Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/9ef7415e009863eb6473859bc9eb754390a67457.roa
File:                     9ef7415e009863eb6473859bc9eb754390a67457.roa (raw, json)
Hash identifier:          wW1a3+2OjvyaHzbyjLxJKzwo7jtFwWst+iSXKrp4YOA=
Subject key identifier:   A5:4C:9C:73:4E:2A:56:2C:F6:88:C3:AC:67:7A:64:00:E5:F1:4B:E5
Certificate issuer:       /CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
Certificate serial:       1F5EA6
Authority key identifier: 40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/9ef7415e009863eb6473859bc9eb754390a67457.roa
Signing time:             Mon 08 May 2023 16:19:34 +0000
ROA not before:           Sun 07 May 2023 16:19:34 +0000
ROA not after:            Thu 08 May 2025 16:19:34 +0000
asID:                     265867
IP address blocks:        45.225.70.0/23 maxlen: 24
                          45.225.74.0/24 maxlen: 24
                          2803:3620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055846 (0x1f5ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
        Validity
            Not Before: May  7 16:19:34 2023 GMT
            Not After : May  8 16:19:34 2025 GMT
        Subject: CN=9ef7415e009863eb6473859bc9eb754390a67457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:2e:4c:4e:03:a1:08:b1:83:9e:53:c5:32:
                    de:e4:91:23:10:cb:c3:69:6e:1f:0c:1d:ab:78:55:
                    89:67:dd:74:9d:b8:ec:0c:cb:38:7e:e5:96:96:88:
                    e5:dd:94:a0:0f:8e:46:06:c5:e4:b0:18:b5:34:28:
                    b3:dd:e5:c0:9b:bf:90:b9:03:7f:e1:5e:76:f7:f1:
                    b9:66:32:28:2f:f6:a0:10:52:82:1e:53:d3:d9:5e:
                    70:55:9b:e6:b4:6e:b3:45:8e:f5:4e:96:9e:02:dd:
                    8c:15:57:b1:46:a3:3d:f9:87:8d:91:a6:aa:37:b8:
                    30:4a:11:78:3c:35:71:8a:73:3a:fa:1a:3a:6e:aa:
                    a1:68:61:66:c3:e2:8d:40:50:19:7d:31:95:36:2d:
                    a8:2d:f5:18:23:c7:1f:98:4d:a8:f6:22:10:a4:af:
                    68:aa:91:d8:6f:68:f3:0d:c6:d8:d7:40:23:a7:c5:
                    ab:4e:53:86:84:43:b6:6e:4f:79:48:29:58:9d:7a:
                    83:63:aa:d4:d5:1a:40:af:eb:b2:14:2d:20:3c:0a:
                    4f:73:3d:ba:90:ec:90:82:87:d4:8a:dc:10:34:a0:
                    14:73:ce:44:a2:61:f4:4f:86:af:65:43:ee:8d:ab:
                    5f:dc:94:4c:33:c5:fc:59:dd:39:a8:ab:2c:1c:38:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4C:9C:73:4E:2A:56:2C:F6:88:C3:AC:67:7A:64:00:E5:F1:4B:E5
            X509v3 Authority Key Identifier:
                keyid:40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/9ef7415e009863eb6473859bc9eb754390a67457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/e968e7767f9eef64694a8a23c6caf72aa6d20432.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.70.0/23
                  45.225.74.0/24
                IPv6:
                  2803:3620::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:f5:74:af:54:32:73:47:89:8c:15:54:d2:70:15:15:c8:
         27:e0:49:e9:38:d4:75:ec:f6:8a:55:f5:95:ff:c6:ff:e0:69:
         b7:ab:ae:43:f6:1b:ab:c5:f7:31:c4:3f:5c:13:37:34:3f:58:
         1c:5f:0b:b2:73:17:23:95:ea:9a:ae:fd:80:62:03:8f:e7:bf:
         2a:3d:e2:7b:ca:7e:5e:e2:2d:c1:4e:10:06:ea:b2:12:9e:0a:
         e7:6e:06:8e:e7:cc:79:04:5f:42:bc:91:62:af:3e:2b:53:fe:
         72:c8:7e:e4:f3:23:3a:17:95:58:ad:9f:f7:db:6a:3d:0a:05:
         04:96:ab:b9:2c:42:c4:5c:fb:17:dc:06:bb:3b:36:a4:39:12:
         e7:49:5b:01:68:58:b5:33:d5:b8:4c:a5:6c:70:f5:8f:17:d6:
         7f:11:5e:2c:90:e4:09:89:79:2d:af:45:03:74:73:fe:47:09:
         11:34:07:01:5d:c0:75:39:4f:75:19:c5:85:f9:0c:76:62:93:
         bb:ed:11:24:11:f8:59:66:ee:cf:82:d5:2e:84:de:e4:1c:de:
         4b:25:34:7b:f0:b8:44:8b:b9:1e:b4:6e:cd:a2:35:5c:f8:33:
         65:ba:e3:ed:a6:c7:04:18:a6:4f:a7:54:87:95:1c:13:d5:46:
         20:df:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org