Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acb28665-6f2f-48dc-9d1f-4ee16e75386c/ffdb6b706e0f5d332c36f019ac668137968d88dc.roa
File:                     ffdb6b706e0f5d332c36f019ac668137968d88dc.roa (raw, json)
Hash identifier:          3k8OJ6nZcYRGYPgwCr5Ul5ToQmHrOIPcuYFScyo4Shs=
Subject key identifier:   72:66:9D:D6:2C:54:DA:2F:68:EA:BE:5F:19:1A:A5:A8:E9:A8:39:90
Certificate issuer:       /CN=f1f454148069974b6df97a2b45da0af08228e933
Certificate serial:       111888
Authority key identifier: DD:E6:37:79:B7:D9:67:8A:67:B4:20:DC:F4:FA:E5:F4:FB:EC:26:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1f454148069974b6df97a2b45da0af08228e933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acb28665-6f2f-48dc-9d1f-4ee16e75386c/ffdb6b706e0f5d332c36f019ac668137968d88dc.roa
Signing time:             Mon 02 Oct 2023 15:35:41 +0000
ROA not before:           Sun 01 Oct 2023 15:35:41 +0000
ROA not after:            Thu 02 Oct 2025 16:35:41 +0000
asID:                     263761
IP address blocks:        45.166.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120392 (0x111888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f454148069974b6df97a2b45da0af08228e933
        Validity
            Not Before: Oct  1 15:35:41 2023 GMT
            Not After : Oct  2 16:35:41 2025 GMT
        Subject: CN=ffdb6b706e0f5d332c36f019ac668137968d88dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:da:34:85:c9:45:ae:76:70:60:b3:dd:4f:
                    b0:ef:5e:79:df:f4:34:b0:0e:0a:a9:97:cb:30:e9:
                    fd:ef:6b:b3:61:f6:18:64:46:94:37:e7:c5:9e:97:
                    be:c2:4b:0f:29:99:be:6e:48:99:af:50:19:f4:bc:
                    ae:44:fc:90:8a:6c:0e:86:14:3f:7b:79:61:2d:1a:
                    1f:15:4f:af:d4:ae:e7:fc:9a:36:b6:56:a9:fa:d0:
                    a1:d2:85:1b:5b:af:37:cf:b6:88:8d:c8:1b:c2:d8:
                    ee:e2:9a:a0:0d:53:d2:d8:07:44:07:08:3c:ea:28:
                    80:94:ce:8c:b7:ea:61:6f:a8:11:c7:54:c0:94:0d:
                    de:43:b6:0e:17:12:f3:e9:65:90:c9:c5:0e:2d:4c:
                    39:36:5d:89:dc:b5:ef:72:0d:5a:74:48:eb:b8:b9:
                    29:8a:e7:71:10:c2:f6:e8:18:1f:7d:fa:60:dc:c7:
                    d3:4f:48:5f:35:d6:bc:75:53:7e:e7:c3:fc:2f:5b:
                    b9:a1:7e:d6:7d:35:a4:80:72:2c:e3:08:e1:31:2f:
                    89:4a:c3:bf:1c:a8:fc:72:4c:8a:bb:b5:33:8d:2c:
                    1a:85:48:f9:d5:6c:4b:39:a7:27:0b:44:e7:0a:0f:
                    d8:56:f6:c1:cb:bd:5f:95:77:c6:e3:eb:02:c8:d8:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:66:9D:D6:2C:54:DA:2F:68:EA:BE:5F:19:1A:A5:A8:E9:A8:39:90
            X509v3 Authority Key Identifier:
                keyid:DD:E6:37:79:B7:D9:67:8A:67:B4:20:DC:F4:FA:E5:F4:FB:EC:26:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1f454148069974b6df97a2b45da0af08228e933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acb28665-6f2f-48dc-9d1f-4ee16e75386c/ffdb6b706e0f5d332c36f019ac668137968d88dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acb28665-6f2f-48dc-9d1f-4ee16e75386c/f1f454148069974b6df97a2b45da0af08228e933.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:f8:a0:97:1c:20:f1:99:41:44:16:93:60:22:64:dc:3b:
         f7:8d:fc:8a:ca:fe:cd:31:c1:ab:67:49:16:40:1e:16:4d:63:
         f9:9c:82:f2:3a:a2:26:47:19:2f:f4:58:aa:80:4a:4e:e1:3d:
         75:37:cf:1f:4f:0f:4b:b8:bd:2d:e2:5b:4b:bf:53:53:95:c8:
         ac:81:32:d6:65:0f:13:91:09:57:b2:35:42:2f:48:fe:d5:25:
         1f:af:e1:89:6e:d3:cf:36:fa:8b:81:03:99:a8:76:61:d8:a4:
         b8:13:09:d6:07:96:48:20:d0:bc:9d:9f:da:2c:4a:99:99:bd:
         46:a8:8d:11:86:5a:13:fc:63:81:38:44:f8:91:47:86:88:1d:
         e1:d3:19:55:90:90:fb:b7:46:ee:75:36:ef:6e:a6:7f:2b:6d:
         bb:9f:e6:dd:5c:03:cc:86:ea:02:c3:09:d2:d1:51:f7:9d:09:
         26:8d:b5:9c:64:82:c0:0c:4e:cf:0f:14:bd:93:4f:12:b4:08:
         6d:a6:7a:a7:35:b6:52:1a:96:28:ab:4f:8a:6b:d9:04:25:a0:
         68:62:1a:7a:db:1a:82:fa:1d:b0:be:1b:25:dd:32:c5:89:f8:
         9d:c4:ba:d3:a2:40:c2:d7:42:35:5f:84:74:c8:b1:87:a3:15:
         f4:7f:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org