Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/67769c9e4644ab76272e5d12e71dd79880250751.roa
File:                     67769c9e4644ab76272e5d12e71dd79880250751.roa (raw, json)
Hash identifier:          EIt7vM8HXNTv4c0nCBwIU7qEkHbspr1yZiJYMZudO18=
Subject key identifier:   38:FC:69:6A:31:51:AF:98:A3:D7:8C:D6:E5:89:98:C7:63:48:2F:1D
Certificate issuer:       /CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
Certificate serial:       250E4C
Authority key identifier: E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/67769c9e4644ab76272e5d12e71dd79880250751.roa
Signing time:             Tue 23 Jan 2024 15:31:44 +0000
ROA not before:           Tue 23 Jan 2024 15:31:42 +0000
ROA not after:            Tue 23 Jan 2029 15:31:42 +0000
asID:                     267829
IP address blocks:        45.179.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428492 (0x250e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
        Validity
            Not Before: Jan 23 15:31:42 2024 GMT
            Not After : Jan 23 15:31:42 2029 GMT
        Subject: CN=67769c9e4644ab76272e5d12e71dd79880250751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:f5:f0:30:12:76:dc:d1:08:4d:fb:dd:a9:
                    e9:6a:25:7f:79:64:c9:63:fc:8b:73:c5:dd:eb:b7:
                    59:d7:5d:3e:62:5d:27:53:f1:68:90:3b:0f:ca:12:
                    4d:c7:45:95:4d:70:cf:5c:66:16:98:41:51:2c:b6:
                    cb:9d:5c:0c:fe:fb:09:6e:bd:94:45:2d:0d:52:fd:
                    2d:c3:ca:10:45:7b:92:db:c5:8c:f9:fe:02:15:eb:
                    a1:a1:6e:d2:e0:3f:ca:f1:18:77:1e:30:fa:b8:7c:
                    ac:04:68:71:75:fd:4f:55:1a:b3:37:7b:31:b4:eb:
                    cb:1b:d6:48:75:a7:e5:2a:31:72:1f:b6:6c:e0:d7:
                    b0:22:6f:ba:b2:e6:a3:31:84:e5:4d:bb:cb:06:7b:
                    8d:0a:15:e7:f8:5e:b7:c2:34:81:0a:ef:6f:c4:cf:
                    ba:70:3e:82:e9:ba:2d:e4:66:14:46:27:51:ff:96:
                    2a:0f:b5:20:c3:26:6d:f5:ac:49:45:84:b6:e4:6e:
                    fe:86:8b:b6:19:16:40:6b:10:5c:76:56:0b:b2:61:
                    ba:b2:a5:ec:ec:75:53:7a:89:e2:8c:8b:17:67:1b:
                    6e:5b:47:49:c8:da:a1:08:7c:7d:57:9b:77:ad:f4:
                    0d:1b:89:11:6c:86:ff:98:18:42:4d:5f:c9:16:fb:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:69:6A:31:51:AF:98:A3:D7:8C:D6:E5:89:98:C7:63:48:2F:1D
            X509v3 Authority Key Identifier:
                keyid:E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/67769c9e4644ab76272e5d12e71dd79880250751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/90ef0bf45eb95f428a97e23652586ee37cd91ffc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:87:f7:a5:93:0a:61:44:5b:06:1d:23:60:e4:23:f9:c0:d2:
         53:fa:f6:0d:fa:04:e5:aa:d0:52:ee:7e:19:60:40:44:f3:93:
         30:f9:be:74:cd:75:9e:98:58:c4:5d:6e:e5:cf:2a:e7:ac:4d:
         d8:a7:97:b6:8b:64:aa:89:f3:b8:00:eb:7e:6e:40:86:16:17:
         db:20:b8:e1:a7:4d:ae:af:40:f2:c5:6b:21:d3:98:79:c9:0c:
         38:bf:60:e5:5a:27:82:ff:6a:d6:5d:94:52:05:1a:ea:fc:b5:
         cc:96:13:69:5c:55:b4:b8:bf:99:94:3c:d9:0a:d5:06:d3:27:
         d5:b7:71:81:8c:48:2f:07:ac:9b:06:c7:42:d9:0f:2d:b1:5c:
         e4:46:28:ff:05:60:a4:11:25:72:8f:14:93:15:c2:58:f9:d4:
         f1:e5:ef:f1:59:5a:fb:77:5c:78:80:13:8f:c8:e6:df:6f:a3:
         8f:ce:ec:3f:6d:83:ff:55:5d:8b:36:9c:f6:35:b8:0b:58:3a:
         69:88:f0:cd:97:b5:dd:00:8e:eb:8b:04:c1:77:d1:1a:f7:77:
         44:4f:83:c7:59:51:cf:a8:e8:c6:98:e1:8c:0f:41:0b:8a:39:
         fb:32:d6:3d:6b:5e:b2:c3:f8:b6:52:21:f5:e1:c2:a9:7e:58:
         6b:3a:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org