Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/996fad88a62a46e3cd1327d47bc7199526476b48.roa
File:                     996fad88a62a46e3cd1327d47bc7199526476b48.roa (raw, json)
Hash identifier:          LzO5ck7ZXkBOaq5ImMDxAQs+m1d6KnbRQfXL1Mnf3co=
Subject key identifier:   7B:4A:F1:75:76:3D:67:D0:72:AD:75:33:5C:9B:0F:6D:F8:42:0B:55
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       15D9B5
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/996fad88a62a46e3cd1327d47bc7199526476b48.roa
Signing time:             Thu 21 Apr 2022 08:30:01 +0000
ROA not before:           Thu 21 Apr 2022 08:30:01 +0000
ROA not after:            Sat 20 Apr 2024 08:30:01 +0000
asID:                     265621
IP address blocks:        45.176.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431989 (0x15d9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: Apr 21 08:30:01 2022 GMT
            Not After : Apr 20 08:30:01 2024 GMT
        Subject: CN=996fad88a62a46e3cd1327d47bc7199526476b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:18:3f:d3:be:6f:00:90:a3:79:29:bc:c7:
                    a5:d7:35:00:07:fb:a1:4b:ee:b6:3f:dc:38:a7:00:
                    eb:28:55:ab:8d:42:34:83:a3:e9:1f:53:1b:4d:40:
                    49:4e:26:8d:dc:d4:d4:ac:74:f6:39:db:d6:d2:ad:
                    bd:42:54:77:4d:4a:62:8d:73:85:25:33:a4:75:a5:
                    16:1c:e3:00:8e:80:86:67:58:31:d8:57:4a:09:4e:
                    21:2e:10:11:0e:c3:6a:ee:63:39:ad:43:f2:a0:57:
                    be:73:9f:47:3e:00:5f:0b:a4:17:f5:a9:b6:82:64:
                    d1:e1:12:8d:26:bd:ce:3c:56:7d:cb:af:cc:c7:95:
                    c1:aa:6e:8d:5b:fe:f5:c5:e8:e0:10:16:cf:ec:d5:
                    b9:a6:74:62:75:0e:8b:69:ff:84:24:9d:9f:37:47:
                    b8:51:a5:b9:b9:b3:6b:82:b1:c0:7e:62:dc:1c:0c:
                    bd:1e:a8:26:24:56:94:ea:2b:22:a9:1f:fb:aa:f3:
                    69:03:c7:62:b4:25:13:17:6e:88:a9:cc:bc:56:df:
                    0d:81:d4:2c:8f:46:32:8c:15:4f:23:96:21:4b:82:
                    d1:51:7f:b0:ad:ad:ed:68:58:31:ea:50:9a:3d:9e:
                    1b:8f:13:bc:7c:da:ce:be:98:28:7a:70:a5:b0:43:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:F1:75:76:3D:67:D0:72:AD:75:33:5C:9B:0F:6D:F8:42:0B:55
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/996fad88a62a46e3cd1327d47bc7199526476b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1b:0f:9a:f9:8c:64:e0:4a:4d:96:13:c3:f0:60:30:22:de:
         a3:33:44:8e:f8:ab:d4:d5:59:3f:3c:7d:33:5e:0c:94:22:24:
         bc:99:34:12:5a:1c:ab:5e:76:20:9e:88:2b:cc:70:c7:a2:48:
         20:f9:29:98:50:ee:07:da:93:7b:6d:af:f8:58:50:ca:99:cc:
         61:92:32:0d:bb:ed:fe:a1:e9:34:54:90:e1:9b:7d:13:9d:1d:
         ed:3b:b3:09:19:12:d1:34:c1:08:c4:58:75:09:23:6b:7a:a6:
         d8:a7:c4:84:00:9b:0e:3d:74:ba:3e:45:33:fc:a7:4f:78:a4:
         06:76:03:7b:f5:d8:3c:f1:75:8c:00:51:6e:23:48:52:ce:a3:
         5c:3b:85:9c:25:65:3e:0f:22:a1:db:cc:f8:36:1b:96:c7:b5:
         97:91:d8:04:5c:81:b9:cf:85:9a:4e:f9:a4:ec:3a:c4:36:1f:
         b1:0a:96:b5:49:4f:e9:6b:70:1a:5c:cf:2f:63:83:74:8a:4c:
         bd:2e:28:5b:21:f9:d4:ee:df:67:a4:3b:74:ea:b8:c0:99:68:
         5b:b6:fe:35:45:e9:3c:d8:a2:3f:2c:3a:1f:57:cc:a4:82:2c:
         9c:8a:80:32:9f:fe:c5:25:e6:b3:70:ee:5d:f0:c2:92:18:5b:
         e2:49:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org