Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/2de25f2659dc01fe1b7f9bbb3630ef8326fb9f3a.roa
File:                     2de25f2659dc01fe1b7f9bbb3630ef8326fb9f3a.roa (raw, json)
Hash identifier:          nHJnmPpKT9QFaB4/4Vf4DLVoQJeOOpnMhB3JDhlIo/s=
Subject key identifier:   6A:E9:31:B9:04:00:14:39:CF:23:1B:E1:D8:78:72:99:BD:62:A7:68
Certificate issuer:       /CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
Certificate serial:       1751
Authority key identifier: 42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/2de25f2659dc01fe1b7f9bbb3630ef8326fb9f3a.roa
Signing time:             Thu 07 Sep 2023 19:20:33 +0000
ROA not before:           Wed 06 Sep 2023 19:20:33 +0000
ROA not after:            Sun 07 Sep 2025 19:20:33 +0000
asID:                     264758
IP address blocks:        45.178.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5969 (0x1751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
        Validity
            Not Before: Sep  6 19:20:33 2023 GMT
            Not After : Sep  7 19:20:33 2025 GMT
        Subject: CN=2de25f2659dc01fe1b7f9bbb3630ef8326fb9f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:5e:9e:0f:5f:75:98:b5:e9:9c:0f:0b:ec:
                    2f:26:eb:d3:a5:a5:88:c0:7f:46:e6:59:0c:f3:04:
                    06:89:3b:25:c1:95:f0:e5:ba:35:ea:db:60:18:b4:
                    82:bd:f2:52:e4:2a:37:d8:79:2e:20:25:e2:8c:ec:
                    c9:8d:28:aa:3a:33:20:08:5a:3e:37:e0:8d:e3:91:
                    81:96:e9:cf:25:03:91:59:45:71:58:45:45:1e:0a:
                    ce:92:f9:9c:35:55:32:eb:70:d4:78:ee:a9:1d:a1:
                    3b:28:07:1b:54:33:3c:32:57:9d:5c:40:9c:56:a1:
                    41:a8:08:99:ab:1a:85:ee:b1:ab:b1:4d:6b:16:9a:
                    e0:83:4a:69:5a:c7:3f:75:62:92:3b:87:46:f8:02:
                    99:5a:ba:27:10:e0:cc:cc:98:44:7b:ba:ed:63:95:
                    a8:4f:19:57:c5:a3:7f:ff:dd:20:52:4c:3d:60:ca:
                    58:21:b4:0a:7a:03:ae:15:1d:61:e4:c1:5f:1f:ae:
                    2e:fb:03:c7:57:5d:2c:e0:51:36:f0:6d:32:f8:05:
                    fa:74:11:0e:dc:05:50:d3:64:3f:45:57:5f:33:fd:
                    7b:22:52:08:02:db:35:bd:30:f5:ba:2b:22:59:cc:
                    e1:db:ea:0c:96:bf:a0:30:59:9e:07:21:cb:eb:8c:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:31:B9:04:00:14:39:CF:23:1B:E1:D8:78:72:99:BD:62:A7:68
            X509v3 Authority Key Identifier:
                keyid:42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/2de25f2659dc01fe1b7f9bbb3630ef8326fb9f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:bb:06:3a:18:e7:08:d0:42:58:c5:dd:eb:3c:56:b8:c6:3b:
         78:c9:f1:04:06:e9:64:49:38:de:36:87:38:92:56:a6:d6:5c:
         b9:10:91:77:fe:37:56:dc:77:18:53:dd:39:4a:33:6f:3d:b2:
         4d:7f:c4:66:c4:62:65:92:e8:a8:3e:0d:e4:d0:d7:1d:5c:05:
         45:3d:5d:a2:68:79:62:53:7d:58:00:c4:d8:11:b8:21:82:43:
         cf:20:38:7e:0b:7d:3f:90:e7:26:5e:e5:25:98:8f:e7:8b:c4:
         78:2c:19:f1:d6:3f:3f:f2:02:cb:71:a5:ae:3c:90:de:c3:34:
         f9:7c:82:28:11:03:05:ff:de:4c:5c:ca:e7:ea:2a:60:ce:1c:
         a0:1e:1b:21:b4:64:97:77:f5:7e:60:0b:4f:ee:c5:5a:2e:d0:
         49:7d:b2:01:a6:c9:e8:ec:1d:c3:f7:37:be:a2:81:66:07:73:
         10:47:0f:b3:5e:6c:14:a5:4b:f4:96:2a:30:5d:57:f2:ed:19:
         2b:56:0c:3f:fb:c6:48:4b:db:ab:9d:56:f0:02:eb:a4:93:c9:
         f9:6b:4b:2d:85:b1:dc:bd:ab:07:13:a0:4f:86:79:87:6d:ce:
         79:79:fc:06:f9:64:86:e5:9a:ca:65:ad:99:83:32:fb:d9:c7:
         77:39:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org