Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1515a0bf0ee443590ba7b583495303f0c5d0e17f.roa
File:                     1515a0bf0ee443590ba7b583495303f0c5d0e17f.roa (raw, json)
Hash identifier:          w3M9MHCDKHoIdIt4V/TPd2sIkdcu672LY9shnIKaR/Q=
Subject key identifier:   98:C1:33:A0:35:6E:31:77:38:65:51:15:14:AA:96:41:08:00:30:FD
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       203B1F
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1515a0bf0ee443590ba7b583495303f0c5d0e17f.roa
Signing time:             Tue 14 Mar 2023 18:06:06 +0000
ROA not before:           Wed 02 Nov 2022 23:25:28 +0000
ROA not after:            Thu 07 Nov 2024 23:25:28 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112287 (0x203b1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Nov  2 23:25:28 2022 GMT
            Not After : Nov  7 23:25:28 2024 GMT
        Subject: CN=1515a0bf0ee443590ba7b583495303f0c5d0e17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:10:49:ed:77:bb:9b:44:28:ce:db:3d:43:
                    5b:4f:1e:32:9f:c8:29:92:2b:20:18:54:4c:0e:07:
                    08:e2:99:9b:d2:9c:71:3f:39:eb:8c:38:f6:ce:67:
                    8e:e0:bd:19:f7:3b:50:d8:7b:c9:0b:69:6d:2e:ab:
                    28:7c:d5:94:66:b0:7a:ce:69:c5:cb:f9:d8:8a:03:
                    88:31:2d:04:ed:8e:dc:55:df:f0:1b:36:97:e8:d4:
                    02:d3:b3:4c:41:96:8c:9f:e3:c3:aa:0b:25:d7:5a:
                    7a:2e:2d:54:52:15:07:c2:71:f7:47:cc:3c:a8:9f:
                    ff:16:04:b0:e7:30:11:34:1d:0d:52:97:82:72:2c:
                    14:cb:1c:31:1f:37:7b:a7:ae:d8:ba:07:d4:5b:e1:
                    41:c5:15:91:76:4a:d3:bd:44:b1:6a:5b:69:27:d0:
                    a3:6a:c6:ab:74:e3:09:23:cc:7e:49:b8:5d:90:cb:
                    d1:31:ba:74:09:11:7c:45:8c:d9:b6:76:34:4e:a1:
                    f2:67:55:b1:21:cc:60:53:f5:65:ed:0b:c4:bb:39:
                    f5:c7:09:46:d7:8e:c4:e0:c3:4d:d9:1c:1f:53:5e:
                    b9:d2:70:17:23:b8:07:61:79:73:a5:bc:ad:33:60:
                    21:86:b9:2a:47:be:99:8c:41:38:1c:5d:b7:eb:b2:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:33:A0:35:6E:31:77:38:65:51:15:14:AA:96:41:08:00:30:FD
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1515a0bf0ee443590ba7b583495303f0c5d0e17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:df:2b:f6:69:33:50:a5:d8:58:25:12:2b:30:b0:fe:10:94:
         89:14:e8:43:dc:ce:b6:ae:88:cf:39:08:4e:94:dd:c1:c0:33:
         e2:a4:33:f4:6a:5a:2b:0b:bb:dc:b3:44:43:9d:4a:e9:d9:a2:
         53:e4:05:93:3b:ec:7c:83:9e:06:67:5a:42:18:fb:e8:94:c0:
         45:03:cc:b4:d3:b6:f4:0e:c0:c6:28:57:29:09:71:be:d2:68:
         b1:a6:fb:fc:b2:9d:73:35:f6:ec:54:55:53:bd:5a:06:d9:35:
         8d:bc:58:02:d8:fa:aa:e5:06:19:f0:32:cf:4d:48:d7:b3:ab:
         00:13:ac:f4:22:38:f3:ce:2b:04:f3:6c:b3:68:5d:bd:6d:42:
         ed:93:10:bc:ff:0b:7b:ef:8d:76:02:81:5c:4a:51:70:ba:70:
         a4:79:8f:b1:f2:14:41:78:d1:36:9a:61:07:21:e2:9f:ad:76:
         de:07:7e:48:f0:b3:bd:6b:0f:60:a9:00:07:3c:22:0c:6c:0b:
         0a:a8:c2:65:cd:17:87:c7:1f:d8:fe:97:1c:2a:1d:18:c1:27:
         e9:d8:ef:8a:be:7e:5c:2d:ff:fb:26:5b:b7:04:c7:6b:74:3b:
         76:29:4f:4c:ad:ad:f5:87:54:67:dd:76:35:7d:3a:91:83:26:
         d1:51:fd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org