Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/ce1ba47ea05fd73d5bd3a1206cb4239279fbfe8b.roa
File:                     ce1ba47ea05fd73d5bd3a1206cb4239279fbfe8b.roa (raw, json)
Hash identifier:          odgfNwKoZZf7+BiQ0nj5wkltYldxpsYuF7Yekv1/m+A=
Subject key identifier:   E6:1E:A0:23:52:00:D6:61:8E:70:29:92:87:0A:55:04:02:D2:83:12
Certificate issuer:       /CN=76d90377efbc90b9ba21fd3765577bd78777c12d
Certificate serial:       03CE
Authority key identifier: B0:E6:B7:21:B4:02:CF:1E:48:FF:EE:9B:71:C6:C9:4C:2E:68:B5:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76d90377efbc90b9ba21fd3765577bd78777c12d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/ce1ba47ea05fd73d5bd3a1206cb4239279fbfe8b.roa
Signing time:             Sat 03 Jun 2023 16:12:06 +0000
ROA not before:           Fri 02 Jun 2023 16:12:05 +0000
ROA not after:            Tue 03 Jun 2025 16:12:05 +0000
asID:                     265816
IP address blocks:        45.165.154.0/23 maxlen: 23
                          45.167.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d90377efbc90b9ba21fd3765577bd78777c12d
        Validity
            Not Before: Jun  2 16:12:05 2023 GMT
            Not After : Jun  3 16:12:05 2025 GMT
        Subject: CN=ce1ba47ea05fd73d5bd3a1206cb4239279fbfe8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:25:1a:05:9f:07:1d:bc:eb:0c:63:39:fc:
                    f5:a3:c0:b0:15:72:e1:c3:e3:d7:88:27:f4:dd:02:
                    70:ff:46:a6:81:b1:79:f2:4e:29:ec:3c:7c:7c:2c:
                    2d:ca:f6:ed:f4:6f:fb:41:9e:ae:ca:47:a4:70:e6:
                    1b:34:32:2b:8d:83:56:9d:f9:44:ee:c8:e7:f4:1d:
                    c4:e9:8f:80:55:b8:96:a6:d8:13:ad:5f:a4:43:00:
                    aa:5b:72:bb:80:50:41:ae:52:53:07:86:00:35:69:
                    d7:61:16:f4:d2:7b:b3:4e:13:6b:f7:72:a7:53:0e:
                    14:45:92:b4:1b:fa:67:0a:28:75:47:2b:9a:c7:fa:
                    7b:0a:b4:6b:4f:2d:95:bd:33:81:63:9c:54:a0:74:
                    e9:e7:51:62:ba:f2:ca:31:e5:5e:ca:a0:35:d9:24:
                    c5:3c:17:34:6a:0b:d2:55:48:92:4a:19:de:90:1a:
                    5d:4e:a1:e8:7c:73:57:d5:51:26:5c:b4:58:04:fb:
                    0c:86:e8:31:7b:ae:9a:04:2e:aa:ac:f8:9f:dd:32:
                    87:ae:dd:fb:22:b2:80:fa:a0:31:22:10:b1:2c:85:
                    e8:85:86:c3:e4:73:37:18:e5:dc:02:79:f2:5c:2c:
                    ec:b7:93:27:de:a2:57:32:f3:9e:ac:e4:65:85:11:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1E:A0:23:52:00:D6:61:8E:70:29:92:87:0A:55:04:02:D2:83:12
            X509v3 Authority Key Identifier:
                keyid:B0:E6:B7:21:B4:02:CF:1E:48:FF:EE:9B:71:C6:C9:4C:2E:68:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76d90377efbc90b9ba21fd3765577bd78777c12d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/ce1ba47ea05fd73d5bd3a1206cb4239279fbfe8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/76d90377efbc90b9ba21fd3765577bd78777c12d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.154.0/23
                  45.167.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:2f:c6:49:2c:9b:9f:3e:9c:f4:2d:b3:a4:9c:35:5e:e1:
         4c:08:b2:fb:fe:ab:86:ae:80:46:eb:c3:4d:85:79:67:9c:96:
         fe:4c:36:e4:7e:78:be:e2:92:85:89:8d:0e:bd:5c:ad:b6:1b:
         05:b6:0d:e4:1f:53:29:ee:f5:79:9a:cb:e5:96:c8:b4:d3:cc:
         81:44:75:61:34:9a:31:3d:f6:43:89:4c:c3:78:ae:e2:8d:a5:
         ce:26:ea:fb:13:46:d5:f2:c7:f3:16:e6:77:45:e5:9e:7f:a4:
         f7:c5:45:37:cd:8d:10:e7:36:68:d1:43:0e:69:23:f8:4f:ad:
         13:65:bd:0e:d9:fb:78:ef:22:0e:1a:07:62:45:1f:98:6b:c6:
         ae:11:75:4b:56:cb:c1:a9:d2:ad:95:0e:2e:7f:ea:dd:e3:74:
         ef:0f:31:ba:42:9d:e4:06:87:4a:1a:76:ab:ac:44:c2:2b:13:
         5a:60:95:5b:d4:33:75:00:d8:60:bc:8e:7c:84:72:8c:db:5b:
         eb:7a:7a:d4:a0:fc:f9:19:6c:57:47:b0:a2:2e:f1:f7:c1:71:
         4b:54:54:33:e8:35:60:be:39:00:f5:18:98:77:8f:45:65:97:
         de:a3:63:dc:b1:02:af:11:1c:e2:be:fd:69:a2:9a:ee:14:0e:
         c8:37:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org