Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/5e087900ef017c08bc845d250bd4f449861a1043.roa
File:                     5e087900ef017c08bc845d250bd4f449861a1043.roa (raw, json)
Hash identifier:          Z24M6y3qTGh4Qme7otZxkUf3Df1+ljfp58lH+WxMf48=
Subject key identifier:   6E:DA:4C:82:68:7F:87:4D:C1:88:7C:7E:B6:E3:A8:EF:57:51:E0:D5
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       18D78B
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/5e087900ef017c08bc845d250bd4f449861a1043.roa
Signing time:             Mon 01 Aug 2022 01:45:48 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     266742
IP address blocks:        45.230.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628043 (0x18d78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=5e087900ef017c08bc845d250bd4f449861a1043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:05:20:22:57:62:6e:1a:de:da:c6:c5:37:
                    c7:b7:01:da:a1:ac:26:e6:d7:f5:15:84:24:c3:19:
                    bd:e8:c6:a4:f2:fd:c9:a5:ca:b8:f2:f1:e5:71:89:
                    1b:37:7b:4e:74:92:3a:a4:b9:09:20:db:99:b1:67:
                    8a:d3:a8:50:63:49:97:7f:6f:f9:9e:36:98:33:50:
                    4e:90:bb:be:74:e6:9d:5a:11:e1:d1:88:5c:5e:f9:
                    7b:0c:d6:82:ef:4d:99:9f:b0:59:16:83:92:a3:2f:
                    68:6e:99:d4:5f:a4:70:f2:b0:3c:2a:7c:09:22:0b:
                    52:d0:c0:60:fd:f3:9c:4b:2b:b0:49:7a:66:41:28:
                    1d:23:1d:ad:0a:25:2e:78:7e:59:8d:76:e3:50:94:
                    d1:db:c4:02:b1:32:33:65:d2:10:78:cc:31:ee:49:
                    82:fd:33:86:35:d3:8e:da:53:ca:6b:18:56:c9:d0:
                    dd:12:3b:0a:ba:49:a8:c3:5b:d1:02:e7:4d:f3:9b:
                    4d:c3:a5:8e:92:9d:7d:6e:50:87:f0:4a:94:f1:5f:
                    b4:5f:b6:78:dd:83:62:b3:2e:41:bb:1d:d7:cc:dc:
                    89:4d:7a:bd:2f:49:44:4f:d4:95:da:0d:21:ba:53:
                    e0:44:da:4a:fd:aa:19:1e:6f:f3:42:63:e1:04:bf:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DA:4C:82:68:7F:87:4D:C1:88:7C:7E:B6:E3:A8:EF:57:51:E0:D5
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/5e087900ef017c08bc845d250bd4f449861a1043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:32:25:0e:2b:f9:03:3e:a5:b8:2b:e0:2e:dd:7f:aa:b3:86:
         71:a7:d2:fc:db:89:74:55:de:f0:1e:f5:e3:ce:39:cf:a6:85:
         60:24:1d:7c:fd:b7:9a:f3:1a:9e:ae:74:5d:29:29:7f:11:22:
         8e:8a:a8:7f:bc:6c:32:10:ba:28:41:19:7a:c3:03:03:cc:16:
         89:08:91:c1:4f:19:a3:81:c5:40:fe:4f:22:0a:5f:15:63:86:
         5e:46:f5:96:2f:f6:6c:58:d1:da:ac:de:c0:3b:a4:78:24:d2:
         fa:c8:5d:d1:71:1f:fa:74:2a:ef:00:c8:e8:a2:d8:a9:93:13:
         d4:8b:da:f7:a2:46:a0:9f:27:53:7e:0e:92:ef:b4:9c:07:77:
         22:76:ea:ac:8d:a9:8d:57:aa:44:c4:4b:71:ce:92:36:fa:a0:
         e2:19:3c:be:2b:1c:1c:0a:cb:e8:eb:de:2b:ae:9e:5b:58:19:
         17:dd:a9:38:ae:5b:85:9e:00:0a:cd:35:9b:99:2c:2b:0d:ed:
         9d:3e:7c:d5:d2:30:1f:09:df:d3:c7:7a:c6:f0:72:df:6a:53:
         e9:29:09:cd:81:17:70:ff:ea:c4:43:ac:1f:9f:7d:fa:74:11:
         40:3c:14:ab:d1:bc:d9:d2:84:5c:80:10:f0:26:58:82:66:af:
         43:68:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org