                    3b:cd:8f:d1:e0:6a:f8:ff:91:ac:de:a6:00:4b:c5:
                    ba:b0:7e:0d:81:1e:0f:2e:5c:0e:d2:4e:e2:62:c2:
                    0e:fa:18:fd:06:e4:61:26:11:9d:80:6d:83:0e:7f:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:5E:44:D1:9D:B2:E0:99:90:EA:CC:5E:F2:89:FF:6C:AB:E2:22
            X509v3 Authority Key Identifier:
                keyid:27:F8:66:7E:85:1E:66:25:99:B7:E9:81:52:77:87:9F:EA:79:94:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/544df6d5af1f71677e39aae8f55f411e4f419ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/578ddaa16431f3b892b27c6942e9951456dfa18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/544df6d5af1f71677e39aae8f55f411e4f419ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:74:cc:4a:90:48:e3:93:5e:f5:42:2e:96:f9:91:43:b0:87:
         7a:12:aa:b6:45:19:b2:f4:33:46:43:98:80:86:e5:5a:63:a5:
         70:03:97:44:b5:da:99:3d:f5:85:ea:9a:68:ac:6b:cc:96:fd:
         f1:0e:b8:49:12:13:12:a6:3c:63:04:11:24:c6:c6:4c:a3:96:
         01:ca:d2:4a:f5:3c:60:b5:ef:82:bc:aa:fb:0b:17:74:c8:54:
         d4:8e:94:ab:7b:a1:87:8f:5b:60:c5:0f:68:50:b2:68:38:c4:
         ab:1e:fb:cd:bc:76:04:04:86:d5:f2:39:87:e4:1b:41:21:be:
         da:01:60:75:26:4d:c8:77:17:7d:6e:9e:f3:6e:94:96:a6:18:
         07:90:d1:48:b5:6e:fd:dc:d3:25:24:db:75:ad:4e:47:87:e1:
         6e:a4:5a:e4:40:c8:84:dd:23:8f:20:b9:ea:48:84:d3:97:08:
         2d:46:36:9b:5e:83:f9:33:8f:2a:db:c6:67:a2:ea:29:b9:d8:
         fd:25:ba:09:d0:21:1b:3b:8d:0f:ce:b0:0a:1b:7d:4c:e6:b1:
         d9:cd:21:88:ac:13:65:d8:0e:eb:83:ca:51:04:31:23:46:95:
         60:c1:61:e8:a1:b4:99:f7:fb:99:f7:b0:18:ee:27:50:da:26:
         1f:67:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:47:19 2023 by rpki-client on console-ams.rpki-client.org