Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/0219130380e082202572d9e7c80a334e7ef84d65.roa
File:                     0219130380e082202572d9e7c80a334e7ef84d65.roa (raw, json)
Hash identifier:          osceyQ5ExTC8eLUE+6mL19SPZEab/lE+mC3ul40XrM8=
Subject key identifier:   9D:90:83:85:A7:0F:56:76:45:04:3D:00:1D:90:4B:DE:FA:33:5C:94
Certificate issuer:       /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial:       1C9593
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/0219130380e082202572d9e7c80a334e7ef84d65.roa
Signing time:             Fri 24 Nov 2023 11:15:54 +0000
ROA not before:           Fri 24 Nov 2023 11:15:54 +0000
ROA not after:            Mon 24 Nov 2025 11:15:54 +0000
asID:                     11014
IP address blocks:        45.232.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873299 (0x1c9593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
        Validity
            Not Before: Nov 24 11:15:54 2023 GMT
            Not After : Nov 24 11:15:54 2025 GMT
        Subject: CN=0219130380e082202572d9e7c80a334e7ef84d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:9b:3e:4b:cc:99:aa:12:b9:03:c0:a4:cd:
                    d7:6f:09:d2:d0:e8:f6:b7:85:cd:67:e4:11:fb:45:
                    a2:f3:25:ee:d5:80:c2:b4:c9:ce:72:9b:38:12:e5:
                    ed:ed:72:1c:ed:3d:0e:dd:58:47:b8:f4:b4:5e:96:
                    c1:2c:03:03:dd:22:f1:86:df:9c:4a:e0:b5:12:be:
                    f2:8e:0f:8a:37:a6:e1:57:e0:7f:29:86:c7:0a:a6:
                    66:eb:83:37:b6:25:bf:7f:3e:c4:51:8a:d4:e3:ac:
                    fc:88:48:54:ea:f3:e2:ff:f4:49:ee:39:58:97:82:
                    26:e4:21:72:90:98:7f:c2:e0:98:f0:07:cc:16:1f:
                    a7:65:d7:81:0e:59:cf:b4:f4:6b:d0:56:cb:c1:fa:
                    c3:ee:68:a2:63:ec:93:7a:e3:2f:59:7e:d2:e0:63:
                    78:54:a7:6f:51:11:af:12:1d:3e:81:8c:5e:89:61:
                    e5:06:bf:5f:df:b8:cb:ae:af:36:fe:0c:48:42:d4:
                    c2:cb:32:97:b2:2f:da:67:c7:33:09:51:9d:8b:fa:
                    7f:ba:ce:a4:c5:7e:a0:a9:45:cf:77:c4:52:3d:75:
                    ce:d8:9f:c9:1a:03:a0:31:30:c3:76:41:56:96:df:
                    83:48:fd:0c:af:28:b8:25:1b:41:d9:51:13:c1:ae:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:90:83:85:A7:0F:56:76:45:04:3D:00:1D:90:4B:DE:FA:33:5C:94
            X509v3 Authority Key Identifier:
                keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/0219130380e082202572d9e7c80a334e7ef84d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:3f:63:41:e6:6e:b9:41:34:6c:73:2a:75:a2:58:f1:06:
         49:d2:53:14:48:09:ee:bc:b7:f1:64:4a:c5:b2:96:7e:bd:7d:
         c3:2b:0d:2f:57:33:b1:e2:c0:7c:fd:d9:6a:50:af:0d:c8:d8:
         01:3e:35:35:7e:6e:bf:a7:2c:f6:fd:32:6f:5c:e4:bd:3a:d3:
         fe:51:c7:65:47:56:09:37:8b:15:1e:98:ab:a9:da:31:09:1e:
         6d:01:61:60:ad:f9:e0:ab:9b:6b:3e:62:20:87:59:80:bc:1a:
         a3:44:91:fc:c1:70:e9:1c:6e:64:2e:5c:d6:28:ef:c0:56:08:
         e4:a1:50:a6:69:d9:7c:57:17:0a:d8:cb:ae:3d:f3:b0:64:93:
         86:3d:4b:b7:fc:71:64:51:bc:17:a9:31:6e:de:a2:18:52:66:
         d4:45:96:07:2d:57:e1:3a:07:eb:59:5b:8a:f7:63:1d:ad:ef:
         cc:d8:ad:7b:09:a9:59:e2:a8:03:64:ad:0b:c2:9c:c2:e6:b0:
         a0:59:53:d7:b4:c4:6d:ab:8c:1d:58:fe:77:15:7e:c1:3c:ea:
         2e:a0:17:d4:d2:11:05:91:2d:ae:88:a1:4d:f8:f6:83:c7:bc:
         72:a1:fa:31:be:9b:ce:31:64:68:ca:0b:77:e2:28:cf:c3:ba:
         1d:11:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org