Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/35b757071bd527233b99c94aa915c653cd1cf2df.roa
File:                     35b757071bd527233b99c94aa915c653cd1cf2df.roa (raw, json)
Hash identifier:          Af6SoXJ3sssVI3BPaOEcmWOsQupQW47jXkBmHikLk7w=
Subject key identifier:   63:EC:EF:24:A6:5A:3B:88:BE:5F:E2:84:F9:A5:58:39:AB:09:16:43
Certificate issuer:       /CN=1d62648247a07842830526428e27c3af77e158dd
Certificate serial:       10C6
Authority key identifier: 5D:CF:93:2E:84:94:C3:FB:CE:F2:7E:C9:40:C0:AC:68:8F:94:A2:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d62648247a07842830526428e27c3af77e158dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/35b757071bd527233b99c94aa915c653cd1cf2df.roa
Signing time:             Thu 13 Oct 2022 10:39:32 +0000
ROA not before:           Mon 10 Oct 2022 10:30:29 +0000
ROA not after:            Sun 13 Oct 2024 10:30:29 +0000
asID:                     265554
IP address blocks:        45.163.120.0/24 maxlen: 24
                          45.163.121.0/24 maxlen: 24
                          45.163.122.0/24 maxlen: 24
                          45.163.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4294 (0x10c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d62648247a07842830526428e27c3af77e158dd
        Validity
            Not Before: Oct 10 10:30:29 2022 GMT
            Not After : Oct 13 10:30:29 2024 GMT
        Subject: CN=35b757071bd527233b99c94aa915c653cd1cf2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:97:f7:c9:e5:4c:72:86:33:52:03:56:10:
                    39:bf:3c:50:48:6c:b8:15:1b:43:31:91:d8:57:70:
                    66:3a:8b:b6:fd:40:cc:7e:e3:a7:36:c0:dc:9f:64:
                    55:ec:3f:e4:fc:ec:37:c9:31:1c:eb:92:22:5c:e2:
                    e9:79:41:82:1e:7d:a4:46:b3:46:37:c1:b7:d5:8b:
                    6e:ee:9b:6b:22:c0:3a:d1:11:88:8a:49:11:1e:f7:
                    cd:a6:ee:e9:0b:17:87:14:d6:52:88:4e:f3:d6:70:
                    c4:dc:32:5b:98:8c:7a:27:b8:90:3a:ab:21:64:a9:
                    07:b1:27:01:6b:c9:35:4d:a6:ec:74:1e:4d:ef:70:
                    e9:e2:a6:83:46:55:db:36:1a:d8:ff:9e:b9:1b:60:
                    8b:dd:03:05:0d:6e:58:ac:09:42:9b:0b:86:aa:a8:
                    ba:b3:23:17:14:b1:41:9e:17:c4:ec:ed:25:ba:ec:
                    28:87:f6:92:4d:0b:57:64:85:ee:14:0e:82:8a:ae:
                    fe:00:31:a3:9e:eb:2d:a2:1f:3d:95:47:2a:7c:13:
                    29:c9:eb:56:6d:15:b9:bb:9d:15:f5:c5:80:da:7d:
                    79:50:a1:cc:88:95:41:47:c9:cf:3c:41:f3:73:f6:
                    28:e0:a5:4e:33:cd:b9:56:3d:22:81:60:ae:9a:6a:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EC:EF:24:A6:5A:3B:88:BE:5F:E2:84:F9:A5:58:39:AB:09:16:43
            X509v3 Authority Key Identifier:
                keyid:5D:CF:93:2E:84:94:C3:FB:CE:F2:7E:C9:40:C0:AC:68:8F:94:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d62648247a07842830526428e27c3af77e158dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/35b757071bd527233b99c94aa915c653cd1cf2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b9e4891-891f-4dd4-87a7-4377f41bdde3/1d62648247a07842830526428e27c3af77e158dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d6:95:86:fe:21:ff:e3:4c:11:54:5c:11:64:c3:88:3a:71:
         68:e1:33:1f:42:26:4c:66:26:f3:4a:e9:52:2d:e7:0a:20:cb:
         c5:c3:a9:d3:02:dd:ec:b9:0c:3c:18:6a:7a:82:f8:8e:ec:fe:
         62:f8:6a:d2:39:e7:04:c0:be:12:1d:1d:d9:0a:43:a7:88:69:
         cb:85:e2:4c:85:e9:a6:cb:37:7e:00:bc:9a:f0:40:63:ae:c1:
         0b:25:ff:ae:5a:a6:b2:bc:85:74:5e:21:f7:c3:f8:9f:3d:19:
         84:fe:2a:17:23:10:56:47:68:f1:52:7f:a3:78:7d:d8:d9:09:
         9c:22:3c:60:8c:60:ed:25:ef:93:29:b9:e4:64:dc:52:97:66:
         01:85:c6:d0:c2:4a:b1:ae:f5:e7:f0:17:3b:90:9f:74:1a:b7:
         f3:cb:e7:ed:89:c9:30:28:3f:b9:a6:93:97:25:da:d2:63:0a:
         33:49:a1:a7:85:ca:75:04:39:fa:10:fa:3e:7f:5b:43:83:91:
         e7:6e:01:50:e2:cc:c5:d1:28:54:e7:92:65:2e:0b:58:a8:ed:
         11:f9:0d:29:67:36:ba:37:a5:d0:c5:6a:94:86:15:98:ea:bc:
         f8:f3:cd:4f:5b:4d:15:cc:24:22:47:ca:5c:47:13:88:d4:65:
         12:8d:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org