Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/91520188ca3cb6c049894fdf028a8a58afc3722f.roa
File:                     91520188ca3cb6c049894fdf028a8a58afc3722f.roa (raw, json)
Hash identifier:          OdoBbAgjiAsaT/zx6DRQOD0dK6dfqvDjcAjl1K3jK8s=
Subject key identifier:   58:1F:01:7E:8E:FF:E6:38:96:B1:B0:78:9A:34:B0:EF:E4:34:9A:62
Certificate issuer:       /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial:       199D70
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/91520188ca3cb6c049894fdf028a8a58afc3722f.roa
Signing time:             Wed 31 May 2023 20:47:09 +0000
ROA not before:           Tue 30 May 2023 20:47:09 +0000
ROA not after:            Sat 31 May 2025 20:47:09 +0000
asID:                     264758
IP address blocks:        45.228.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678704 (0x199d70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
        Validity
            Not Before: May 30 20:47:09 2023 GMT
            Not After : May 31 20:47:09 2025 GMT
        Subject: CN=91520188ca3cb6c049894fdf028a8a58afc3722f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:93:7c:8b:1d:74:a0:58:4d:d1:39:46:11:
                    16:dd:06:ec:dd:d1:ec:8f:df:c3:c1:28:2e:e4:03:
                    14:9a:b3:cf:e7:10:3e:a9:11:95:52:22:53:49:2d:
                    25:b5:3f:50:8f:17:38:c9:02:51:50:56:95:48:47:
                    e8:4d:70:d8:99:6d:5a:5b:e1:94:75:c1:4d:90:e4:
                    a7:3b:8b:c7:6b:42:f5:a3:47:c3:1a:a9:65:27:92:
                    46:58:4e:75:be:7e:f3:2e:5c:c5:41:db:90:ff:43:
                    b6:0c:6a:2c:48:88:90:f2:32:a9:3f:5f:d1:f2:dc:
                    09:12:d6:fe:23:be:5c:d3:4e:66:b0:a3:84:35:f7:
                    95:b1:71:25:81:15:d0:d0:ae:02:7f:11:1a:26:fc:
                    90:15:5b:4d:41:8d:21:66:1c:8a:94:eb:42:cd:14:
                    9d:80:32:09:a7:02:0a:71:df:52:24:af:fd:c2:0d:
                    4c:3b:f0:2f:97:10:73:66:67:93:cb:65:ce:e9:7d:
                    e3:3f:6c:75:40:ea:a2:0b:f3:cc:be:08:ee:49:92:
                    2c:6e:71:70:fa:da:74:e7:58:65:7f:2d:ad:ca:e3:
                    fe:2c:fa:27:7c:ad:bd:8f:ac:b0:01:ea:dd:89:0c:
                    b3:e5:b4:05:8d:b2:90:da:90:70:9e:9c:e7:f1:7e:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1F:01:7E:8E:FF:E6:38:96:B1:B0:78:9A:34:B0:EF:E4:34:9A:62
            X509v3 Authority Key Identifier:
                keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/91520188ca3cb6c049894fdf028a8a58afc3722f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:a4:8f:87:2a:66:54:04:55:f7:e7:1b:94:5f:56:31:c8:
         0f:56:92:4f:1d:dc:7c:89:fe:bf:aa:5d:fb:0d:8c:ab:4a:06:
         f2:99:2e:9a:e3:73:69:d4:99:48:91:c0:45:dc:64:20:85:86:
         ad:07:10:bd:c1:72:27:03:d3:6f:43:8c:1d:da:f1:78:2f:35:
         09:cf:e3:6d:43:db:6c:a7:8e:ac:25:d3:fa:53:7e:9c:f2:eb:
         cf:8b:90:f2:f2:8a:50:27:95:e1:18:f3:06:80:b3:36:d8:d8:
         86:7a:33:ae:3b:2c:2c:37:cf:a1:c9:ae:6c:36:27:52:fe:50:
         25:e5:05:8b:69:f0:07:10:39:25:01:11:13:ec:3d:fc:2a:4f:
         44:0d:d1:ee:8e:d3:50:82:61:5c:4c:fb:58:3d:59:de:ed:6c:
         87:3f:c6:bb:6a:f8:7e:83:bf:82:83:37:f1:57:75:c2:c3:bc:
         29:98:c2:ea:56:37:49:35:98:73:04:ba:e2:ae:a9:2a:f5:ba:
         f5:c2:0f:e6:95:16:0c:2a:ed:1b:16:a8:c7:da:07:b7:ed:ef:
         58:17:b7:15:d5:10:7b:33:2a:f9:8c:c2:34:12:8c:24:60:66:
         8f:16:de:a4:6d:f1:43:61:54:6d:22:8c:d1:1b:33:0f:0b:df:
         54:98:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org