Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/73829dbbd4e3b8e7ef2701227a6c0c5daee16d41.roa
File:                     73829dbbd4e3b8e7ef2701227a6c0c5daee16d41.roa (raw, json)
Hash identifier:          bOo8rNSv8bF2fHTTKmM14BBL+2j2Na71vUwdC1agPDA=
Subject key identifier:   21:26:89:D4:61:7A:CD:79:04:B5:93:76:22:7A:B9:86:36:53:FE:5C
Certificate issuer:       /CN=ebf04e08f0d4a39fc5898cea5aace966693cd306
Certificate serial:       0E03A1
Authority key identifier: 65:E4:60:77:5F:FE:64:52:53:62:2E:3F:8E:DC:43:11:A4:A2:0C:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf04e08f0d4a39fc5898cea5aace966693cd306.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/73829dbbd4e3b8e7ef2701227a6c0c5daee16d41.roa
Signing time:             Sat 16 Mar 2024 17:03:12 +0000
ROA not before:           Sat 16 Mar 2024 17:03:12 +0000
ROA not after:            Mon 16 Mar 2026 17:03:12 +0000
asID:                     269818
IP address blocks:        45.184.152.0/23 maxlen: 23
                          45.184.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918433 (0xe03a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf04e08f0d4a39fc5898cea5aace966693cd306
        Validity
            Not Before: Mar 16 17:03:12 2024 GMT
            Not After : Mar 16 17:03:12 2026 GMT
        Subject: CN=73829dbbd4e3b8e7ef2701227a6c0c5daee16d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:bd:c9:9e:a8:41:82:a9:ba:3c:23:a6:e3:
                    f1:fd:08:cc:d3:ad:a5:d9:d4:a2:35:77:8a:11:de:
                    92:e1:29:b2:4b:ff:e9:e5:34:30:4f:1b:94:8d:c8:
                    5c:47:7c:58:1f:31:f0:78:de:30:bb:03:12:b1:7f:
                    12:6e:81:53:cb:40:d7:a7:56:84:ce:83:65:42:de:
                    3d:89:96:79:69:d7:4a:82:00:ac:3b:93:48:23:0c:
                    8c:53:86:f0:63:46:bd:f7:f7:f1:b9:4d:43:1c:00:
                    79:88:c6:9a:b2:92:fa:76:5f:db:52:c1:39:66:a4:
                    ff:32:fc:16:ac:e8:6a:49:bb:7d:72:d1:0d:de:0f:
                    39:de:b7:c3:af:a1:8d:82:f0:24:ba:81:6f:8a:71:
                    59:e1:6f:7e:b2:fc:c5:73:6f:32:c2:fe:85:e4:7c:
                    30:2f:a1:71:86:79:e8:24:f6:11:b9:34:a6:cb:10:
                    b0:a4:80:11:53:c9:3f:3f:3e:37:1c:1f:95:16:94:
                    e5:fd:b7:47:bc:65:ee:ab:e2:d5:f0:c6:ec:93:1c:
                    cb:58:04:82:83:c6:57:24:cb:5e:21:ab:48:64:07:
                    0f:08:7d:3f:a2:b5:e3:45:68:0e:c1:07:f3:83:95:
                    08:8b:37:15:5a:95:34:3f:c3:6f:42:d3:27:a9:f3:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:26:89:D4:61:7A:CD:79:04:B5:93:76:22:7A:B9:86:36:53:FE:5C
            X509v3 Authority Key Identifier:
                keyid:65:E4:60:77:5F:FE:64:52:53:62:2E:3F:8E:DC:43:11:A4:A2:0C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf04e08f0d4a39fc5898cea5aace966693cd306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/73829dbbd4e3b8e7ef2701227a6c0c5daee16d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/ebf04e08f0d4a39fc5898cea5aace966693cd306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:d4:38:aa:07:8d:75:d1:5b:0a:44:99:42:83:6e:ed:96:e5:
         5f:b1:fe:18:bb:50:29:3f:d1:c5:66:b4:0b:d4:fc:b4:b9:29:
         58:0e:0f:68:62:4f:7a:e9:e3:05:7e:11:9f:37:8e:66:42:5b:
         e8:eb:4b:14:0c:d3:c5:ea:67:84:f2:01:68:45:dd:6a:2e:48:
         9f:b2:1b:86:e8:c0:38:d6:0f:26:3b:1d:e5:81:0e:01:ef:12:
         8a:1b:12:bf:73:ed:30:6b:da:32:bc:8a:f1:6c:ad:05:6e:bf:
         d8:34:e1:86:43:d6:2f:d4:e1:55:bd:b9:31:d9:0f:9f:39:a0:
         bb:c8:46:98:49:9e:2e:e5:aa:63:b8:51:be:d3:36:aa:99:b1:
         4d:ae:c0:97:9a:b5:db:0e:8a:0b:01:0b:1b:b0:45:0d:96:c0:
         ea:dd:07:2b:a6:3e:e4:f9:4f:72:78:70:96:cc:85:7c:b9:ca:
         87:57:37:16:e2:bf:98:97:13:de:c7:e4:be:ac:a0:ba:10:5a:
         f6:fa:88:25:86:d4:9d:6a:c7:dd:6b:3a:2e:88:59:a7:7c:1a:
         1c:4b:01:ff:f3:78:aa:b2:de:bf:ea:a6:04:08:2f:aa:88:84:
         0d:a3:84:b6:8d:f2:da:8a:54:bc:08:ae:bd:2e:2e:46:01:9b:
         57:1b:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org