Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5c20c28e92dff28aac4e3d76e853bcd3f4b9e327.roa
File:                     5c20c28e92dff28aac4e3d76e853bcd3f4b9e327.roa (raw, json)
Hash identifier:          XLg3alfIJ2t6NPGDtCmsSflgm40u+zu95aS+gEw6D9w=
Subject key identifier:   91:9D:0C:3E:2F:6C:88:4D:31:BE:7D:9A:0E:63:BA:15:C2:D6:06:B5
Certificate issuer:       /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Certificate serial:       23413A
Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5c20c28e92dff28aac4e3d76e853bcd3f4b9e327.roa
Signing time:             Thu 07 Dec 2023 07:30:00 +0000
ROA not before:           Thu 07 Dec 2023 07:30:00 +0000
ROA not after:            Sat 06 Dec 2025 07:30:00 +0000
asID:                     267871
IP address blocks:        45.177.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310458 (0x23413a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
        Validity
            Not Before: Dec  7 07:30:00 2023 GMT
            Not After : Dec  6 07:30:00 2025 GMT
        Subject: CN=5c20c28e92dff28aac4e3d76e853bcd3f4b9e327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:db:3c:a7:28:f3:1c:9f:7f:c6:cf:c2:3e:
                    e9:ee:56:b1:ce:96:12:ec:0c:06:d0:01:60:29:15:
                    0a:e2:30:c2:55:65:fa:78:02:dd:f3:d9:4e:a2:9f:
                    4c:f0:ae:94:19:25:3d:f1:5c:ff:5f:77:c8:8f:de:
                    30:12:37:0b:c8:8a:1c:4d:fd:68:55:51:f8:2d:d8:
                    67:6c:cd:e5:46:b2:e0:69:5a:db:b7:b7:04:1d:b9:
                    8c:a0:d6:c0:51:f2:20:1b:93:ef:ed:20:92:e3:56:
                    56:7f:a5:23:28:b1:f2:67:ec:8c:20:2d:23:3f:a4:
                    88:c7:7b:e1:6f:b6:b8:95:95:0b:08:db:5f:91:79:
                    92:8a:40:e5:a7:02:60:a4:99:b3:a8:83:ca:9b:bd:
                    6c:5d:6d:69:5d:b8:dd:8a:25:bf:14:fd:a2:09:34:
                    e6:6c:d4:60:31:cc:d1:da:42:69:15:bd:17:3a:4d:
                    bc:91:e1:eb:84:bc:65:a3:05:ec:79:f7:c7:6a:73:
                    73:72:f1:70:3d:e1:7d:07:8f:62:05:aa:52:25:27:
                    6f:2b:81:fa:49:14:38:24:7d:a9:e2:cf:e8:b2:67:
                    be:ba:e0:f5:d1:e8:9e:97:b8:ff:4a:8e:61:1c:22:
                    b6:83:be:5b:d2:8d:70:a9:b3:54:32:ce:b2:3e:1b:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:0C:3E:2F:6C:88:4D:31:BE:7D:9A:0E:63:BA:15:C2:D6:06:B5
            X509v3 Authority Key Identifier:
                keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5c20c28e92dff28aac4e3d76e853bcd3f4b9e327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:d8:51:b5:24:f4:5b:3d:32:b4:a9:fb:b4:69:8a:51:a9:
         4b:f4:cb:c7:bd:c5:65:6b:b5:18:5d:28:39:c7:f8:68:90:57:
         b9:2b:a0:9b:ad:dc:76:81:ed:33:51:fc:50:f6:15:db:91:1f:
         05:3f:38:8a:a6:03:a3:38:20:a9:fd:dd:7d:eb:e3:12:a3:a1:
         cb:68:7c:5c:05:61:f5:b4:df:66:99:53:a7:73:ec:55:80:b8:
         3c:71:09:42:e8:62:65:36:df:35:58:9c:a7:d7:bb:1e:a8:1a:
         5b:8b:d7:a2:b9:06:0c:df:2c:da:30:0d:c2:b0:c4:f9:2c:b3:
         1c:41:49:d7:b7:31:14:a5:4c:55:99:9b:10:8b:45:4a:61:22:
         cd:e2:e8:d2:04:a3:a0:56:29:73:65:fd:d3:57:9e:c6:ce:ac:
         b1:b3:38:3a:4f:95:b1:24:f4:90:e2:9c:29:6f:1a:21:be:fe:
         41:7c:83:99:90:1b:c4:44:77:59:b4:e0:51:27:1c:a0:81:71:
         7c:a1:82:6d:65:6e:db:00:f1:e3:ee:0b:e9:ba:0a:52:e3:21:
         cf:77:db:11:1f:e6:33:36:c7:d4:ef:4c:5f:fc:fc:c7:9a:a3:
         11:d2:c8:eb:b3:e8:cc:bf:54:0b:3e:a2:67:b0:08:eb:10:45:
         b5:ff:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org