Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/357fd3485978936a7a2203843af8f196f7543c72.roa
File:                     357fd3485978936a7a2203843af8f196f7543c72.roa (raw, json)
Hash identifier:          MygRrUG7sEth1E++EhI95gzR7yknvQ3z6srm+6RK4cY=
Subject key identifier:   96:D9:B2:0F:18:AA:7E:5A:F4:3C:13:23:3A:BE:4D:7E:0B:A8:F7:9A
Certificate issuer:       /CN=0713c7b2b5cb013b7f19fe45deaa596902879bea
Certificate serial:       0368
Authority key identifier: 83:D5:28:4F:08:19:A0:1F:49:22:0A:F2:0E:CF:5F:8B:81:A1:AA:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0713c7b2b5cb013b7f19fe45deaa596902879bea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/357fd3485978936a7a2203843af8f196f7543c72.roa
Signing time:             Mon 25 Apr 2022 03:12:34 +0000
ROA not before:           Mon 25 Apr 2022 03:00:00 +0000
ROA not after:            Thu 25 Apr 2024 03:00:00 +0000
asID:                     265706
IP address blocks:        45.5.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0713c7b2b5cb013b7f19fe45deaa596902879bea
        Validity
            Not Before: Apr 25 03:00:00 2022 GMT
            Not After : Apr 25 03:00:00 2024 GMT
        Subject: CN=357fd3485978936a7a2203843af8f196f7543c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:99:f1:ba:03:05:53:f5:33:7a:14:5b:0b:
                    e1:82:ea:78:7a:4b:cc:8e:54:53:75:c8:3f:d4:d2:
                    a5:93:29:66:b0:d8:32:ed:a0:a9:a7:6d:a3:2a:39:
                    d8:17:05:ba:70:7d:ae:59:a1:77:79:ec:2c:db:a5:
                    d3:3e:9b:92:ec:33:f9:40:77:5d:6d:f3:de:d1:fc:
                    22:f7:33:49:78:46:5a:83:50:61:2c:81:61:44:66:
                    26:6f:7a:5c:2d:83:2e:7a:e3:b8:fb:6f:09:b4:45:
                    10:9b:e3:5f:46:e2:b9:2c:fc:92:8f:13:ad:7e:ee:
                    a3:7c:6f:8a:af:23:29:e4:dc:95:e1:60:92:4d:33:
                    d0:53:51:54:45:66:91:fd:c2:bc:cf:d3:98:3c:7c:
                    8f:7c:0d:70:bc:90:d1:75:e9:cf:c6:2a:bb:9a:70:
                    41:b0:95:b0:ab:c5:19:81:72:47:08:de:da:e9:3a:
                    eb:0b:2a:c9:69:36:34:37:a5:4f:24:2e:ce:3b:ae:
                    8e:31:2b:0a:e4:79:26:45:7a:39:50:11:53:69:59:
                    fc:3c:d7:b1:b0:c5:5c:0c:1d:b9:3c:1c:37:4a:ba:
                    b2:76:2b:a1:25:ab:08:02:8e:d4:59:4d:d2:25:8d:
                    30:0c:9b:e8:1d:79:66:c1:5b:16:bc:be:d2:9d:66:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D9:B2:0F:18:AA:7E:5A:F4:3C:13:23:3A:BE:4D:7E:0B:A8:F7:9A
            X509v3 Authority Key Identifier:
                keyid:83:D5:28:4F:08:19:A0:1F:49:22:0A:F2:0E:CF:5F:8B:81:A1:AA:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0713c7b2b5cb013b7f19fe45deaa596902879bea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/357fd3485978936a7a2203843af8f196f7543c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/0713c7b2b5cb013b7f19fe45deaa596902879bea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:e9:7f:d8:ca:33:66:76:51:86:64:de:43:74:c6:f1:10:ed:
         db:69:89:d1:5c:97:72:7e:68:4f:22:a6:eb:ff:d6:c4:6c:5f:
         89:61:a4:72:7e:c6:71:d8:d3:e0:8b:9f:d6:05:c8:69:dc:14:
         33:38:75:54:64:b4:06:02:e8:3a:b7:07:f4:2d:d0:79:a7:e8:
         b7:dc:46:00:74:dd:70:56:5a:c4:0d:23:b5:4f:67:7b:c3:d2:
         1f:46:0d:99:fc:6e:d8:3e:20:33:98:4b:c5:b1:f8:17:74:02:
         db:2c:87:f7:21:30:7c:ea:83:11:9a:88:6f:d7:e0:02:ce:dc:
         a8:f1:0d:a4:03:13:52:e1:ef:56:15:8f:0b:89:5f:e8:c0:54:
         dc:18:ea:fb:eb:fd:13:f1:43:f9:13:55:02:50:67:75:44:89:
         bf:81:c3:49:e0:27:c5:6a:47:31:73:19:cb:dc:ed:78:2d:59:
         e2:41:3e:f5:61:f2:3a:5b:26:5a:75:c7:16:cc:b1:72:27:81:
         8a:a1:a9:26:1f:78:62:a9:38:ec:7d:0d:cf:fa:89:f0:8d:dd:
         fd:2b:d5:6e:62:e1:7b:f1:62:53:f3:f0:52:aa:62:78:7d:f2:
         b3:21:36:2b:30:92:d3:36:2a:26:3a:ea:1e:50:bd:75:9f:07:
         98:19:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org