Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/7b9b0c32c13b26320d84b22db763ca09ba20dc15.roa
File:                     7b9b0c32c13b26320d84b22db763ca09ba20dc15.roa (raw, json)
Hash identifier:          RZeriHU2NkHINTgHJEeTaOQp1p1UPf3Efn7t7fcpCuk=
Subject key identifier:   15:C9:FB:8E:EF:60:C1:4D:C5:C1:9A:BF:86:6F:67:2A:C3:5C:07:EC
Certificate issuer:       /CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
Certificate serial:       1F8A76
Authority key identifier: B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/7b9b0c32c13b26320d84b22db763ca09ba20dc15.roa
Signing time:             Tue 03 Oct 2023 18:19:58 +0000
ROA not before:           Mon 02 Oct 2023 18:19:58 +0000
ROA not after:            Fri 03 Oct 2025 19:19:58 +0000
asID:                     267834
IP address blocks:        45.175.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067062 (0x1f8a76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
        Validity
            Not Before: Oct  2 18:19:58 2023 GMT
            Not After : Oct  3 19:19:58 2025 GMT
        Subject: CN=7b9b0c32c13b26320d84b22db763ca09ba20dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:c8:49:2f:3b:82:be:05:01:d9:ac:fd:85:
                    91:24:8c:46:e5:4f:16:c8:e4:f2:fb:54:9e:fe:91:
                    da:c8:06:ae:e6:67:94:9a:e5:f0:ee:f0:fa:09:b0:
                    af:62:eb:c0:22:cf:b2:33:f2:9f:0d:ab:ec:e8:c6:
                    b6:e8:95:a9:90:73:55:4d:82:5b:fc:04:df:e4:68:
                    84:8b:75:07:28:9a:7d:c5:c0:5b:cc:5e:6f:b6:21:
                    bb:7c:59:53:8c:f6:52:9e:fe:82:27:eb:9a:55:45:
                    c9:ba:cf:56:14:da:a6:d9:bf:62:a6:c5:8f:ed:54:
                    a0:57:1e:77:2f:3a:59:53:6f:ed:06:8d:0b:e9:46:
                    b8:d4:1c:73:39:c6:c9:62:27:30:94:ef:ba:ac:af:
                    33:93:6a:17:08:b8:b9:1f:03:3a:2b:f5:e8:a2:03:
                    e8:d7:03:ce:24:ae:ac:ee:8e:b1:31:f0:3c:c9:ce:
                    b5:75:e0:5c:38:df:5f:10:08:c9:f9:cb:73:4f:34:
                    0c:cd:fb:0b:c0:90:00:9d:2a:b1:92:7a:b1:a6:4d:
                    6b:89:f1:16:85:4c:fc:54:f0:a3:b3:d9:1c:8b:e0:
                    c1:f9:ca:15:74:16:f7:5f:96:55:cb:f3:37:82:0a:
                    b5:f4:01:1c:7a:79:46:74:80:4e:3d:63:98:c6:58:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C9:FB:8E:EF:60:C1:4D:C5:C1:9A:BF:86:6F:67:2A:C3:5C:07:EC
            X509v3 Authority Key Identifier:
                keyid:B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/7b9b0c32c13b26320d84b22db763ca09ba20dc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6a:3b:c0:eb:8c:25:2f:d2:91:1c:2c:18:00:b0:e0:66:2b:
         3b:cb:bc:12:f0:43:4b:5d:cb:25:f2:78:7a:33:65:a0:82:15:
         df:1b:86:1b:02:6f:8b:aa:37:1e:c7:fb:ba:ec:88:42:4d:80:
         bb:5c:8e:1f:39:1c:42:cc:1a:65:3a:66:7b:e9:7a:49:4a:e2:
         a4:e9:ef:82:bd:72:8d:c4:d8:a6:79:57:ca:0a:fb:6e:27:7c:
         b3:06:6d:3c:33:89:b2:78:97:71:c8:ba:ae:79:a8:f7:60:87:
         17:67:1f:01:bc:56:c5:2c:8d:cd:a9:02:86:57:6d:fa:04:99:
         46:6c:03:1a:a1:46:e0:b4:35:10:26:77:90:78:d9:9c:76:f7:
         48:fb:f8:9d:16:b6:a1:2e:4e:06:42:84:cd:25:15:03:96:db:
         30:61:78:85:65:1e:b0:cf:f8:12:fc:17:2e:7f:9a:b0:20:bb:
         71:07:9c:5d:74:87:12:d8:3c:2a:26:46:60:4c:f2:f6:25:3a:
         19:00:47:29:ed:6d:f3:b5:d2:44:19:e1:76:a9:02:66:b5:f2:
         b3:d8:06:69:36:a9:6e:35:f3:38:5a:35:74:ea:6a:e1:ed:2b:
         5f:3d:2a:34:eb:47:44:ff:5b:0a:fe:6a:92:52:ac:67:a4:74:
         ac:06:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org