Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/aaaeeacdc102a07b0c414e661888d001fa13c620.roa
File:                     aaaeeacdc102a07b0c414e661888d001fa13c620.roa (raw, json)
Hash identifier:          Sx9ai6cKxxl+BpVZgN/NHQWhdlohtMiLDowSSGL23j8=
Subject key identifier:   61:C1:88:32:58:43:8D:49:20:85:4A:34:0E:38:AE:69:79:20:D8:00
Certificate issuer:       /CN=424acfa826ddcfe814d48486045b2a1196bd2435
Certificate serial:       0526
Authority key identifier: 4F:7B:3A:FB:1E:46:17:68:53:E0:B3:C4:21:0B:7A:1B:C8:85:DC:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/424acfa826ddcfe814d48486045b2a1196bd2435.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/aaaeeacdc102a07b0c414e661888d001fa13c620.roa
Signing time:             Mon 17 Oct 2022 17:48:22 +0000
ROA not before:           Sun 16 Oct 2022 17:47:03 +0000
ROA not after:            Thu 17 Oct 2024 17:47:03 +0000
asID:                     265554
IP address blocks:        45.7.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424acfa826ddcfe814d48486045b2a1196bd2435
        Validity
            Not Before: Oct 16 17:47:03 2022 GMT
            Not After : Oct 17 17:47:03 2024 GMT
        Subject: CN=aaaeeacdc102a07b0c414e661888d001fa13c620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:40:18:5c:5c:79:a6:fe:db:2b:6f:02:e1:
                    55:67:fe:11:b0:c2:0f:69:4c:da:9b:75:9d:86:c9:
                    c2:f1:5f:4a:5f:08:3a:8b:8a:8d:91:ab:1f:df:b8:
                    10:6d:9a:ae:e2:5d:d2:31:7f:ca:c2:61:3f:f7:79:
                    b0:a4:83:13:c9:de:96:f8:fd:c5:27:f6:59:57:c9:
                    a2:97:a3:d0:ac:a4:44:cc:36:31:a9:d8:a5:43:c5:
                    29:0d:b9:72:f7:01:4a:a5:ed:d5:9d:09:08:14:a8:
                    7a:35:27:84:2b:25:54:ab:ed:c0:8a:90:ce:5e:e4:
                    49:f6:9e:52:bf:17:3e:45:b9:c0:60:97:cb:df:14:
                    e1:f8:e3:31:bc:9c:d2:19:93:0f:6c:f0:a0:a5:b4:
                    3f:bd:74:11:01:b4:ea:6e:e7:84:9c:fe:80:98:54:
                    10:12:e8:40:bf:a5:4a:6d:c5:f4:88:64:46:c1:74:
                    b1:bd:d7:6d:d0:ab:3e:d3:38:df:8e:1f:c5:e5:e7:
                    28:7d:9a:c5:fb:71:d8:0b:80:a2:2e:5c:df:ea:57:
                    c8:08:06:d3:e7:43:11:ff:10:08:c8:cb:6e:3a:cc:
                    03:2d:b8:28:95:4b:3b:c5:f2:28:79:b6:37:90:cd:
                    0b:c0:17:9b:c4:03:75:96:55:b0:79:57:0a:93:4e:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:88:32:58:43:8D:49:20:85:4A:34:0E:38:AE:69:79:20:D8:00
            X509v3 Authority Key Identifier:
                keyid:4F:7B:3A:FB:1E:46:17:68:53:E0:B3:C4:21:0B:7A:1B:C8:85:DC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/424acfa826ddcfe814d48486045b2a1196bd2435.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/aaaeeacdc102a07b0c414e661888d001fa13c620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/424acfa826ddcfe814d48486045b2a1196bd2435.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:08:a8:eb:92:75:a3:17:bc:39:8d:6d:91:dd:86:be:9e:
         a3:ec:6b:d2:14:4f:95:fa:fe:47:4e:5c:9d:aa:7c:72:d2:c9:
         a3:47:da:f5:c3:4e:d4:d6:c3:cb:c1:10:3f:58:a4:3d:93:86:
         f5:b9:07:78:23:03:1d:7b:77:9f:d1:41:55:90:9d:47:9a:bd:
         9e:53:71:3e:76:d4:8e:54:e6:bc:ca:8b:cc:bb:c1:4e:65:c2:
         46:a3:e4:d3:83:7a:12:cb:50:66:30:fb:01:58:71:56:cd:dd:
         ee:d2:10:55:53:4e:87:3c:16:59:47:ff:77:1e:6f:8d:87:e1:
         f4:6b:35:05:c4:94:ed:9f:06:14:c7:96:a4:59:67:09:c0:db:
         0b:4e:63:d1:f4:76:55:1b:d4:83:e6:53:1b:25:cc:f5:3b:7b:
         8e:98:e6:72:f2:dd:b7:9b:e0:6e:41:f6:29:25:6e:e8:78:95:
         ca:48:44:d5:af:68:d3:e8:f3:d9:20:18:4c:39:b7:0d:97:06:
         67:d7:53:51:fd:d7:9a:b3:78:d0:ad:49:8f:cf:f8:c4:01:36:
         f3:ea:0d:43:30:7e:fb:97:25:d5:70:22:ed:5c:ed:bd:49:33:
         c0:55:70:fd:7d:c7:fa:01:74:76:e5:8b:6f:a9:b7:0f:7c:15:
         74:5e:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org