Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/a43040d10ae5760724ab781d0714435bb06f6ab7.roa
File:                     a43040d10ae5760724ab781d0714435bb06f6ab7.roa (raw, json)
Hash identifier:          GUZ3NECA1BKr9DiCqJRRhUgs+gS/64yW94N69uFr6gQ=
Subject key identifier:   C6:23:81:08:10:E4:31:45:52:55:AF:C3:1D:47:71:F8:5B:F7:74:33
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       1FDE6B
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/a43040d10ae5760724ab781d0714435bb06f6ab7.roa
Signing time:             Sun 14 May 2023 15:57:24 +0000
ROA not before:           Sat 13 May 2023 15:57:21 +0000
ROA not after:            Wed 14 May 2025 15:57:21 +0000
asID:                     272812
IP address blocks:        45.176.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088555 (0x1fde6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: May 13 15:57:21 2023 GMT
            Not After : May 14 15:57:21 2025 GMT
        Subject: CN=a43040d10ae5760724ab781d0714435bb06f6ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:f6:2b:18:7e:09:8a:c8:45:6c:df:e7:6d:
                    38:9c:37:e3:eb:05:9a:65:c9:4d:07:54:15:ff:8f:
                    49:7a:be:e3:61:34:7d:0a:06:a4:15:a2:d6:ae:b0:
                    62:55:a6:5c:17:b1:8f:6e:38:90:64:da:d0:6a:0d:
                    9a:b2:22:9d:2a:f0:00:9b:b4:75:71:a8:f7:29:52:
                    e9:73:55:32:ee:08:76:98:93:8b:41:c9:64:70:52:
                    5d:ae:c3:ae:59:fa:44:af:b1:6d:40:81:fd:5d:ad:
                    7e:05:99:cb:58:8b:21:26:ef:75:5a:78:80:32:da:
                    19:af:b2:61:31:e0:43:21:ab:43:1b:05:ef:02:f3:
                    ef:5f:e9:b8:e3:2e:fa:43:16:90:30:e5:f2:d9:e2:
                    28:aa:99:88:24:aa:f5:23:36:67:4f:b5:1e:4a:98:
                    b1:a8:b0:59:0a:2b:b9:c2:54:ff:7b:04:6d:e7:5d:
                    4e:18:37:f9:7c:f4:da:b1:de:b1:9d:d6:c3:db:09:
                    2e:8b:15:ce:43:a9:60:74:c0:aa:55:f7:ba:b0:7a:
                    33:58:38:3c:44:bd:28:92:03:72:96:63:26:90:4c:
                    25:9b:ad:75:73:45:f1:f2:53:d9:cf:a7:8d:38:f8:
                    ce:73:66:8f:f7:ed:cf:dd:d2:bf:de:ea:1c:14:09:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:23:81:08:10:E4:31:45:52:55:AF:C3:1D:47:71:F8:5B:F7:74:33
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/a43040d10ae5760724ab781d0714435bb06f6ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:26:d0:b1:e9:c6:b8:e8:09:55:17:25:ac:bb:7c:01:41:90:
         1e:97:7a:9c:b7:5b:01:67:63:1d:e8:db:2f:22:52:8a:99:20:
         38:5c:12:c5:e2:4e:c1:40:25:8a:28:02:26:dc:28:f4:0f:92:
         0c:8a:cd:ef:8d:0c:70:e2:e4:15:0d:70:2c:35:f0:d6:6d:6c:
         8c:60:c0:0b:69:4b:36:97:49:11:54:64:f4:56:20:17:98:a1:
         e5:a5:22:cd:6c:e0:87:33:1b:b0:23:70:f2:e4:59:83:02:58:
         49:ae:b7:d6:f9:2e:e4:d8:8c:cb:8d:f2:03:17:0a:22:e0:8d:
         1c:2e:d6:2c:89:89:25:27:7c:98:a3:20:85:c3:bb:d1:f7:76:
         a2:17:86:c2:32:ae:09:14:b9:19:81:8b:85:cf:59:ec:dd:52:
         8a:6e:97:94:cd:d5:3b:f3:f7:eb:08:fd:ae:57:a1:cb:50:84:
         0c:bb:61:00:19:dd:25:93:fc:da:d1:cb:74:e3:23:90:39:1b:
         a5:45:3a:4d:b7:67:20:86:4c:84:61:19:eb:79:24:ea:b5:57:
         30:c8:d6:dd:e2:1d:1b:61:ab:72:a3:8b:0a:8d:5e:19:c4:9e:
         ec:b4:1d:35:56:85:e3:0f:a0:a6:2f:08:4a:9a:7b:a6:b5:29:
         a7:c0:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org