Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134362e302f32332d3234203d3e20323639383332.roa
File:                     34352e3138362e3134362e302f32332d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          G0hIsor2MR2F3PoTLc0BxU5VhQu+WLYwqJ+L6HsazrQ=
Subject key identifier:   EF:A9:51:81:CE:F7:9D:73:5A:12:33:1C:60:C2:51:F7:3B:6C:F1:B4
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       2B14C888EFB8D26C9ADC7488BF301A78C6C1358B
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134362e302f32332d3234203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:30 +0000
ROA not before:           Tue 05 Mar 2024 17:52:30 +0000
ROA not after:            Tue 04 Mar 2025 17:57:30 +0000
asID:                     269832
IP address blocks:        45.186.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:c8:88:ef:b8:d2:6c:9a:dc:74:88:bf:30:1a:78:c6:c1:35:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:30 2024 GMT
            Not After : Mar  4 17:57:30 2025 GMT
        Subject: CN=EFA95181CEF79D735A12331C60C251F73B6CF1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:82:8c:ef:52:e9:02:27:ee:89:dd:37:d4:
                    01:a8:04:d8:bf:9a:49:32:a6:ac:a6:62:bc:e9:0f:
                    9e:47:97:73:a5:57:78:aa:20:a6:2f:1a:d1:e9:63:
                    20:a3:8a:e9:41:31:79:60:48:58:ac:d4:19:a4:13:
                    2f:95:c7:0c:14:ab:72:3d:20:66:58:e9:52:b1:24:
                    44:09:ee:d7:8c:af:0c:9c:31:f7:ef:2e:b2:9b:9f:
                    cd:8f:ef:44:83:c7:13:0f:bf:99:2a:5b:2f:a6:00:
                    75:62:41:82:14:a1:2f:86:07:32:8c:fb:8e:f9:41:
                    a7:d9:40:b2:ab:7d:dc:bb:28:1c:f0:ac:89:83:35:
                    4d:15:41:36:97:34:df:ad:fe:72:ab:28:9d:4e:00:
                    c4:33:e2:2b:0a:c4:5c:84:52:37:c9:33:ac:85:36:
                    f2:23:df:dd:cf:36:85:93:e6:6a:c3:42:7f:04:7b:
                    cf:0a:6b:b3:01:9b:73:07:5f:59:e6:15:3a:a8:86:
                    fe:cf:f1:e7:5f:9b:ed:a2:00:86:96:b5:bf:12:6f:
                    eb:76:6c:30:22:1b:f9:fd:8c:3f:5e:3b:79:f2:1b:
                    b3:79:7d:46:3b:ce:82:40:f7:57:4e:75:be:38:d5:
                    32:32:1d:b8:f9:b4:04:d5:9d:8c:49:ec:5d:bd:e5:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:51:81:CE:F7:9D:73:5A:12:33:1C:60:C2:51:F7:3B:6C:F1:B4
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134362e302f32332d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:a7:c3:41:da:19:af:3d:50:7c:22:f0:6e:fe:20:a0:05:
         29:ee:41:86:db:42:9e:57:ea:21:3c:1b:78:e4:9c:86:74:55:
         a3:b5:22:eb:f4:f9:0a:33:e5:f7:61:f1:56:a7:bc:ce:6a:c1:
         d4:a8:c6:28:38:d4:86:3c:69:07:fa:d1:0f:79:4a:f9:50:6b:
         61:f3:93:ff:14:6c:e2:83:82:38:1d:53:d2:dc:56:09:4b:c6:
         bb:fd:2b:b6:dc:23:5f:0a:51:66:5d:d7:03:73:03:9b:de:b4:
         6b:b8:ed:e1:fb:f2:a3:54:ff:e2:09:96:00:5f:46:e1:d2:a6:
         5f:23:91:77:e7:44:dc:78:b4:6f:9c:28:f9:ad:39:62:cb:49:
         1e:c0:fa:2f:aa:86:bd:8a:f6:da:ec:9f:b3:c1:fa:35:b7:33:
         c5:96:94:81:16:da:b0:90:c3:4e:84:ca:f3:73:19:a2:3f:62:
         a9:35:97:ee:aa:12:e0:c9:47:fd:d8:51:86:69:7e:c7:a0:6f:
         81:9b:98:ba:81:70:42:ed:74:fe:1b:7d:ae:df:9a:6c:de:75:
         c5:c6:1e:8f:d4:03:bd:a9:6a:a0:2c:66:4c:1a:b7:08:d1:34:
         8f:12:cb:b2:d9:0f:24:ae:2d:52:93:de:6b:83:52:da:b8:cf:
         f5:61:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:59:47 2024 by rpki-client on console-fra.rpki-client.org