Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/f6c429baad2dc2b46e05f43c6d2d59340a38934e.roa
File:                     f6c429baad2dc2b46e05f43c6d2d59340a38934e.roa (raw, json)
Hash identifier:          vb4ij6sEhMoPwLBIvG2use0qm4wGStA2sYC6nhkG8E8=
Subject key identifier:   62:FB:5A:4D:20:CC:D5:98:62:E2:79:A9:0C:2E:AA:A1:DA:91:B3:26
Certificate issuer:       /CN=157a25db9af735469f53d350813c53dce014c652
Certificate serial:       047B
Authority key identifier: 20:91:54:6B:D5:D8:CC:6F:EE:A1:06:F7:1B:29:99:AC:62:A6:8B:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/157a25db9af735469f53d350813c53dce014c652.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/f6c429baad2dc2b46e05f43c6d2d59340a38934e.roa
Signing time:             Fri 02 Feb 2024 13:04:15 +0000
ROA not before:           Fri 02 Feb 2024 13:04:15 +0000
ROA not after:            Mon 02 Feb 2026 13:04:15 +0000
asID:                     266653
IP address blocks:        45.227.92.0/22 maxlen: 22
                          2803:8120::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157a25db9af735469f53d350813c53dce014c652
        Validity
            Not Before: Feb  2 13:04:15 2024 GMT
            Not After : Feb  2 13:04:15 2026 GMT
        Subject: CN=f6c429baad2dc2b46e05f43c6d2d59340a38934e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:92:cf:b4:a5:d5:ad:5a:c2:79:1d:eb:1a:
                    85:91:60:71:ff:bd:c7:be:b8:c7:3c:58:9f:4c:b6:
                    2c:b7:c4:63:72:36:33:24:bb:8e:2d:cc:ee:b3:57:
                    71:5e:d3:1c:ca:96:9d:6b:f1:1f:47:45:5a:d3:eb:
                    05:44:65:89:e3:d1:69:34:dd:13:6a:50:95:70:7e:
                    64:66:e8:d2:4f:14:7e:f3:68:80:45:5c:10:0e:9c:
                    7e:44:34:e5:da:36:49:e0:49:09:b4:11:0f:92:3a:
                    20:7d:e4:e4:7e:65:9d:58:43:51:71:bb:ab:2f:27:
                    7a:d8:d3:85:fa:96:fa:57:4d:f6:84:91:c4:24:17:
                    1b:d4:03:a4:a7:fa:f4:6e:5d:b9:51:db:61:00:fb:
                    62:29:80:37:6c:d6:f0:bf:b0:d3:63:01:07:da:fa:
                    fd:2b:40:ed:af:51:03:da:cb:f6:95:c8:3d:66:37:
                    e9:9a:dd:a6:53:e6:15:ac:e8:b5:4f:56:c1:41:9c:
                    d2:3a:47:a1:5b:2b:54:c5:f0:20:bc:9d:04:bf:25:
                    2a:c1:b7:13:8e:77:a1:df:c0:61:c3:50:03:23:5b:
                    7e:e1:c9:54:95:8a:a1:4d:7a:20:c5:a3:20:b3:34:
                    96:66:15:7b:b8:ea:5a:1f:11:f1:59:67:c4:6c:6a:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FB:5A:4D:20:CC:D5:98:62:E2:79:A9:0C:2E:AA:A1:DA:91:B3:26
            X509v3 Authority Key Identifier:
                keyid:20:91:54:6B:D5:D8:CC:6F:EE:A1:06:F7:1B:29:99:AC:62:A6:8B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/157a25db9af735469f53d350813c53dce014c652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/f6c429baad2dc2b46e05f43c6d2d59340a38934e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/157a25db9af735469f53d350813c53dce014c652.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.92.0/22
                IPv6:
                  2803:8120::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:85:8b:b9:fb:79:fe:db:e5:7f:fa:ea:f5:11:3b:b7:da:b9:
         b6:14:a1:71:6f:b3:84:19:31:6a:3b:a7:76:c4:e9:0a:39:01:
         c0:19:8e:64:ce:31:b7:83:17:cd:56:d8:1b:ce:bc:91:45:6b:
         2d:60:5f:22:3f:26:66:1a:0a:3f:c6:04:1d:a4:41:d8:34:07:
         c1:ae:f6:09:31:93:df:0e:7a:99:ea:c3:51:5d:ba:75:b1:58:
         94:30:b0:6d:28:43:e6:d8:76:e9:7a:ce:3c:1b:01:ad:88:ae:
         24:b2:6c:f7:0f:5d:06:7a:15:d2:80:96:3b:a1:77:5f:c0:5b:
         4a:5d:f3:0f:8d:7a:19:7a:4c:ed:d4:1b:2d:27:00:47:5a:c9:
         86:0e:ed:3c:05:e8:99:7e:49:9a:45:8d:8b:96:8e:90:3f:e0:
         f1:c1:34:2c:54:f1:a2:16:ca:25:2b:c0:99:e6:6a:87:94:fd:
         10:aa:5a:24:5a:ab:cc:8a:a9:f9:f8:99:4b:46:26:cb:ac:25:
         38:36:35:10:df:3a:e8:8a:64:d4:a9:35:6d:6f:6e:84:7a:a7:
         48:5b:f8:81:9a:c9:13:dd:a8:6c:23:a0:87:95:07:89:b6:82:
         24:d1:da:8f:4f:c9:e1:13:d2:36:f4:d2:92:df:43:8f:a7:b9:
         e7:e5:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org