Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/7a7f1226157e44ff900ab280e8432fcbebef500a.roa
File:                     7a7f1226157e44ff900ab280e8432fcbebef500a.roa (raw, json)
Hash identifier:          jQx6htFiTq8il2t0reEC5E+o9doVFS7ACzCNaXEiK4g=
Subject key identifier:   14:C3:3F:C5:E7:70:FE:97:8F:F0:50:52:BF:0E:26:FE:4D:DE:45:12
Certificate issuer:       /CN=0d1e4693d764704e80a683f2020193ad8c102cda
Certificate serial:       24E30E
Authority key identifier: 3D:E6:09:A7:C1:88:8C:93:26:06:9A:E6:A0:B3:06:CC:BB:F1:DD:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1e4693d764704e80a683f2020193ad8c102cda.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/7a7f1226157e44ff900ab280e8432fcbebef500a.roa
Signing time:             Thu 09 Nov 2023 15:00:32 +0000
ROA not before:           Thu 09 Nov 2023 15:00:32 +0000
ROA not after:            Thu 09 Nov 2028 15:00:32 +0000
asID:                     265721
IP address blocks:        45.65.244.0/22 maxlen: 24
                          200.58.240.0/21 maxlen: 24
                          2803:4dc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417422 (0x24e30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1e4693d764704e80a683f2020193ad8c102cda
        Validity
            Not Before: Nov  9 15:00:32 2023 GMT
            Not After : Nov  9 15:00:32 2028 GMT
        Subject: CN=7a7f1226157e44ff900ab280e8432fcbebef500a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:c6:9f:80:1a:d6:ba:c9:f9:1f:b4:49:dc:
                    f1:f9:9f:81:ed:d2:31:ec:fd:ed:2d:52:44:67:85:
                    45:14:a3:97:b8:ba:9d:0c:38:cd:15:a6:63:8e:ff:
                    c4:c3:1c:16:a2:51:3a:68:07:41:c8:41:4e:3f:45:
                    d5:c3:06:77:1b:85:aa:d9:e0:62:0c:e2:e9:92:7d:
                    75:91:39:91:b3:a5:37:a1:15:cb:69:c0:68:dc:dd:
                    00:dc:98:c6:62:bf:23:e7:d5:ac:04:d9:39:5c:91:
                    18:ef:66:8b:73:cb:d1:54:4d:e0:7b:d8:00:01:c7:
                    c7:1c:e5:96:e2:c2:6b:e7:f4:ba:87:29:6d:63:d1:
                    64:4a:14:8f:40:45:6a:2b:12:dd:ed:eb:f6:b2:9a:
                    fc:5e:eb:c2:10:aa:fa:68:51:f1:a9:31:e4:ad:48:
                    7a:5d:5f:8d:f1:8e:82:d6:44:12:8d:9c:92:99:64:
                    a9:c5:1e:23:1d:44:c2:00:f7:dd:bf:3d:44:ad:80:
                    15:37:d2:e2:f2:ad:36:a9:13:2d:73:fd:8f:e3:4a:
                    d3:8a:2b:25:3d:b2:49:8b:8f:0d:bb:dc:98:1a:5b:
                    b4:12:ff:16:4c:36:cc:7a:c5:84:0c:81:9b:7e:93:
                    40:72:bb:99:26:45:f3:ac:6e:07:46:df:da:03:c6:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:3F:C5:E7:70:FE:97:8F:F0:50:52:BF:0E:26:FE:4D:DE:45:12
            X509v3 Authority Key Identifier:
                keyid:3D:E6:09:A7:C1:88:8C:93:26:06:9A:E6:A0:B3:06:CC:BB:F1:DD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1e4693d764704e80a683f2020193ad8c102cda.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/7a7f1226157e44ff900ab280e8432fcbebef500a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/0d1e4693d764704e80a683f2020193ad8c102cda.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.244.0/22
                  200.58.240.0/21
                IPv6:
                  2803:4dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:2b:39:84:a9:81:8d:c0:ab:17:da:19:64:64:bb:ad:24:93:
         a3:fa:5f:d5:9e:12:8f:ed:38:65:c6:bf:e1:8b:a7:15:11:2d:
         ef:ca:8e:7c:ce:91:3c:2a:af:35:6d:17:06:17:0b:06:de:ce:
         16:ec:48:01:0f:24:b0:f8:e3:76:a5:e1:53:c7:1f:ea:96:f8:
         4d:31:38:1e:58:b8:de:11:21:7e:c8:3c:ea:98:96:12:7b:a8:
         61:fe:cc:09:fb:eb:db:32:60:ec:ac:96:3b:56:dd:5f:1d:04:
         92:8e:55:c7:e3:b1:5c:b8:3a:e5:5d:97:9c:31:b6:50:6f:b6:
         c6:cf:42:f4:3b:4b:08:87:6d:a2:df:c7:1b:03:98:dc:d7:98:
         25:25:b8:38:9b:89:84:8c:22:63:61:36:0b:7c:1d:33:16:88:
         33:93:ce:05:5d:6e:59:c8:b1:45:00:ee:d6:a7:84:f5:73:5c:
         e6:dc:cc:68:ed:05:cb:0d:a2:d5:ef:3b:68:70:b1:b1:e7:95:
         78:36:7d:7b:e5:02:d7:13:80:b9:aa:c7:13:ae:00:0d:c6:bb:
         a2:5d:1a:1d:ae:c0:b9:6e:b1:87:84:b7:a5:70:a8:58:16:e0:
         d7:67:bc:31:17:7c:d5:48:2b:df:8a:20:04:a7:85:60:2e:3c:
         15:cc:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org