Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/71eabf73424b7e4ba5ab94c6d0bb714df072f0fd.roa
File:                     71eabf73424b7e4ba5ab94c6d0bb714df072f0fd.roa (raw, json)
Hash identifier:          k/WvRI3KSLLKZlFZLW/rsTSHDtGE6xYaR1O+wSgYbvs=
Subject key identifier:   85:EB:76:B0:B5:F3:B0:A2:AA:53:4A:4E:31:5C:3A:24:2E:EF:FD:2C
Certificate issuer:       /CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
Certificate serial:       0967
Authority key identifier: B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/71eabf73424b7e4ba5ab94c6d0bb714df072f0fd.roa
Signing time:             Wed 31 Jan 2024 14:21:03 +0000
ROA not before:           Wed 31 Jan 2024 14:21:03 +0000
ROA not after:            Sat 31 Jan 2026 14:21:03 +0000
asID:                     265551
IP address blocks:        45.238.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
        Validity
            Not Before: Jan 31 14:21:03 2024 GMT
            Not After : Jan 31 14:21:03 2026 GMT
        Subject: CN=71eabf73424b7e4ba5ab94c6d0bb714df072f0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:77:af:e4:e2:6f:1b:31:b9:29:6f:0e:1d:
                    b3:45:75:2e:39:c2:8a:6b:b9:33:14:2d:b8:fb:3b:
                    78:1c:10:bc:97:a3:87:2c:4e:96:c2:16:b5:32:29:
                    87:4f:f9:7a:db:9e:43:bc:a2:97:a3:49:b6:30:83:
                    07:49:eb:eb:f9:e0:74:95:b9:e3:55:29:f7:f2:57:
                    bb:49:e7:cb:44:23:c5:74:dd:77:16:d8:8a:80:2e:
                    8d:58:7e:5a:3d:0b:fc:f2:d8:7f:1e:f9:02:be:07:
                    20:2b:bf:14:84:02:16:a9:87:d0:d8:2d:ce:4b:85:
                    42:78:a0:ef:92:9f:c6:08:ee:3c:ae:73:6c:07:b3:
                    ea:87:1a:8f:5d:f9:df:42:a2:85:bf:80:6d:f1:5b:
                    4b:69:e7:4b:48:1d:f5:df:49:0d:95:54:03:0e:9c:
                    2d:01:1a:c8:e8:92:20:67:84:b1:58:4e:65:a9:8f:
                    69:af:87:99:fd:7a:a7:3b:fe:c3:b0:42:5e:da:b7:
                    ba:eb:84:c0:ed:3f:ee:dd:ef:77:55:e7:ff:23:68:
                    e9:db:85:a6:4a:31:14:8d:58:56:67:bd:29:44:e6:
                    84:dd:bd:eb:45:e8:58:1a:da:b1:fb:b0:fd:a1:74:
                    c4:53:f5:96:51:2f:76:8a:58:fb:eb:12:22:68:a8:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EB:76:B0:B5:F3:B0:A2:AA:53:4A:4E:31:5C:3A:24:2E:EF:FD:2C
            X509v3 Authority Key Identifier:
                keyid:B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/71eabf73424b7e4ba5ab94c6d0bb714df072f0fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/f74a648ac87e2ce7fafa327bd89fc95e35a06596.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:03:0e:29:14:3a:3b:67:98:37:83:d4:f2:77:77:b4:05:
         6d:0f:82:66:bc:25:46:11:5b:ed:5a:74:7b:31:0b:28:1e:15:
         8a:13:ed:98:2b:4c:0b:39:13:bf:7f:d3:11:44:85:d0:a8:3f:
         06:98:d2:a2:67:33:e7:8b:57:02:b3:94:72:67:a4:23:61:45:
         c8:e9:93:f1:16:51:01:bc:91:05:09:4a:ac:96:d8:49:44:58:
         9a:44:28:0b:33:71:84:66:43:69:25:52:6d:56:42:e3:be:65:
         af:26:c5:58:0b:4f:02:9a:71:f1:3b:7e:88:9d:5f:7e:db:3d:
         b6:63:27:2f:b2:0f:e9:7b:dd:5f:d7:68:f5:ff:f8:de:ee:d6:
         d0:e5:39:a4:41:38:68:b8:ff:27:e6:0d:4d:18:84:49:a4:3f:
         b0:fb:c1:e6:81:a4:33:a9:16:70:b6:55:6a:32:ff:de:ad:f9:
         67:16:28:4a:27:47:4d:54:fc:90:63:04:82:76:d0:ff:ce:5b:
         c0:2d:c5:51:4b:04:8b:6d:32:32:34:7c:0e:60:44:29:1c:e5:
         71:81:c6:86:f8:58:46:ed:06:bc:dd:28:1c:68:ab:f6:1a:bc:
         88:74:07:41:2b:82:5e:c9:de:90:cd:7b:d4:e0:79:35:a9:7c:
         8f:20:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org