Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/9db849391bb5facb7d92df586e53ac7ecf471b4d.roa
File:                     9db849391bb5facb7d92df586e53ac7ecf471b4d.roa (raw, json)
Hash identifier:          smPYQ1dGZ8baYBHHX7txPLvknHwFUGiZEaePZR1hcYw=
Subject key identifier:   BB:61:91:2C:6D:4E:A1:18:BA:E8:F8:B9:8A:AC:00:7B:F0:FD:32:47
Certificate issuer:       /CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
Certificate serial:       0C33
Authority key identifier: 42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/9db849391bb5facb7d92df586e53ac7ecf471b4d.roa
Signing time:             Thu 07 Sep 2023 19:19:46 +0000
ROA not before:           Wed 06 Sep 2023 19:19:46 +0000
ROA not after:            Sun 07 Sep 2025 19:19:46 +0000
asID:                     264758
IP address blocks:        45.178.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
        Validity
            Not Before: Sep  6 19:19:46 2023 GMT
            Not After : Sep  7 19:19:46 2025 GMT
        Subject: CN=9db849391bb5facb7d92df586e53ac7ecf471b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:d2:bf:7a:aa:c5:0e:e0:09:85:48:cd:e0:
                    dd:51:f6:cc:a0:e3:17:e8:05:b4:2e:94:28:16:15:
                    67:cc:71:9d:6f:5b:f5:c9:df:b8:97:8e:86:61:2e:
                    24:00:f3:4b:2e:7f:7d:3c:e0:a2:f7:3f:b8:fa:19:
                    37:11:d0:ad:67:4d:c2:ec:d3:eb:7c:94:f3:be:a7:
                    79:7c:3f:17:0b:a1:09:33:8b:6d:0a:30:09:cd:bd:
                    d6:2d:cb:b8:a1:5b:6a:18:3a:2f:34:01:75:9c:c0:
                    50:85:2d:5c:b9:02:00:32:92:6f:2a:3e:1b:3a:43:
                    ab:23:2a:72:8a:c2:a5:d6:d5:d5:c3:8b:6b:c1:8c:
                    5d:e7:d3:51:98:a8:0e:ef:61:e6:25:7f:5b:0a:29:
                    65:41:29:52:40:57:3e:7b:21:b7:0b:93:db:d7:bd:
                    fb:f8:1f:6d:ee:38:86:ea:eb:26:2b:7a:90:4c:8e:
                    4a:49:48:35:09:4c:b2:96:86:e4:7a:00:9e:38:dd:
                    1a:54:3f:e0:99:9a:e3:b0:49:58:ff:54:4c:a5:e8:
                    f4:27:b7:40:8f:42:7f:fe:32:3f:f6:95:54:fa:be:
                    c9:b5:e6:a5:38:6c:63:63:50:9f:b5:d8:a1:41:e1:
                    78:a3:58:86:b4:20:a1:01:b4:b8:c1:0e:21:4e:39:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:61:91:2C:6D:4E:A1:18:BA:E8:F8:B9:8A:AC:00:7B:F0:FD:32:47
            X509v3 Authority Key Identifier:
                keyid:42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/9db849391bb5facb7d92df586e53ac7ecf471b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:9c:21:e3:d1:5a:c8:27:75:33:f1:8b:6e:aa:bc:bc:07:
         31:6f:24:55:da:91:cc:01:71:67:33:96:09:89:32:26:c1:cd:
         c9:7f:ef:46:4a:82:5c:02:9c:5d:94:e6:2b:75:a8:04:e8:23:
         d4:5b:56:e9:64:09:32:b1:97:81:02:0b:cf:31:19:ce:9e:9f:
         25:f1:dc:58:8f:5a:af:15:17:96:31:a2:f9:c3:97:ad:8c:a9:
         99:44:15:9c:f3:4d:2c:a4:3b:88:56:97:d3:95:cf:a3:e7:7b:
         ff:0b:b6:c2:14:27:37:b7:e3:02:7c:8b:df:3c:34:c2:ad:6e:
         4f:a1:b2:cd:f8:ac:15:de:05:5f:d4:67:56:3b:6c:d1:0b:7a:
         14:ae:31:f3:fb:5a:ad:68:92:7c:bd:55:1c:1d:46:28:06:8d:
         63:6c:5a:b5:f3:63:30:33:91:07:06:19:48:b4:1c:5e:68:03:
         d8:bc:9e:b3:2b:2d:1f:38:eb:ef:42:ea:48:96:c4:cd:99:3e:
         03:ce:9b:30:1e:2d:5c:3f:66:05:d3:0f:c6:04:c5:a2:08:bb:
         dd:e8:ca:38:55:b9:91:de:af:05:d4:a5:61:12:47:29:dc:7b:
         67:cd:83:71:5a:79:7a:65:d8:68:dd:4f:e1:07:64:af:96:9b:
         9d:ab:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org