Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/50bec09d6a77624898f9c03f4f2799c2e5660032.roa
File:                     50bec09d6a77624898f9c03f4f2799c2e5660032.roa (raw, json)
Hash identifier:          exv9MnGs4Os6jw4SeSdJi/H931hchELt451GR0zUIPE=
Subject key identifier:   C2:CE:50:8F:CA:C7:0C:27:8C:BB:AF:8F:4E:CB:2D:D8:F6:F7:A3:DF
Certificate issuer:       /CN=3098f1be5c71093ee297851f7b711b67ca6390cc
Certificate serial:       C754
Authority key identifier: 80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/50bec09d6a77624898f9c03f4f2799c2e5660032.roa
Signing time:             Wed 28 Feb 2024 20:30:47 +0000
ROA not before:           Wed 28 Feb 2024 20:30:47 +0000
ROA not after:            Sat 28 Feb 2026 20:30:47 +0000
asID:                     265582
IP address blocks:        45.174.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51028 (0xc754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3098f1be5c71093ee297851f7b711b67ca6390cc
        Validity
            Not Before: Feb 28 20:30:47 2024 GMT
            Not After : Feb 28 20:30:47 2026 GMT
        Subject: CN=50bec09d6a77624898f9c03f4f2799c2e5660032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:5e:0e:29:77:d9:0f:11:22:c0:18:68:23:
                    4f:01:f9:3e:86:d6:b0:43:cb:0c:39:a7:fd:b9:86:
                    87:12:ff:1a:67:09:e5:f8:5e:2a:26:dd:83:d2:a7:
                    63:ee:8d:d1:01:11:07:55:1d:30:73:a1:a7:70:ea:
                    82:83:e5:11:24:7f:25:23:7e:f1:82:46:29:88:89:
                    e3:12:c6:bd:36:99:fd:3c:13:66:1e:bf:24:c6:5c:
                    36:50:84:49:36:bb:37:fb:b5:79:bf:fd:e8:84:6e:
                    a3:f0:4c:85:8c:40:05:d5:d1:6f:80:ae:39:ca:63:
                    b7:c1:30:b5:eb:9f:be:6b:9f:dd:68:a5:01:88:3b:
                    d2:15:14:29:51:c1:cf:6f:be:4d:f3:74:07:f7:aa:
                    32:a0:38:9a:25:99:78:87:3b:4c:b8:28:7c:25:e0:
                    66:6b:10:77:cb:a1:ca:f8:98:b3:55:fd:65:f1:24:
                    e7:57:2f:b2:03:6f:38:d1:4e:04:ed:c7:42:7f:57:
                    4c:47:c8:ee:90:f6:d0:37:60:48:65:96:5e:f3:4d:
                    45:92:1c:c6:05:27:44:81:35:0e:ae:1e:89:07:cb:
                    bf:91:48:44:fd:bc:69:8f:51:6c:d3:4e:75:92:cb:
                    b2:0c:67:75:37:fa:54:ef:f1:f1:da:80:81:fa:a0:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:50:8F:CA:C7:0C:27:8C:BB:AF:8F:4E:CB:2D:D8:F6:F7:A3:DF
            X509v3 Authority Key Identifier:
                keyid:80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/50bec09d6a77624898f9c03f4f2799c2e5660032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/3098f1be5c71093ee297851f7b711b67ca6390cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:75:30:df:30:3f:d4:f4:5e:a2:7e:71:68:6d:ab:18:83:a8:
         e4:f1:76:1d:53:80:74:c5:01:2d:fa:3d:2a:5a:8f:bb:b7:5e:
         64:67:00:48:c1:14:07:25:de:7d:25:35:03:32:8a:5f:86:9a:
         a9:51:ad:fb:70:f6:97:47:4a:08:53:85:98:8e:25:2d:b6:a6:
         13:b4:95:c1:b3:5f:e1:ac:49:56:02:70:52:6f:d7:d3:a5:d0:
         c2:15:87:1b:d2:54:25:5d:c4:ad:ed:04:7a:0a:eb:a0:16:60:
         c3:4b:7b:a1:25:9d:6c:66:f8:00:4a:94:73:27:51:d5:e2:3c:
         15:15:f9:e2:1a:70:96:b5:81:34:39:18:8a:c7:91:38:d9:fd:
         b7:77:6c:b2:90:2c:79:ab:5a:8a:66:ac:f0:1a:3c:95:fe:21:
         4a:58:54:ed:df:de:4c:76:be:7c:d0:57:80:ac:de:a3:26:a2:
         4d:b5:4a:b6:44:81:8b:af:98:11:d7:a6:cc:03:e5:28:b7:34:
         18:1f:91:11:d2:b2:57:e8:e7:d9:57:b7:00:3e:05:ee:5c:4f:
         1b:32:c7:48:b3:eb:26:7e:4e:70:2d:6d:96:01:61:e0:28:05:
         81:d8:e0:fa:e7:11:60:9a:f0:72:83:07:da:8a:79:1c:60:79:
         3e:a7:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org