Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/9bb243b33f89e12637e1d9cf1aaac4799873abc2.roa
File:                     9bb243b33f89e12637e1d9cf1aaac4799873abc2.roa (raw, json)
Hash identifier:          Fdx1kRJUe5cW1bJ2KgsacRSq117A93Xe+U2+hnJ2EpI=
Subject key identifier:   0B:E7:14:C4:ED:00:A4:EC:89:F2:DB:86:40:2A:1B:91:F9:52:82:4C
Certificate issuer:       /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial:       11CA09
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/9bb243b33f89e12637e1d9cf1aaac4799873abc2.roa
Signing time:             Wed 14 Dec 2022 21:58:08 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     41095
IP address blocks:        138.204.12.0/22 maxlen: 24
                          45.236.172.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165833 (0x11ca09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=9bb243b33f89e12637e1d9cf1aaac4799873abc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:c0:68:9a:e3:0b:17:2b:73:ad:df:17:09:
                    d3:95:9c:3e:17:60:d4:89:08:43:3a:fe:0e:7b:be:
                    0b:6e:c4:70:dd:19:d7:f9:72:14:81:1b:fc:62:49:
                    0e:cb:85:4f:76:83:1d:13:d7:97:bc:d9:3b:d5:70:
                    ab:bb:8a:3a:d2:56:7d:82:b9:a7:0d:64:f2:c7:44:
                    fb:5c:0b:62:36:6c:c1:8b:e8:b4:49:60:52:30:d8:
                    15:fc:62:ea:cd:35:15:de:0d:86:a0:7a:9a:06:34:
                    31:b3:65:02:7e:da:33:3d:77:f8:72:e0:71:2d:80:
                    d0:64:c2:7e:45:24:42:1c:74:c1:65:02:bb:91:72:
                    99:d9:90:5b:52:2a:00:00:0c:ca:5d:84:98:89:4f:
                    04:8c:63:b4:d4:6b:9b:07:97:7f:88:61:b6:fa:12:
                    13:52:21:b4:8b:b2:ba:f6:e1:3e:74:8c:bc:7c:13:
                    77:78:f1:24:4c:f4:3d:35:13:c5:ed:3f:41:14:23:
                    74:1f:5a:f3:e7:76:69:c7:bf:39:b7:40:fc:02:97:
                    dd:fd:8c:85:54:e1:76:28:1b:54:b1:0c:c2:04:fb:
                    58:eb:c7:11:14:b5:87:93:49:9f:a3:28:7c:39:39:
                    13:62:01:47:95:70:9f:45:02:41:f7:ba:43:30:62:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:14:C4:ED:00:A4:EC:89:F2:DB:86:40:2A:1B:91:F9:52:82:4C
            X509v3 Authority Key Identifier:
                keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/9bb243b33f89e12637e1d9cf1aaac4799873abc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.172.0/23
                  138.204.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:70:04:76:15:d0:63:d2:5b:b0:83:87:5d:8e:c1:e7:7d:93:
         1f:db:cf:13:24:7e:8a:9f:92:72:70:48:54:1f:d2:93:0a:82:
         bd:27:be:bd:43:9f:eb:15:d0:e9:53:dc:93:32:ca:20:7c:98:
         2d:65:5a:6e:2d:78:89:82:77:ec:98:44:12:b4:3a:97:00:65:
         f5:20:87:ef:20:3a:24:46:a5:6c:60:0d:23:cf:fc:a2:0d:36:
         d6:ec:df:7f:03:f3:93:68:92:88:09:87:1d:8a:74:92:92:8f:
         ae:c1:0c:a2:83:a1:1d:2d:a5:81:71:57:84:33:06:90:c0:76:
         06:69:98:01:89:e6:ba:3f:88:fc:16:6b:59:60:dd:a6:45:3a:
         55:6d:cf:03:21:1f:6e:8f:1b:62:11:fd:59:93:aa:e2:c2:b5:
         0b:48:c2:53:24:fd:17:15:8e:35:2e:01:20:01:25:20:e6:f6:
         d2:4a:5a:ff:4c:87:6d:e1:a0:0a:27:ec:22:de:1f:8d:4d:0e:
         99:9d:d0:ad:5b:ef:fd:a4:59:5d:83:c9:83:6f:58:03:55:78:
         19:0a:6e:24:b2:b3:0b:72:b0:d3:29:6c:82:9b:84:9b:3b:c9:
         88:4b:d7:f0:32:a0:c4:83:6a:9e:dc:49:75:db:26:e4:03:1d:
         7a:54:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org