Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/e5006d522a0409e68806a8716d2f2017e692839c.roa
File:                     e5006d522a0409e68806a8716d2f2017e692839c.roa (raw, json)
Hash identifier:          oz512JXHa/8Z11dMKnUaf8HY0NmxKLaoczv9CmSg/NQ=
Subject key identifier:   DE:09:2C:98:68:D1:48:67:B0:F4:F1:FF:D6:BF:76:3D:E4:AB:50:08
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       209262
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/e5006d522a0409e68806a8716d2f2017e692839c.roa
Signing time:             Fri 24 Mar 2023 15:33:48 +0000
ROA not before:           Sun 30 Oct 2022 23:25:28 +0000
ROA not after:            Thu 07 Nov 2024 23:25:28 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134626 (0x209262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 30 23:25:28 2022 GMT
            Not After : Nov  7 23:25:28 2024 GMT
        Subject: CN=e5006d522a0409e68806a8716d2f2017e692839c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:af:51:ad:95:b5:7b:c8:fe:ce:d7:8b:aa:ae:
                    1f:ec:1e:10:b3:17:2b:01:03:74:9e:7c:00:6c:bb:
                    6c:2e:68:91:86:f7:a9:76:2a:c4:94:46:6e:1e:1b:
                    38:11:98:8b:ac:4a:45:c8:eb:3e:cd:fb:ef:8e:f6:
                    26:74:e2:c9:ef:bd:97:02:6b:89:c7:2e:18:13:18:
                    36:7a:f2:94:69:9f:ed:af:8b:04:7d:6a:ad:de:8d:
                    f7:c0:90:81:25:fc:e7:dc:9e:e1:11:93:e5:f5:cf:
                    a3:54:51:34:ac:ed:a5:c3:5b:79:81:23:46:06:6f:
                    60:1a:13:97:5c:6e:de:6e:16:d4:78:f0:4b:54:7a:
                    eb:ee:f2:02:73:e9:b2:d5:49:a4:0f:81:99:be:43:
                    c9:2e:25:6d:68:66:2e:fc:0b:fe:73:20:0d:16:f1:
                    45:d9:f5:80:52:d5:96:a4:e9:59:5d:3b:6b:0d:74:
                    5e:13:f5:5b:19:7f:0c:bc:d6:a9:57:e0:7a:77:46:
                    c1:c8:a9:c8:b9:25:32:fb:3e:46:db:74:32:8e:89:
                    f9:ae:48:c5:16:9e:d6:0f:bd:fa:de:43:89:b6:58:
                    51:67:50:ca:3d:ba:91:93:a1:f3:90:6c:f6:12:f9:
                    e9:bd:f2:f4:0f:44:80:9a:63:86:17:b4:ee:1d:e7:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:2C:98:68:D1:48:67:B0:F4:F1:FF:D6:BF:76:3D:E4:AB:50:08
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/e5006d522a0409e68806a8716d2f2017e692839c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:22:e2:6e:7c:c2:15:02:44:f7:63:a4:c0:ff:b8:1a:68:74:
         df:0f:55:b3:ee:3d:cc:ae:a7:65:d2:80:6d:d6:29:c3:62:ee:
         91:f8:0a:52:a4:0d:9e:46:71:cd:6e:45:ec:f2:70:1d:9c:78:
         57:c9:87:e3:f8:92:b2:e9:7d:02:fb:b9:4e:12:f4:d9:0a:c0:
         4c:e1:4d:a6:81:20:c2:f5:9a:39:67:8c:d4:a6:ea:09:50:a4:
         76:15:a4:7a:f3:03:e0:a5:2c:f1:f4:21:32:1f:bb:94:db:ab:
         d1:64:14:38:c9:60:a3:ce:9c:d4:05:b0:fe:98:a6:9d:9b:c2:
         a4:49:9c:af:1e:48:2f:88:2e:a9:72:8f:a1:0a:36:51:50:8f:
         14:89:42:93:e6:91:a7:18:1a:22:78:96:58:7f:b9:79:61:00:
         b6:c9:a0:6d:09:4b:b5:da:a3:96:6f:59:5b:20:51:80:d4:c3:
         82:52:75:d0:85:02:a3:77:dc:30:cc:6e:0c:af:12:a6:c9:ed:
         d7:27:93:25:eb:ca:b6:2c:fc:3e:14:16:98:62:0e:4f:4e:aa:
         62:57:ae:43:67:a5:3d:79:b5:85:e1:46:a2:85:3d:0a:96:48:
         c9:a1:30:e3:35:8b:d8:b8:2a:85:1c:20:02:74:fa:22:06:77:
         cc:19:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org