Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/5cd38425b4de6d896176f9d464ec4b92fed90810.roa
File:                     5cd38425b4de6d896176f9d464ec4b92fed90810.roa (raw, json)
Hash identifier:          B4goT/oSXB/UGx3bAnZNu5RBe0PgsXg9d8/Qgh8/Gl4=
Subject key identifier:   EB:FE:AC:35:46:84:4D:BB:64:3F:8C:D1:96:09:34:EF:B1:66:F7:5D
Certificate issuer:       /CN=713466eb5a3bd118b72f0078eea3bb990f763363
Certificate serial:       235D1F
Authority key identifier: A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/5cd38425b4de6d896176f9d464ec4b92fed90810.roa
Signing time:             Fri 17 Nov 2023 05:35:10 +0000
ROA not before:           Fri 17 Nov 2023 05:35:10 +0000
ROA not after:            Mon 17 Nov 2025 05:35:10 +0000
asID:                     266784
IP address blocks:        45.179.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317599 (0x235d1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713466eb5a3bd118b72f0078eea3bb990f763363
        Validity
            Not Before: Nov 17 05:35:10 2023 GMT
            Not After : Nov 17 05:35:10 2025 GMT
        Subject: CN=5cd38425b4de6d896176f9d464ec4b92fed90810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:55:f7:10:1c:f2:6b:86:a3:65:4f:a3:ec:
                    a0:7b:91:e4:b5:df:b5:f9:e3:cd:f6:30:b3:d8:4f:
                    89:ce:38:c7:c4:61:a1:94:b7:07:03:62:a1:83:3d:
                    68:d5:8c:c7:d3:3f:0f:8e:9f:10:ec:41:28:8f:a8:
                    bf:3c:d5:fa:91:55:0f:ef:13:58:8e:f2:7b:d8:df:
                    83:b9:89:04:1b:84:e2:f4:d7:e0:6d:bc:76:3e:1e:
                    8a:32:fa:48:a5:27:ad:bc:61:af:c0:76:da:a0:e2:
                    c1:54:43:d7:67:f1:81:e9:9b:0f:2f:70:4b:11:ae:
                    c4:b0:d4:77:23:ab:47:92:7c:4e:ea:36:82:4d:4a:
                    6d:15:7d:fc:63:32:37:5d:26:31:64:dc:87:9e:93:
                    54:40:42:92:59:9d:57:59:14:b8:bd:22:1e:92:bc:
                    61:4a:9d:fd:58:4b:72:b2:5e:c8:0f:00:ac:c3:96:
                    33:49:7a:2f:1f:c5:37:35:4f:24:ae:81:3f:c5:32:
                    d6:6a:ec:1a:50:c8:b0:dd:5c:05:b3:0f:eb:70:46:
                    12:de:d8:08:c8:b2:6e:46:17:f8:f0:14:f5:83:13:
                    e9:66:72:4e:f7:4d:43:6f:90:86:40:5f:0b:7c:db:
                    52:ac:96:dc:8e:b9:80:9b:6a:35:b2:81:20:b5:62:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:AC:35:46:84:4D:BB:64:3F:8C:D1:96:09:34:EF:B1:66:F7:5D
            X509v3 Authority Key Identifier:
                keyid:A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/5cd38425b4de6d896176f9d464ec4b92fed90810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:56:ed:1a:15:5b:85:63:73:70:95:e6:9f:ed:47:5f:7b:6d:
         ab:5b:35:e3:9d:d9:1f:09:7d:67:e7:06:f5:57:29:3d:3e:ac:
         d0:d1:88:bc:b9:b8:74:9d:d2:a4:9e:de:a1:2f:57:db:d4:93:
         af:70:30:10:d5:83:38:0e:a6:86:a4:11:28:ca:ce:82:3e:f3:
         5b:45:05:a8:0c:0a:29:ea:77:71:e4:cf:40:b6:86:a7:75:25:
         6d:19:77:d9:42:d5:f5:85:7c:c5:c3:9c:92:12:86:13:c2:de:
         0b:27:20:3e:f7:63:cf:db:9e:70:c9:b6:42:30:86:d7:e8:8e:
         47:5e:11:69:bd:66:01:a9:1e:0b:70:80:ef:e6:73:72:1c:82:
         01:5a:90:b5:04:71:2a:89:20:f3:99:30:74:aa:e5:24:a1:8b:
         0e:be:e1:9b:0c:f5:c3:d0:af:5e:a5:b7:14:3f:ad:f4:e1:17:
         3a:1b:16:91:d3:10:89:f6:a0:e1:25:7c:35:f6:a5:b4:13:60:
         a8:41:a6:5d:06:77:12:bd:b5:5a:11:cd:07:b7:e8:bb:0b:22:
         20:08:28:c1:3e:8f:85:51:fb:12:11:ef:d0:f8:c7:6f:62:bb:
         19:33:d4:b0:5d:5a:fb:f0:23:dc:f2:83:28:94:dd:0c:71:d7:
         5e:fb:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 20:36:23 2024 by rpki-client on console-ams.rpki-client.org