Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/0777b33beddc91edcc6c753cae2c66abb8d73ff0.roa
File:                     0777b33beddc91edcc6c753cae2c66abb8d73ff0.roa (raw, json)
Hash identifier:          Vlr26JJEMmlCGxQb2vbZCWhLYfVYbHgphzdlSt2AHHQ=
Subject key identifier:   28:34:E1:53:F9:7E:00:72:04:C2:CA:78:58:4E:73:A8:0A:7C:43:69
Certificate issuer:       /CN=3098f1be5c71093ee297851f7b711b67ca6390cc
Certificate serial:       4568
Authority key identifier: 80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/0777b33beddc91edcc6c753cae2c66abb8d73ff0.roa
Signing time:             Thu 08 Feb 2024 21:59:07 +0000
ROA not before:           Thu 08 Feb 2024 21:59:07 +0000
ROA not after:            Sun 08 Feb 2026 21:59:07 +0000
asID:                     265582
IP address blocks:        45.174.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17768 (0x4568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3098f1be5c71093ee297851f7b711b67ca6390cc
        Validity
            Not Before: Feb  8 21:59:07 2024 GMT
            Not After : Feb  8 21:59:07 2026 GMT
        Subject: CN=0777b33beddc91edcc6c753cae2c66abb8d73ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:11:23:10:98:83:d7:fe:6b:e7:b3:1f:77:
                    85:36:44:0e:6b:4d:ab:1d:f3:d6:78:6d:3d:fb:30:
                    f8:24:ff:55:9c:ee:ea:60:08:26:a0:19:4e:97:9f:
                    db:90:f8:a9:c3:36:35:c5:7e:0d:3f:3f:3f:2b:c3:
                    02:e1:6b:c9:1a:59:f4:8e:c9:45:e1:7c:a8:c2:27:
                    89:80:0d:53:09:b6:cc:d4:10:0f:2d:16:3d:28:76:
                    5b:c6:28:69:8d:3c:68:f8:bc:69:4a:f4:1b:aa:f5:
                    6a:d9:0d:86:88:65:bf:72:64:7a:d5:0c:49:8e:a8:
                    e3:e1:0a:00:9e:db:1a:80:e4:7c:d0:0c:73:33:0b:
                    35:5e:fe:41:0f:27:66:63:5d:ff:b9:0b:ae:01:3a:
                    fe:3a:d7:3f:89:12:39:7d:70:98:23:07:b5:c7:02:
                    ec:57:46:ab:8b:f4:f0:5a:3b:dd:09:15:bd:92:8e:
                    97:ff:44:8d:f1:44:a8:82:4e:b6:72:66:6c:ea:26:
                    8b:fb:d6:2d:b3:09:c1:d3:49:b2:d6:56:5c:30:d7:
                    2f:94:46:c8:0e:02:3e:68:f1:95:69:04:f8:5d:22:
                    1f:32:6e:c6:99:b7:a9:3c:da:4f:61:20:84:77:2f:
                    23:9d:94:ef:ab:58:9a:50:be:61:d7:34:b1:1c:9d:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:E1:53:F9:7E:00:72:04:C2:CA:78:58:4E:73:A8:0A:7C:43:69
            X509v3 Authority Key Identifier:
                keyid:80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/0777b33beddc91edcc6c753cae2c66abb8d73ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/3098f1be5c71093ee297851f7b711b67ca6390cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:ad:99:5f:f9:99:e3:13:cd:72:a4:ae:13:40:95:77:1b:
         38:56:63:82:e9:23:90:a8:10:c1:a5:dd:5f:bd:40:44:3a:3f:
         57:e5:ca:56:d1:d6:57:1a:3b:82:30:83:8a:31:b9:15:c8:08:
         9f:95:34:bb:f2:34:57:69:ea:48:74:c6:82:01:a4:16:54:f6:
         00:d4:f6:f8:9a:f7:62:09:76:44:1f:68:14:d6:c0:3c:d9:55:
         af:1e:d6:b7:87:f5:bb:f4:fc:74:96:cc:2f:8c:a3:d5:02:ce:
         61:1c:bf:e9:72:b6:84:20:de:ab:45:46:76:5c:76:d1:c7:32:
         1f:cd:44:8d:ef:42:fb:d0:81:dc:0b:88:e1:83:29:74:c2:bb:
         18:4b:fd:92:02:f3:54:a1:c2:7b:9d:2e:92:22:dd:62:46:ea:
         57:5c:3b:cd:e3:da:06:47:b9:83:3c:f3:20:22:c6:e0:24:43:
         9b:97:9b:b4:eb:44:62:0c:b6:40:34:4b:f7:c0:4b:42:88:4e:
         a4:1f:77:1d:9b:e7:e4:74:63:03:fb:a1:b1:5f:6f:a2:9b:5c:
         37:09:4b:66:65:0f:bf:7d:93:f5:94:70:f8:c9:de:75:b5:2f:
         ba:7c:c0:eb:20:72:3a:96:bb:c8:29:b6:0c:b1:ba:f0:fc:30:
         af:40:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org