Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa
File:                     ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa (raw, json)
Hash identifier:          coUE/yQktq7Ku4Cmr61RLX5Bx8NrVCN7HbXa42OH9NA=
Subject key identifier:   E3:18:E3:20:5F:82:F9:BB:28:69:E2:74:3D:3C:C6:FD:D8:D0:8C:16
Certificate issuer:       /CN=1b40db97500b321646b19cb813c19d04f35ecdd4
Certificate serial:       11D07A
Authority key identifier: C1:64:33:D4:CE:7E:C9:8C:AC:40:14:12:D6:B3:DF:86:D4:E4:F8:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b40db97500b321646b19cb813c19d04f35ecdd4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa
Signing time:             Tue 01 Aug 2023 08:30:01 +0000
ROA not before:           Mon 31 Jul 2023 08:30:01 +0000
ROA not after:            Wed 30 Jul 2025 08:30:01 +0000
asID:                     266765
IP address blocks:        45.234.224.0/24 maxlen: 24
                          45.234.225.0/24 maxlen: 24
                          45.234.226.0/24 maxlen: 24
                          45.234.227.0/24 maxlen: 24
                          45.234.224.0/22 maxlen: 22
                          45.234.224.0/23 maxlen: 23
                          45.234.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167482 (0x11d07a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b40db97500b321646b19cb813c19d04f35ecdd4
        Validity
            Not Before: Jul 31 08:30:01 2023 GMT
            Not After : Jul 30 08:30:01 2025 GMT
        Subject: CN=ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:b6:4c:14:46:d7:f1:c5:d0:ca:70:bd:e8:
                    98:aa:23:8a:42:a6:53:89:81:89:55:6d:8d:bc:5e:
                    51:28:98:d6:f2:24:61:ab:03:e5:72:f6:10:ea:9d:
                    de:4e:34:8b:c0:8b:54:d8:83:2f:eb:be:72:7b:fd:
                    e6:2a:d1:3f:1d:f4:4e:52:25:64:b6:be:49:69:71:
                    c9:91:21:32:e9:c5:28:94:33:53:76:d3:73:69:50:
                    44:39:b6:52:88:54:74:6d:26:4c:9c:49:b9:f6:a8:
                    26:ae:f0:65:1a:b9:8d:c2:fb:80:4c:f7:74:38:f8:
                    95:46:44:5e:64:19:99:31:d9:23:53:4e:88:fb:6f:
                    5e:6b:a4:88:46:a5:f1:b4:17:2b:5c:be:e6:97:87:
                    18:82:66:05:78:99:ac:39:9f:d5:23:49:f4:89:f6:
                    cb:38:19:51:39:45:05:2b:4e:f8:10:10:53:73:e8:
                    b4:f6:dd:a1:d7:6c:b3:40:6d:06:c5:3c:57:f2:9d:
                    4b:e8:39:ac:5d:c6:7d:fb:54:d9:45:b9:94:27:57:
                    ff:54:45:7a:6c:c9:f6:f7:81:a2:bb:85:a5:43:97:
                    5f:bf:d6:28:77:c5:4d:8a:1b:11:32:70:89:44:01:
                    96:e5:2e:fb:7f:a2:8b:ee:16:4f:a5:a2:0e:ad:04:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:18:E3:20:5F:82:F9:BB:28:69:E2:74:3D:3C:C6:FD:D8:D0:8C:16
            X509v3 Authority Key Identifier:
                keyid:C1:64:33:D4:CE:7E:C9:8C:AC:40:14:12:D6:B3:DF:86:D4:E4:F8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b40db97500b321646b19cb813c19d04f35ecdd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/ba9a582ff43316dc4165c877a0ed2a1a7fa95dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/951e0558-b47f-4892-9e0a-55879e997db0/1b40db97500b321646b19cb813c19d04f35ecdd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:2d:6f:c2:c4:97:ed:43:96:ad:7b:db:53:18:63:95:1a:bc:
         b2:d8:44:6c:d6:95:80:48:48:5c:64:22:98:4a:13:34:f7:f5:
         67:01:12:e0:d9:a9:a5:15:55:4a:57:42:49:39:7c:3b:c8:72:
         14:d0:c7:68:17:74:49:85:2a:9b:4c:c6:db:d2:e2:f2:07:18:
         fc:8c:be:86:a1:a4:c1:c5:7a:c7:32:fc:d7:17:ff:3d:50:08:
         22:be:19:41:dd:b4:f2:18:e1:cb:c2:c6:8c:00:75:e1:ee:aa:
         ea:76:ec:7a:46:dd:94:34:88:18:a4:a1:11:e9:ac:47:5e:8a:
         d2:75:28:1b:33:03:76:16:e7:49:9a:eb:62:ae:82:df:cc:33:
         95:31:fb:16:54:cb:5e:d3:57:cc:d7:c2:af:ee:d3:3c:fd:56:
         36:1a:94:6b:49:58:bc:7a:28:a1:8b:e8:78:43:4a:2d:58:37:
         62:65:90:2b:f0:45:b3:d6:c7:c9:95:56:8c:29:82:d7:d9:53:
         c7:e6:c7:fa:e9:6c:25:86:58:76:f7:fd:92:1d:b3:ca:a6:ee:
         2b:bc:4a:42:fa:4f:7d:e0:65:b4:04:c0:58:55:12:2a:12:92:
         db:cd:8e:8e:8c:f7:f5:c9:ae:df:ae:df:c7:2e:e0:8f:a5:32:
         b4:89:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org