Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/01b132a093c94b0f8161bac583b54ce5801bb219.roa
File:                     01b132a093c94b0f8161bac583b54ce5801bb219.roa (raw, json)
Hash identifier:          0+QgHN7FjIuLR182uHEhuoPjf3VuqyTQi07EQBaPnfk=
Subject key identifier:   11:C2:0C:2C:03:18:A0:B2:67:EA:2E:DD:BD:71:59:E4:0F:71:05:DB
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       22DE0D
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/01b132a093c94b0f8161bac583b54ce5801bb219.roa
Signing time:             Tue 26 Sep 2023 18:08:41 +0000
ROA not before:           Mon 25 Sep 2023 18:08:41 +0000
ROA not after:            Fri 26 Sep 2025 18:08:41 +0000
asID:                     267811
IP address blocks:        45.169.140.0/22 maxlen: 24
                          2803:e3a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285069 (0x22de0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Sep 25 18:08:41 2023 GMT
            Not After : Sep 26 18:08:41 2025 GMT
        Subject: CN=01b132a093c94b0f8161bac583b54ce5801bb219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:3a:fc:9b:4c:71:79:5c:0b:3c:97:c4:39:
                    a6:87:71:b4:a4:09:6a:d9:3e:20:04:41:e5:60:5c:
                    91:14:3a:8b:04:32:3d:20:53:3c:09:45:db:a1:09:
                    cb:ac:bd:a5:4e:61:6e:b1:22:6b:c7:7a:56:f7:94:
                    9a:21:18:24:c1:65:e1:82:72:ce:94:6a:9a:ef:5b:
                    9e:07:6c:66:2e:ad:b3:87:b8:c1:57:eb:73:95:04:
                    0f:d0:34:4f:70:13:7c:2a:fd:a2:2c:09:91:aa:43:
                    79:ce:21:9d:ef:ff:b1:78:52:a8:08:e5:6a:34:6d:
                    98:52:c3:aa:ca:f8:f4:df:76:a9:55:f0:6d:60:9c:
                    0c:ea:84:0b:29:eb:37:29:ff:ee:28:88:bd:2c:80:
                    aa:e7:97:73:4e:44:3f:63:f2:1a:94:db:78:21:42:
                    22:af:61:0f:58:07:ee:bc:69:9e:2c:10:da:50:df:
                    f7:0d:a6:6e:a4:f0:69:e0:bc:c8:f4:d7:da:db:18:
                    83:85:57:40:63:56:e8:4b:5f:69:1f:35:f4:94:18:
                    5c:fb:6d:5c:17:cc:6e:90:78:4b:74:1c:37:8f:b5:
                    de:47:19:d7:01:52:21:f1:7b:12:90:f3:34:dd:ce:
                    9d:71:3e:bd:16:fa:2d:c7:7c:a8:8f:3e:93:b4:44:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C2:0C:2C:03:18:A0:B2:67:EA:2E:DD:BD:71:59:E4:0F:71:05:DB
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/01b132a093c94b0f8161bac583b54ce5801bb219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.140.0/22
                IPv6:
                  2803:e3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:91:e1:b0:c2:a2:37:44:59:dc:09:25:99:76:70:f4:b6:3f:
         bd:f5:1f:2b:85:78:d7:4b:a5:66:f3:0c:43:f5:7b:9f:d9:09:
         ea:7a:03:b6:26:85:93:b2:73:69:52:ba:86:f3:be:bd:38:69:
         78:2a:b9:4d:89:29:80:7e:19:50:e1:4f:49:d8:80:58:1d:b6:
         03:53:59:ec:b9:93:98:ae:2d:61:ee:ef:af:4b:be:c3:31:3b:
         cc:31:14:33:c0:3f:b6:e6:4a:f4:ca:ba:3e:dd:71:04:a1:0e:
         ad:23:24:aa:37:b2:b9:df:d1:6b:e1:93:e1:ad:fc:e8:6a:f1:
         e9:2c:dc:57:98:f9:f6:fd:ca:64:ba:a4:2c:64:b3:44:8a:2a:
         bb:bb:5c:fc:4a:fc:c5:c9:80:21:c3:8d:59:26:71:1d:0f:93:
         4e:4e:e1:07:66:05:4f:31:4a:52:aa:e7:70:b0:4b:c7:ca:9f:
         ba:6c:e8:54:ef:f2:fd:f6:42:1e:02:27:80:44:92:eb:19:3c:
         3d:ab:af:c4:bf:e0:07:f7:9f:26:f7:58:a0:fc:14:18:96:a5:
         28:69:1e:93:55:0c:a5:1f:4c:d5:27:46:b5:d6:42:c1:07:44:
         21:f3:c1:9f:81:14:2e:49:24:53:e5:c5:ff:98:47:c9:60:97:
         46:15:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org