Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/fb379205c35be71a7385268afc147e38e3f6a32e.roa
File:                     fb379205c35be71a7385268afc147e38e3f6a32e.roa (raw, json)
Hash identifier:          h2g4d7CTXesQVmhjzUTmDUTgTYwBIR7548V2RrOj694=
Subject key identifier:   AF:E3:1D:12:C5:68:1C:B4:32:0D:AD:D6:AF:12:D3:F2:B1:CF:B0:1B
Certificate issuer:       /CN=7ea7bd7ef6f4501f774846280928efc8eb14dfe7
Certificate serial:       1A217E
Authority key identifier: 79:7F:74:C5:E9:50:E2:65:C0:6B:25:5F:B8:B4:C0:8A:D8:B0:3B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/fb379205c35be71a7385268afc147e38e3f6a32e.roa
Signing time:             Fri 25 Aug 2023 22:39:48 +0000
ROA not before:           Thu 24 Aug 2023 22:39:47 +0000
ROA not after:            Mon 25 Aug 2025 22:39:47 +0000
asID:                     266683
IP address blocks:        45.227.196.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712510 (0x1a217e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea7bd7ef6f4501f774846280928efc8eb14dfe7
        Validity
            Not Before: Aug 24 22:39:47 2023 GMT
            Not After : Aug 25 22:39:47 2025 GMT
        Subject: CN=fb379205c35be71a7385268afc147e38e3f6a32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:ff:57:75:58:2c:fe:3d:c1:6b:ad:4e:d5:
                    42:3a:ae:a6:61:ac:56:12:b0:5e:69:1f:b8:7e:14:
                    88:d8:c4:73:b9:30:11:e0:fd:8b:ba:e2:80:11:cf:
                    3d:b2:d2:73:46:1d:c7:31:67:4d:f4:27:88:e8:33:
                    cf:a6:8e:75:19:ab:f3:83:80:97:bf:a7:89:d5:7b:
                    89:1d:80:a0:5c:84:5a:81:e2:9a:4f:12:e0:d6:85:
                    67:15:52:d9:aa:15:47:da:fd:3c:87:f7:84:26:60:
                    eb:33:4b:4d:47:5a:13:a3:4e:5c:e0:c4:bc:27:59:
                    cc:a2:87:df:82:5f:95:47:88:57:f9:6a:a4:c1:3d:
                    9a:86:ff:d3:3c:7a:d8:3d:73:45:8d:66:4f:9d:28:
                    95:2a:3c:e1:2f:60:b4:04:d7:53:de:07:17:da:2b:
                    3d:d8:dc:07:ee:35:32:cd:94:e5:52:ee:cb:4c:cc:
                    06:e7:70:84:31:f0:f0:7e:d8:1c:b2:00:7b:76:ec:
                    e8:7b:10:ac:8a:13:98:82:0f:9c:e9:08:c8:c6:50:
                    ad:94:c8:fb:10:9c:fa:3e:41:e8:23:c2:25:56:06:
                    2c:bd:8a:c0:52:89:9e:c8:0c:42:9a:0e:78:d3:6a:
                    0c:ec:ba:99:66:2c:af:27:1d:6a:df:d9:44:5f:9f:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E3:1D:12:C5:68:1C:B4:32:0D:AD:D6:AF:12:D3:F2:B1:CF:B0:1B
            X509v3 Authority Key Identifier:
                keyid:79:7F:74:C5:E9:50:E2:65:C0:6B:25:5F:B8:B4:C0:8A:D8:B0:3B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/fb379205c35be71a7385268afc147e38e3f6a32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c4586de-9d4e-4446-92b1-5f64c717dc4e/7ea7bd7ef6f4501f774846280928efc8eb14dfe7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:ff:f1:8d:ed:25:13:24:9d:f0:05:3b:f0:95:4c:3a:f6:
         b3:3f:c5:78:89:b6:c2:c5:91:3e:79:81:d1:dd:bc:e9:81:45:
         b0:cf:7b:7e:c8:76:a3:b7:45:b5:ef:fe:f3:f6:16:ea:9c:4d:
         f4:f8:8b:9a:53:e0:6f:a6:83:6e:69:04:e1:22:ea:2c:99:1c:
         f4:76:59:24:e3:e4:27:ec:18:e2:aa:c2:5d:8f:1a:a3:13:47:
         71:01:1a:35:7c:ac:8f:3e:3b:eb:bd:39:b6:df:a8:38:bc:1e:
         ed:83:1c:27:9c:d4:93:5c:4e:85:00:82:74:c8:b4:4e:f3:e2:
         97:67:9b:91:70:87:2a:d4:9a:2e:13:dc:17:6d:ad:cd:a2:5a:
         21:f7:7f:81:61:4c:8a:c2:b2:6f:1a:e5:fc:05:e6:42:fa:85:
         e9:de:6d:d7:22:fc:23:2f:20:54:7e:c6:0f:58:96:05:ec:20:
         44:a1:5e:0e:9a:66:d4:69:3e:e6:84:cf:92:76:9e:8c:63:43:
         99:0e:c8:40:b8:a2:d0:46:6d:18:ec:22:88:63:0a:d1:42:eb:
         6a:a0:0b:a8:60:22:40:5f:4f:27:fc:88:42:4d:dc:50:1a:4d:
         26:09:8a:c5:65:36:90:be:f7:51:50:e9:8f:7d:dd:47:56:fb:
         da:d5:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org