Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/34352e3137372e35352e302f32342d3234203d3e20323637393137.roa
File:                     34352e3137372e35352e302f32342d3234203d3e20323637393137.roa (raw, json)
Hash identifier:          kOXPVGVump/16XxXwSXa6Vq5tATVmpr0RhpgKCYivLY=
Subject key identifier:   C7:1B:D4:10:7A:0E:4F:F0:75:B2:2B:A2:65:23:24:DB:96:65:2E:46
Certificate issuer:       /CN=A0184F16CA92E9A0F0859AD5AF789D01612118FC
Certificate serial:       1AC624CBFAE24203F2C345ACA5AC0D1109F4EB15
Authority key identifier: A0:18:4F:16:CA:92:E9:A0:F0:85:9A:D5:AF:78:9D:01:61:21:18:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0184F16CA92E9A0F0859AD5AF789D01612118FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/34352e3137372e35352e302f32342d3234203d3e20323637393137.roa
Signing time:             Tue 05 Mar 2024 18:04:11 +0000
ROA not before:           Tue 05 Mar 2024 17:59:11 +0000
ROA not after:            Tue 04 Mar 2025 18:04:11 +0000
asID:                     267917
IP address blocks:        45.177.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c6:24:cb:fa:e2:42:03:f2:c3:45:ac:a5:ac:0d:11:09:f4:eb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0184F16CA92E9A0F0859AD5AF789D01612118FC
        Validity
            Not Before: Mar  5 17:59:11 2024 GMT
            Not After : Mar  4 18:04:11 2025 GMT
        Subject: CN=C71BD4107A0E4FF075B22BA2652324DB96652E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:41:5c:12:1e:c8:1e:ac:c8:65:64:ac:c6:
                    f5:3b:a6:23:48:b8:eb:7a:0c:28:7a:61:72:01:d8:
                    d0:fa:fa:2b:7b:b9:f8:09:41:46:df:52:d2:3b:3e:
                    91:d1:cb:0c:80:b0:f6:0d:33:56:12:26:81:1c:6f:
                    26:e0:18:e5:a4:c4:7f:5f:fc:ed:ea:2e:62:6d:a1:
                    e5:4d:f8:d8:68:c5:d2:a4:83:61:39:7f:0c:50:cc:
                    a4:c9:8e:e7:d5:be:fb:46:d6:73:06:15:3f:71:d5:
                    7b:58:ee:79:dc:01:45:1b:0f:27:e1:55:07:c7:cf:
                    bd:23:5e:e3:63:66:ce:75:ff:09:22:24:0e:a6:ec:
                    68:e3:e7:16:44:75:0c:67:a8:6f:d6:cb:7f:e1:97:
                    aa:54:d8:61:09:e6:44:8d:a9:d0:d0:98:f0:57:2b:
                    fa:52:75:8b:e6:cd:7a:df:f6:50:74:2a:40:da:96:
                    51:a5:ae:64:fc:be:9c:b5:b7:c6:f5:5b:13:3a:21:
                    27:ca:3a:38:2e:7c:01:de:2d:90:21:12:9a:68:b7:
                    f1:c1:1d:d2:2b:bd:fd:ad:42:f9:73:78:a1:3d:7c:
                    84:ca:a6:d2:b8:57:b0:df:e1:0d:26:8d:df:41:14:
                    d4:9b:15:f6:bf:df:35:44:23:9d:d4:48:01:31:0a:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1B:D4:10:7A:0E:4F:F0:75:B2:2B:A2:65:23:24:DB:96:65:2E:46
            X509v3 Authority Key Identifier:
                keyid:A0:18:4F:16:CA:92:E9:A0:F0:85:9A:D5:AF:78:9D:01:61:21:18:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/A0184F16CA92E9A0F0859AD5AF789D01612118FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0184F16CA92E9A0F0859AD5AF789D01612118FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/34352e3137372e35352e302f32342d3234203d3e20323637393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:b4:80:9a:a6:95:38:ec:1e:ce:8e:c8:49:cc:89:41:07:
         ee:0a:d8:ec:b5:87:43:f6:5b:8f:b8:e9:f7:f4:51:97:a8:a3:
         cd:d5:90:64:04:bf:5e:16:40:d6:4e:76:e9:07:fc:1f:42:fc:
         52:da:5d:72:2b:d5:97:65:e5:3d:d2:9c:a9:6c:a5:5b:61:75:
         d9:99:36:0f:03:a6:c0:66:80:3e:2f:92:5a:1c:53:f1:cb:1d:
         08:3f:a9:76:5c:c9:b9:a6:a9:ed:60:d8:ee:30:c0:92:b5:9c:
         3d:18:89:17:61:9e:d2:4e:53:08:fa:54:af:51:da:f7:13:0a:
         83:55:4e:e5:40:78:e5:32:55:9a:3d:9d:ad:d6:6f:38:90:50:
         61:42:22:39:cc:4e:be:78:9d:78:04:b2:81:48:3d:52:a5:13:
         52:8a:fd:fb:f3:73:0c:fa:13:6d:35:e5:78:64:e4:ea:13:74:
         3c:ed:84:90:b4:f8:b0:bc:16:3e:d2:19:43:f4:de:1b:53:3a:
         6a:be:29:82:72:7d:a6:8f:62:6d:96:fe:b1:2a:d3:06:a1:ea:
         19:9d:7c:57:d4:c2:b5:ae:c7:5d:bf:0e:7e:f0:36:91:52:b9:
         32:15:7e:63:ff:d6:f3:0c:88:42:11:c9:35:31:9e:a2:9c:99:
         b8:44:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 14:36:36 2024 by rpki-client on console-fra.rpki-client.org