Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/9b586d862f561ac06d8f51986c390c618a6beeae.roa
File:                     9b586d862f561ac06d8f51986c390c618a6beeae.roa (raw, json)
Hash identifier:          EJIAbRg+IUohCDU056gpS6eHlSOdosQta+R99BZx81k=
Subject key identifier:   80:4C:53:1F:BD:48:43:85:18:1C:C1:9B:A3:25:E1:44:BD:C5:6F:D5
Certificate issuer:       /CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
Certificate serial:       26A329
Authority key identifier: A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/9b586d862f561ac06d8f51986c390c618a6beeae.roa
Signing time:             Fri 29 Dec 2023 18:30:46 +0000
ROA not before:           Fri 29 Dec 2023 18:30:46 +0000
ROA not after:            Fri 29 Dec 2028 18:30:46 +0000
asID:                     265775
IP address blocks:        45.231.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532137 (0x26a329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
        Validity
            Not Before: Dec 29 18:30:46 2023 GMT
            Not After : Dec 29 18:30:46 2028 GMT
        Subject: CN=9b586d862f561ac06d8f51986c390c618a6beeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:cf:da:f6:00:09:28:79:17:24:64:b4:2d:
                    36:d1:49:97:a0:40:d0:68:e8:28:89:f1:ea:2a:a3:
                    5b:01:e2:25:55:91:4e:70:96:6b:53:f7:a1:71:1e:
                    95:91:e2:15:16:09:00:5f:78:74:b9:d4:c5:a7:cf:
                    d9:76:97:88:f5:76:fc:c8:cf:a9:9a:bf:20:31:8b:
                    8f:02:91:6d:b2:ed:c6:4b:34:8e:ce:4d:9e:8b:d3:
                    48:87:3a:8b:2a:dc:7d:d6:eb:f9:c4:4b:eb:25:f7:
                    c1:03:11:37:44:a5:1a:ae:c1:4f:43:d0:b7:1d:8d:
                    c5:59:7b:ef:1a:23:57:17:6f:62:c3:64:9b:d7:fa:
                    cc:b3:1f:53:51:44:df:eb:52:4d:4e:bc:32:aa:f0:
                    86:41:4f:d2:b8:30:54:8f:08:81:05:8a:48:59:21:
                    db:04:a2:30:fe:46:59:29:cd:bd:dc:95:90:57:75:
                    c3:65:db:13:2e:fa:bd:84:ac:fc:1f:a8:9f:ae:65:
                    f6:f9:56:ae:2d:8f:62:cc:c9:e2:c9:32:0d:e5:91:
                    c3:6d:91:55:44:a8:16:17:aa:58:22:75:2a:31:16:
                    76:87:fb:bf:03:4c:28:c1:00:6e:29:b5:40:d7:75:
                    00:dc:5f:85:bb:58:5a:9a:02:51:dd:7c:a5:ef:2f:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4C:53:1F:BD:48:43:85:18:1C:C1:9B:A3:25:E1:44:BD:C5:6F:D5
            X509v3 Authority Key Identifier:
                keyid:A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/9b586d862f561ac06d8f51986c390c618a6beeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:d8:e9:b6:6f:1a:b8:bf:29:8f:ef:a1:39:ab:34:0c:de:56:
         cf:83:24:7a:bf:55:97:6a:1d:0a:c5:ee:a8:a4:db:34:53:be:
         f1:06:78:b2:d0:6f:96:a6:10:a9:fb:c7:58:92:41:35:9a:cb:
         89:d5:bd:13:96:eb:32:8e:a4:d5:d5:1c:86:9d:35:31:f4:34:
         41:a8:58:d4:5e:96:df:26:fa:a9:f6:8d:6b:46:90:b4:8d:17:
         34:d6:63:c6:e9:2d:b3:77:e5:50:20:f3:c7:a2:3c:98:d9:61:
         0b:6b:03:fe:17:e0:3b:9b:0f:21:39:55:b1:ec:ed:73:e7:ea:
         c8:fe:c3:c5:cd:a7:e1:56:dc:5c:60:e5:06:35:b3:e6:5f:c0:
         f6:dd:1c:60:d6:fc:69:cd:67:2a:3b:0f:80:c6:4a:73:ca:17:
         16:52:f2:e1:be:55:4b:90:f7:d3:6b:e9:80:99:ed:38:89:0e:
         34:ac:be:06:8d:b6:d2:a5:57:88:d7:6d:ce:70:9d:e1:66:1e:
         11:34:52:08:c3:fe:85:47:35:6a:e6:1c:75:04:46:67:ac:e1:
         24:80:7f:45:c6:e1:81:fe:17:a5:2e:d6:55:3a:52:bf:7e:a7:
         9f:c4:7b:76:27:44:5e:4f:c0:c8:89:27:53:cf:78:0f:25:8c:
         8f:6d:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org