Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/3ae80ead03e3c3a41a1ae6b9aed125d1e104d536.roa
File:                     3ae80ead03e3c3a41a1ae6b9aed125d1e104d536.roa (raw, json)
Hash identifier:          tSIl57wfJ9XXTIMgujR/ZJYIAziAdtMZ6GDx0DWJUqo=
Subject key identifier:   0B:5A:0C:4B:59:AE:E3:72:23:BE:E6:48:8A:4F:59:E5:34:4D:C8:49
Certificate issuer:       /CN=09c79d30288209739f9c6d166171b04bde05c914
Certificate serial:       02E4D1
Authority key identifier: ED:40:B4:A9:17:52:42:77:66:C6:15:48:DE:D6:2F:F1:9E:BF:D8:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09c79d30288209739f9c6d166171b04bde05c914.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/3ae80ead03e3c3a41a1ae6b9aed125d1e104d536.roa
Signing time:             Fri 01 Sep 2023 02:03:44 +0000
ROA not before:           Thu 31 Aug 2023 02:03:44 +0000
ROA not after:            Mon 01 Sep 2025 02:03:44 +0000
asID:                     266836
IP address blocks:        45.238.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189649 (0x2e4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c79d30288209739f9c6d166171b04bde05c914
        Validity
            Not Before: Aug 31 02:03:44 2023 GMT
            Not After : Sep  1 02:03:44 2025 GMT
        Subject: CN=3ae80ead03e3c3a41a1ae6b9aed125d1e104d536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:2d:3c:8b:9c:3c:7a:63:8b:c6:48:0c:5c:
                    2d:b8:a7:6f:4f:b2:62:70:7f:78:72:87:c5:c5:af:
                    18:37:36:c0:9a:ac:bf:ea:7a:29:8d:15:9e:e4:6e:
                    75:d2:90:13:b8:85:08:86:88:fd:94:04:ef:86:ab:
                    1e:01:f4:a0:b3:16:90:80:32:fe:7f:3b:1c:c0:97:
                    6d:47:53:86:48:18:55:64:93:61:9b:b6:52:1c:f6:
                    dd:be:8a:e9:97:30:75:34:ab:4c:24:9d:fb:4c:3a:
                    f5:95:09:77:5a:5e:8b:b4:97:6b:2b:57:59:c7:72:
                    cb:5f:50:22:2c:a5:b6:80:cf:ae:b0:fe:dc:cd:db:
                    1f:a2:ff:74:09:55:ae:0a:a1:f7:7c:f7:11:78:a1:
                    4c:22:bf:2f:2a:7a:96:d7:c6:3a:96:8b:8c:ab:4f:
                    ae:bb:0f:d8:25:77:ae:4b:c7:d0:de:62:1b:2f:3a:
                    0f:bb:43:d8:6f:0b:97:a7:e3:9c:27:13:06:0a:a4:
                    19:2b:36:79:2c:62:97:2e:db:75:85:84:5b:32:86:
                    cd:a1:68:8a:3a:e1:e1:92:70:9f:3a:02:5b:28:57:
                    1c:16:e0:4e:f1:3f:21:60:03:65:57:fc:f0:e1:d0:
                    82:58:3f:29:c7:81:a8:4a:10:c2:75:58:a4:bc:a8:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:0C:4B:59:AE:E3:72:23:BE:E6:48:8A:4F:59:E5:34:4D:C8:49
            X509v3 Authority Key Identifier:
                keyid:ED:40:B4:A9:17:52:42:77:66:C6:15:48:DE:D6:2F:F1:9E:BF:D8:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09c79d30288209739f9c6d166171b04bde05c914.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/3ae80ead03e3c3a41a1ae6b9aed125d1e104d536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/09c79d30288209739f9c6d166171b04bde05c914.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:67:e7:f1:bd:4f:48:98:e2:90:fc:17:fc:62:1d:39:c0:
         b0:75:70:d4:9b:f6:c8:4b:51:11:f6:17:f6:46:65:23:55:d4:
         d3:da:a2:c2:cb:f3:59:35:4a:30:5a:c6:98:01:3b:44:ed:2c:
         2c:9b:79:ee:7b:08:b4:2a:d4:91:c1:ec:b7:d9:72:c4:41:4c:
         f5:63:db:2c:f9:eb:63:f0:6e:95:a7:0b:50:53:0a:96:9e:04:
         a1:ce:7b:b0:05:56:57:25:bd:a0:6b:e3:12:d0:60:a9:33:c0:
         cb:22:70:39:57:e0:47:cd:70:0d:f9:7d:32:90:45:e6:09:26:
         e2:19:a7:69:dc:5d:8f:5e:0a:e1:88:c0:0c:88:cc:f1:8a:71:
         3c:4e:96:5a:5b:4c:fc:c5:ee:0a:3a:87:84:7d:49:81:61:90:
         00:95:d1:c3:e6:cb:d1:c6:83:5f:19:9a:1a:12:76:ab:1b:53:
         48:1b:e5:e0:29:ff:51:2a:08:ba:2a:3d:8f:8f:30:c7:a5:c6:
         c7:d4:35:38:00:9c:ac:7a:3e:aa:a1:ed:eb:e9:72:7a:7c:7c:
         9c:3d:86:15:e7:4f:df:82:8e:f0:0b:b6:dd:03:35:3d:9b:2a:
         f0:fd:0c:9b:85:8e:1b:8f:f7:4d:54:46:fe:26:ac:46:26:f3:
         fc:57:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org