Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/0e45532742d8685f9825450c572dcbaed631baec.roa
File:                     0e45532742d8685f9825450c572dcbaed631baec.roa (raw, json)
Hash identifier:          sSJiJdii7sfT8hbDLIv8Hy+15y05yKBw/4rUCGCz4rY=
Subject key identifier:   70:CC:40:B9:60:94:95:5E:43:12:87:21:E8:F2:AD:10:C7:4A:DF:75
Certificate issuer:       /CN=5e5ceaadf571a00b99a9944ca5eeab8a563da150
Certificate serial:       24C426
Authority key identifier: 37:6E:61:7C:20:79:1B:E0:13:01:AE:88:A8:5A:F7:82:38:4F:ED:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e5ceaadf571a00b99a9944ca5eeab8a563da150.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/0e45532742d8685f9825450c572dcbaed631baec.roa
Signing time:             Tue 31 Oct 2023 21:47:58 +0000
ROA not before:           Tue 31 Oct 2023 21:47:58 +0000
ROA not after:            Fri 31 Oct 2025 21:47:58 +0000
asID:                     266814
IP address blocks:        45.237.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2409510 (0x24c426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5ceaadf571a00b99a9944ca5eeab8a563da150
        Validity
            Not Before: Oct 31 21:47:58 2023 GMT
            Not After : Oct 31 21:47:58 2025 GMT
        Subject: CN=0e45532742d8685f9825450c572dcbaed631baec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:65:2c:0f:e7:99:a9:b6:59:ce:e2:b8:a2:
                    36:31:fe:29:43:9f:6b:22:9d:7f:ee:7c:04:c0:e6:
                    91:0b:a1:48:c8:3d:4c:f8:a1:01:0f:e9:80:d1:b1:
                    83:77:49:0b:cf:ae:74:38:76:5f:c5:60:38:8a:c9:
                    9f:79:6c:fb:d8:fb:c6:e6:ec:26:42:d8:01:43:3f:
                    b3:d2:1e:74:91:1e:87:74:0b:77:d5:97:86:b3:50:
                    b6:a2:4f:b3:39:ae:ab:46:5e:a5:48:0e:e2:50:34:
                    a9:e6:55:80:bf:cb:c6:61:7f:18:1e:8e:76:34:06:
                    a4:42:f7:0d:22:d9:7c:f8:31:36:22:6e:78:a5:2f:
                    8b:59:93:e3:50:62:67:f0:58:d4:24:1c:5f:ff:84:
                    5c:c7:2a:59:b2:eb:69:46:27:9f:c9:b1:57:1e:40:
                    6f:e0:91:ba:8a:c4:6f:ec:43:e0:b4:1b:32:3d:76:
                    03:6d:6a:0b:a2:34:45:c9:d4:a6:11:f9:87:e5:48:
                    d4:06:ab:4d:d0:24:84:40:70:ad:b0:8e:70:ec:75:
                    b1:02:f2:b1:1c:56:fb:63:b6:f1:98:cd:7f:f5:bb:
                    0c:62:9f:c4:d4:73:07:be:23:85:1a:e3:e1:ed:0d:
                    87:2d:a2:2f:5c:70:2b:c8:92:fb:c9:e9:0f:00:7e:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:40:B9:60:94:95:5E:43:12:87:21:E8:F2:AD:10:C7:4A:DF:75
            X509v3 Authority Key Identifier:
                keyid:37:6E:61:7C:20:79:1B:E0:13:01:AE:88:A8:5A:F7:82:38:4F:ED:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e5ceaadf571a00b99a9944ca5eeab8a563da150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/0e45532742d8685f9825450c572dcbaed631baec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/5e5ceaadf571a00b99a9944ca5eeab8a563da150.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:97:f5:de:d4:5a:91:0c:1a:14:72:25:4a:98:e5:3e:6f:
         e5:ef:8a:6e:09:87:a7:e7:de:e2:2a:2e:27:02:0f:60:a3:9e:
         1e:4b:47:e3:d7:46:ab:fd:e2:4a:0d:7e:b0:23:d4:56:c5:e2:
         2a:88:1b:bd:7a:9b:45:47:58:d2:d7:e6:2e:fb:c8:54:2f:eb:
         44:93:43:30:e3:7b:3a:d7:7c:bb:19:a6:f5:89:fe:6e:32:17:
         ca:1e:cc:f0:60:c7:c6:6f:60:1c:32:a7:f9:09:02:d8:a4:65:
         7b:8b:b8:0a:c4:40:ec:12:27:51:e8:50:b3:9c:62:c8:c9:6c:
         1c:32:e1:af:77:f5:4e:43:27:d2:10:99:fc:20:06:c7:c2:3d:
         fd:26:17:84:64:d6:ef:3b:9a:00:49:6e:f6:a4:49:6e:e1:b9:
         d2:d6:81:bd:c4:4d:bb:0a:c9:a7:76:0c:f2:82:ba:90:ba:d7:
         e6:f8:29:e5:67:96:0b:e8:68:05:5a:6d:18:54:a7:02:6d:7c:
         41:90:e4:45:b8:fc:51:44:b3:bb:37:89:40:8e:35:32:37:60:
         bd:19:56:d7:a6:06:ed:9e:04:b4:52:61:fa:ac:25:6e:e3:c7:
         db:0c:5f:83:d1:d2:ca:b4:9e:86:b3:6a:6b:54:fa:19:a9:54:
         00:67:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org