Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/18725921ea0289828282a8be46d331183245048e.roa
File:                     18725921ea0289828282a8be46d331183245048e.roa (raw, json)
Hash identifier:          OazujQY0DW1riWZvF5p0jyYeDv0A8CeB40nZqiW/9lk=
Subject key identifier:   E1:67:69:A4:AC:BF:5C:41:DE:67:38:9C:BA:CB:E2:62:71:04:FE:BE
Certificate issuer:       /CN=f555abf6bc8d39ccbb5b53dbd3b407567c54d134
Certificate serial:       11B0D7
Authority key identifier: 5E:DF:E2:CF:D7:8D:80:3C:FD:93:6D:F6:E7:28:DA:94:C3:6E:C9:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f555abf6bc8d39ccbb5b53dbd3b407567c54d134.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/18725921ea0289828282a8be46d331183245048e.roa
Signing time:             Tue 30 May 2023 08:30:02 +0000
ROA not before:           Mon 29 May 2023 08:30:02 +0000
ROA not after:            Wed 28 May 2025 08:30:02 +0000
asID:                     269807
IP address blocks:        45.185.148.0/24 maxlen: 24
                          45.185.184.0/23 maxlen: 24
                          45.185.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159383 (0x11b0d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f555abf6bc8d39ccbb5b53dbd3b407567c54d134
        Validity
            Not Before: May 29 08:30:02 2023 GMT
            Not After : May 28 08:30:02 2025 GMT
        Subject: CN=18725921ea0289828282a8be46d331183245048e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:5b:35:a9:f3:34:21:20:c8:d5:d1:d6:e8:
                    e8:18:76:3f:4d:7b:1f:33:90:b3:66:d3:53:06:5d:
                    be:03:a4:ba:6e:3c:f0:9a:db:28:5b:72:ff:bd:30:
                    0e:ee:69:7f:c9:d8:f0:f4:14:a7:53:93:2b:af:ab:
                    a5:80:40:5d:ef:fa:01:b1:e3:6b:d8:67:0e:21:49:
                    ad:ce:67:01:a9:0e:5c:2a:ef:39:fc:32:38:d0:94:
                    1a:1b:1d:8e:dc:a6:1f:65:fa:0d:48:ac:9b:ca:69:
                    e6:2f:67:0c:a1:6d:1a:bc:fa:8f:43:ca:a1:dc:f9:
                    e2:24:a7:9e:d4:68:82:59:33:51:18:19:b1:2d:10:
                    70:b7:c6:2f:de:07:8d:79:d7:33:40:da:38:ed:70:
                    a4:d1:4c:68:c9:8e:4a:43:2f:4c:4b:d4:f6:1f:8e:
                    59:95:4e:6b:1a:3e:1d:83:79:75:c3:7a:04:87:40:
                    a0:e6:85:8b:8b:c7:db:f8:85:68:8b:17:d6:86:e9:
                    d9:15:62:d4:02:74:13:4e:61:96:0c:dd:44:ea:32:
                    53:b9:d7:3c:bd:40:ab:91:4e:1f:f4:54:1e:32:fb:
                    db:ee:d3:37:7d:53:4e:de:10:d8:19:c1:ab:ae:39:
                    fa:a8:92:84:f7:5c:24:af:56:07:80:af:e1:5e:cf:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:69:A4:AC:BF:5C:41:DE:67:38:9C:BA:CB:E2:62:71:04:FE:BE
            X509v3 Authority Key Identifier:
                keyid:5E:DF:E2:CF:D7:8D:80:3C:FD:93:6D:F6:E7:28:DA:94:C3:6E:C9:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f555abf6bc8d39ccbb5b53dbd3b407567c54d134.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/18725921ea0289828282a8be46d331183245048e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/f555abf6bc8d39ccbb5b53dbd3b407567c54d134.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.148.0/24
                  45.185.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:ff:d1:fc:ed:ac:64:34:39:2b:ad:c9:69:da:ad:68:50:
         5a:13:a6:e2:a8:8f:9e:d3:d9:7e:66:46:44:2a:2a:c3:be:a2:
         f3:8d:ff:2d:82:32:02:ee:13:83:84:ac:bd:02:7e:d1:6f:cf:
         23:41:2a:3b:86:ff:80:15:11:91:d9:57:96:d1:0b:6d:2d:ce:
         1f:22:95:f8:d7:9a:be:34:09:d6:b9:fa:0b:59:f7:6b:df:18:
         c2:ca:d7:bd:08:c1:08:80:a5:7e:d2:fc:b6:54:1f:0a:c0:f0:
         bf:c4:b9:92:eb:bf:3e:b1:44:53:31:7d:cd:29:40:0d:5c:de:
         cd:6a:08:26:6f:30:6c:13:16:1c:be:58:5c:b8:6d:d0:d0:e3:
         58:4a:86:06:ae:10:79:42:d4:de:2c:d7:fb:9d:1d:20:bc:65:
         c2:64:c7:2d:99:32:98:09:6d:52:e7:fe:89:ba:bf:6c:ee:55:
         34:e1:59:76:a2:65:cc:10:2d:d2:ec:48:b9:5c:80:5b:8e:d5:
         b4:4a:af:82:7f:3a:69:27:24:5f:30:4a:65:1a:c1:12:63:fd:
         9f:89:2f:5d:fc:0d:40:09:45:f4:f7:3b:8e:d5:71:b7:f9:99:
         a9:ee:bc:36:28:be:a7:3c:73:92:19:72:30:57:30:19:a2:f7:
         0e:3f:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org