Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/2ce74ff22963d99823fcfd000db70938914bbfb9.roa
File:                     2ce74ff22963d99823fcfd000db70938914bbfb9.roa (raw, json)
Hash identifier:          gIFvLTb+O7uwsI8zDwTbik6gYK+4hQMOhF8UWWNp0mc=
Subject key identifier:   C6:28:62:13:0D:70:A7:1D:95:8E:3E:ED:65:1C:7C:39:6C:B3:0C:0F
Certificate issuer:       /CN=003287505ad0145205e27f7baa2a3101a343097b
Certificate serial:       15CB88
Authority key identifier: D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/2ce74ff22963d99823fcfd000db70938914bbfb9.roa
Signing time:             Sat 06 Aug 2022 02:57:41 +0000
ROA not before:           Sat 06 Aug 2022 02:53:15 +0000
ROA not after:            Tue 06 Aug 2024 02:53:15 +0000
asID:                     270158
IP address blocks:        45.168.236.0/24 maxlen: 24
                          45.168.237.0/24 maxlen: 24
                          45.168.238.0/24 maxlen: 24
                          2806:319::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428360 (0x15cb88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003287505ad0145205e27f7baa2a3101a343097b
        Validity
            Not Before: Aug  6 02:53:15 2022 GMT
            Not After : Aug  6 02:53:15 2024 GMT
        Subject: CN=2ce74ff22963d99823fcfd000db70938914bbfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:e2:c3:74:fe:e5:fc:93:fe:7a:f7:c1:da:
                    57:ea:72:89:45:c0:de:5e:c9:b5:b7:54:f3:71:fd:
                    af:38:8d:27:80:70:e0:3b:56:e5:05:e6:e5:8e:8b:
                    54:58:44:7d:40:bd:55:aa:24:58:06:03:2b:98:7a:
                    3e:3c:13:c2:f1:95:55:7f:02:69:28:75:5b:91:d7:
                    b9:35:6d:bc:98:ec:2f:be:47:bc:7b:4e:c2:17:f9:
                    49:9c:74:ae:d5:70:aa:f7:1b:8f:1d:75:3d:88:39:
                    8a:94:75:93:1a:58:e6:2f:7d:2a:d5:e9:a5:9d:97:
                    7f:6d:c3:14:df:50:41:b0:5f:d2:12:9d:0d:76:9b:
                    5f:d8:2f:1f:77:1d:97:ea:99:fc:31:b2:6d:02:42:
                    e1:a3:54:68:e8:f9:7c:83:ac:ef:ab:cd:ba:98:88:
                    68:2c:1d:b8:b0:d5:96:23:d3:ff:e8:c6:78:cd:62:
                    29:7f:dd:bd:68:80:d3:26:03:c0:80:3e:28:ec:a1:
                    ef:9b:82:19:52:34:54:35:44:65:5f:a5:94:a1:c8:
                    79:2b:c2:38:5a:c7:78:09:4f:d3:66:f3:45:70:de:
                    cf:f3:17:78:fe:a5:3d:b8:33:ee:f6:4f:9e:df:9a:
                    c2:19:22:27:8a:ff:44:d3:4c:29:09:e2:8d:86:1c:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:62:13:0D:70:A7:1D:95:8E:3E:ED:65:1C:7C:39:6C:B3:0C:0F
            X509v3 Authority Key Identifier:
                keyid:D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/2ce74ff22963d99823fcfd000db70938914bbfb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/003287505ad0145205e27f7baa2a3101a343097b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.236.0-45.168.238.255
                IPv6:
                  2806:319::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:59:78:e9:e1:0f:23:d0:0b:4c:a7:23:c9:54:39:ed:4f:95:
         4b:7a:e7:a2:d9:42:cf:b6:79:42:2e:87:76:3d:a1:2e:20:e5:
         3c:4f:fe:be:23:35:77:0a:44:97:97:99:64:ae:3a:39:e2:88:
         89:bd:ec:1d:5f:a2:b0:39:b3:42:cc:ee:cb:0c:e0:f7:70:8b:
         a9:37:df:32:e6:5f:e4:31:bc:0a:1c:e7:32:4f:81:4b:50:fd:
         52:2b:8a:b0:9c:5b:40:bb:fb:18:f2:2a:f1:30:51:91:2c:30:
         5f:09:d5:ba:df:c6:58:58:7c:a3:2e:80:2e:fc:6f:9c:09:0d:
         a9:94:ee:30:0d:78:3a:4f:80:f7:c6:cd:4e:1d:28:15:41:ec:
         c5:8b:fb:f8:12:99:c9:28:41:05:5f:b3:cf:33:da:2b:4d:19:
         c9:0e:c8:f3:59:b8:8a:8b:92:61:4b:37:00:c0:2c:21:57:ba:
         05:d6:c5:b0:27:00:90:25:b4:66:ca:81:e5:23:95:a7:d2:67:
         c0:4a:25:97:b5:d0:21:82:7a:50:ab:e7:14:81:75:1c:1a:af:
         48:e2:68:38:36:22:fe:96:50:74:a7:fe:2a:cc:a9:cd:74:af:
         27:5f:87:38:3c:7c:cc:0a:c0:e7:b4:91:ef:93:f6:62:88:fb:
         f3:48:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org