Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/f3eeb5ca1c5e9dbd3cb30269142f1179a8c77551.roa
File:                     f3eeb5ca1c5e9dbd3cb30269142f1179a8c77551.roa (raw, json)
Hash identifier:          xBC3XdQWaJHZBHEURi0xpVmTts6U0UqMklke/Nc/E/w=
Subject key identifier:   07:77:70:FF:7C:31:C3:55:77:2C:59:0B:EE:C1:F6:0D:69:C1:24:A7
Certificate issuer:       /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial:       2662A2
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/f3eeb5ca1c5e9dbd3cb30269142f1179a8c77551.roa
Signing time:             Fri 22 Dec 2023 14:41:15 +0000
ROA not before:           Fri 22 Dec 2023 14:41:14 +0000
ROA not after:            Mon 22 Dec 2025 14:41:14 +0000
asID:                     264746
IP address blocks:        45.231.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515618 (0x2662a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Validity
            Not Before: Dec 22 14:41:14 2023 GMT
            Not After : Dec 22 14:41:14 2025 GMT
        Subject: CN=f3eeb5ca1c5e9dbd3cb30269142f1179a8c77551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:04:b5:cb:db:d5:fc:10:c8:1d:0b:84:b2:
                    12:ad:b2:39:4a:cc:11:4e:47:58:06:64:29:e3:49:
                    d2:00:d1:91:c7:97:45:4f:99:f5:72:08:19:c8:25:
                    a4:e8:ef:75:c7:c2:0e:98:a2:f0:14:56:85:93:b8:
                    aa:b9:1e:82:41:65:de:e5:2e:c0:71:06:db:92:0b:
                    70:0a:eb:f5:70:06:e8:70:63:3c:32:8d:14:66:36:
                    c4:e7:b6:7d:8c:f8:0e:ff:fd:fd:9d:51:96:ba:93:
                    b7:a5:73:56:29:f8:23:96:e7:8a:f9:9a:7e:db:93:
                    32:7f:a1:6e:8f:f9:7f:88:b5:3e:0c:6b:01:21:58:
                    61:49:82:f7:44:55:c3:86:a5:ef:49:c1:be:2c:cb:
                    83:d5:5f:4b:d7:4c:db:29:79:e4:30:2f:da:a0:50:
                    75:43:c7:9f:b9:29:cd:51:95:6e:f0:2d:cf:df:af:
                    5d:53:48:33:59:37:6d:93:8d:7b:bf:d3:e0:c5:c7:
                    c5:dc:6f:96:4f:b3:b7:04:79:ab:54:5a:e9:3e:bc:
                    f7:23:32:60:d4:4f:77:85:c1:b7:45:7d:65:dd:69:
                    ee:02:fd:49:ed:9c:6f:70:32:26:cb:b7:2b:43:eb:
                    6d:e1:31:fe:62:33:46:64:f0:43:6d:96:7b:54:94:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:77:70:FF:7C:31:C3:55:77:2C:59:0B:EE:C1:F6:0D:69:C1:24:A7
            X509v3 Authority Key Identifier:
                keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/f3eeb5ca1c5e9dbd3cb30269142f1179a8c77551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:11:c3:c0:ce:d0:07:93:b4:f1:ff:2e:c3:ad:78:82:e1:
         27:12:a6:bd:af:91:02:21:32:42:4d:c0:06:91:fb:4e:fd:25:
         28:8a:d1:c0:a5:02:bc:74:d0:6c:eb:db:cf:17:82:96:a1:ef:
         7a:86:bc:75:54:0d:c3:71:d1:2c:b3:3c:ff:4e:83:0c:a7:1f:
         07:ab:87:ab:47:fd:ab:c8:85:3f:83:ec:02:fe:4b:19:0c:c7:
         c3:e6:71:5b:9c:6f:bb:5c:aa:22:2d:0a:4a:2c:fd:12:f6:76:
         52:7b:d8:29:84:9d:58:d0:e3:ca:13:9e:51:c0:ee:fd:f4:85:
         37:ff:03:c7:6d:7c:5d:e1:bf:17:0c:e7:7c:df:b8:67:b9:a4:
         5f:d5:99:97:d0:97:4d:6b:a8:36:30:5e:37:30:0e:10:e6:e1:
         41:ee:b3:7f:d5:e0:2a:04:9f:5c:81:62:d2:30:4a:6c:c7:ee:
         eb:fb:6b:31:2c:45:1e:ca:39:9a:c6:e6:5d:44:4c:be:11:53:
         24:03:e2:6f:2a:e2:72:70:32:48:23:2d:6d:ab:40:44:1a:7d:
         01:86:ac:3b:22:58:7b:e8:6b:a5:a0:32:b4:07:b7:b5:9e:9d:
         20:93:0d:72:c8:4d:46:c2:44:71:a7:16:d1:69:df:c0:7b:5c:
         9e:ca:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 19:48:41 2023 by rpki-client on console-ams.rpki-client.org