Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/e74d25eaf4bf179f16cb9f72b4c079ad3fbbecb2.roa
File:                     e74d25eaf4bf179f16cb9f72b4c079ad3fbbecb2.roa (raw, json)
Hash identifier:          PmKQzWOdCwDuEv+ZLoT26T+PU4Q8jvoplaV3xdM1kaw=
Subject key identifier:   EE:7A:90:F3:E9:5B:EF:EC:41:E1:4F:A6:18:16:D1:09:1E:7A:6C:42
Certificate issuer:       /CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
Certificate serial:       26AAAB
Authority key identifier: A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/e74d25eaf4bf179f16cb9f72b4c079ad3fbbecb2.roa
Signing time:             Fri 29 Dec 2023 18:30:48 +0000
ROA not before:           Fri 29 Dec 2023 18:30:46 +0000
ROA not after:            Fri 29 Dec 2028 18:30:46 +0000
asID:                     264746
IP address blocks:        45.231.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534059 (0x26aaab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
        Validity
            Not Before: Dec 29 18:30:46 2023 GMT
            Not After : Dec 29 18:30:46 2028 GMT
        Subject: CN=e74d25eaf4bf179f16cb9f72b4c079ad3fbbecb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:7f:50:12:29:bb:3b:ad:3d:d5:f6:5e:49:
                    47:df:49:b1:ad:e9:99:3d:be:ec:b5:34:16:2b:30:
                    12:80:bb:05:13:83:b8:29:8c:45:97:27:08:e6:e3:
                    be:9c:68:80:03:fc:b1:d5:45:0a:86:fd:b1:d1:3c:
                    c1:8f:00:7a:f1:25:30:71:01:68:5c:e4:66:e3:f1:
                    6c:9f:b3:3a:7d:42:82:82:8d:59:3f:f5:06:a2:23:
                    e0:d6:22:e2:7a:76:5d:14:db:9c:86:99:b6:4c:74:
                    38:d0:18:68:ff:f5:ae:c9:db:b6:7b:05:7d:4b:14:
                    61:5e:7f:7f:ce:9d:b0:2b:a1:20:04:da:14:de:15:
                    19:a9:6c:79:48:88:f6:f3:e1:80:80:df:79:3e:92:
                    f9:08:5b:82:8f:35:ec:5a:fd:53:76:c6:26:19:92:
                    a3:ae:68:09:2e:63:b0:1f:bf:86:f1:9c:55:4c:1d:
                    16:00:6e:db:fc:d6:08:ee:16:3f:b7:54:c2:31:db:
                    b9:66:1a:39:4f:57:e0:dc:98:38:12:42:35:74:55:
                    c7:06:3a:d5:55:0d:40:eb:e3:a9:b4:d7:3c:13:a3:
                    30:ad:93:c5:7d:37:d2:7b:74:a7:f7:bc:db:8d:3e:
                    61:99:eb:01:40:ce:16:75:fd:eb:b9:73:e4:27:48:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:90:F3:E9:5B:EF:EC:41:E1:4F:A6:18:16:D1:09:1E:7A:6C:42
            X509v3 Authority Key Identifier:
                keyid:A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/e74d25eaf4bf179f16cb9f72b4c079ad3fbbecb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:be:a3:0f:6f:81:7d:12:04:57:34:93:60:83:c0:70:59:c6:
         99:ae:d2:54:61:ae:12:60:3d:71:ef:e1:a4:0e:cf:24:ae:26:
         c2:11:5d:32:88:d8:b0:ac:11:25:4b:7b:71:0c:e1:1e:8a:d5:
         51:4a:b2:01:7a:13:f1:fe:94:f9:dd:9a:4d:68:bc:9c:ab:d8:
         a2:80:73:12:77:14:1e:e6:4c:f5:1b:82:ba:91:65:53:3e:48:
         d1:d7:90:80:95:ea:26:34:b3:0b:6e:ea:d6:fa:f3:86:79:f7:
         2a:6c:36:4f:48:b9:fe:07:80:71:d4:29:2a:e4:a1:b0:8e:42:
         4f:20:d1:9f:67:fb:15:f0:78:cf:fb:c7:21:85:97:1a:4e:59:
         ac:00:f0:66:e2:f4:23:3c:fa:23:62:ca:61:f5:fb:ba:c0:fa:
         53:01:0d:b0:d3:bd:9a:0a:55:52:9a:69:46:0d:bb:91:e4:47:
         69:91:24:f1:a0:37:07:4a:a8:2c:bf:5f:81:6c:ef:80:83:7c:
         bf:1c:89:a3:aa:18:b0:dc:17:99:1d:a5:8e:c7:36:69:59:40:
         ea:e0:d3:af:60:31:f9:05:f4:59:02:d2:e6:d2:13:a6:f2:5c:
         08:7b:ba:d4:c4:12:68:f9:53:2e:93:9c:a7:4b:9f:56:ff:c7:
         81:69:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org