Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/481f5d7948f98a6f5b6e96ff7e584664e213a24b.roa
File:                     481f5d7948f98a6f5b6e96ff7e584664e213a24b.roa (raw, json)
Hash identifier:          ud5/mE0zAiRFE+OlRaNZlXA6Rl67l4RDFi8rDfgYZHA=
Subject key identifier:   3F:7F:39:CE:26:CB:C3:0E:DB:38:40:BA:6A:74:CE:8E:16:09:32:1B
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       1FD38C
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/481f5d7948f98a6f5b6e96ff7e584664e213a24b.roa
Signing time:             Mon 05 Jun 2023 21:09:26 +0000
ROA not before:           Sun 04 Jun 2023 21:09:25 +0000
ROA not after:            Thu 05 Jun 2025 21:09:25 +0000
asID:                     267869
IP address blocks:        45.176.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085772 (0x1fd38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Jun  4 21:09:25 2023 GMT
            Not After : Jun  5 21:09:25 2025 GMT
        Subject: CN=481f5d7948f98a6f5b6e96ff7e584664e213a24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:19:7b:61:1c:d1:1a:bd:65:04:3c:1c:05:
                    8f:7b:10:24:5d:c3:49:fb:c5:34:6e:dd:42:69:31:
                    5d:70:dc:ff:bc:19:b8:6a:05:b9:66:ae:a9:04:98:
                    55:c9:6f:99:be:58:c2:01:d6:77:12:68:9f:74:6e:
                    b6:1c:e5:60:37:c2:1c:ac:44:6e:d0:97:88:db:6c:
                    3d:58:c4:1a:c8:2b:e3:a5:29:43:9f:4c:47:1c:ed:
                    a0:eb:02:8b:0a:fb:2e:67:75:0e:3b:14:b8:5d:78:
                    99:b0:5a:66:57:56:9f:63:3c:85:b7:0a:86:e1:e0:
                    80:ce:3a:82:4d:4f:02:b1:99:94:97:9b:2c:c4:ae:
                    c9:22:97:e1:9d:8e:9f:45:44:9b:ff:73:15:9c:80:
                    d9:19:4d:89:8a:b5:51:90:ca:a2:e1:2e:d4:d4:88:
                    81:28:cd:8a:5d:e5:d7:b3:e6:80:47:0b:19:0d:1a:
                    6d:86:94:ea:ef:c3:9b:6b:c0:ea:ca:25:ac:e2:95:
                    bf:eb:4b:74:d0:49:07:9c:c2:58:a0:38:a6:35:79:
                    f2:d7:29:92:30:22:30:39:10:9d:80:29:90:9a:81:
                    18:1c:68:34:42:04:55:4e:45:fe:53:92:d7:61:64:
                    f1:1b:3d:ac:23:69:72:ad:35:9d:e3:94:98:0d:09:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:39:CE:26:CB:C3:0E:DB:38:40:BA:6A:74:CE:8E:16:09:32:1B
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/481f5d7948f98a6f5b6e96ff7e584664e213a24b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:7c:0c:90:30:01:dc:db:95:12:d2:21:7e:df:24:45:25:
         b7:00:be:f6:15:88:a7:82:0f:8e:04:5e:fe:62:17:92:44:20:
         9c:50:3a:29:c5:98:e2:b4:54:97:bb:75:6e:0c:5a:69:e7:6d:
         89:e0:4b:9a:81:ba:de:a5:8c:a4:41:4e:fa:a0:66:03:b5:66:
         75:ee:2d:ce:29:f3:47:ce:0c:b5:82:79:a7:90:fb:22:71:a2:
         9e:d9:7d:d0:7c:c3:e2:e4:24:e0:7b:f6:8e:4e:5f:95:8f:a4:
         39:a5:3f:bf:96:6d:7d:51:a6:52:24:ed:9e:ae:4f:48:07:75:
         46:de:61:57:ee:d9:68:f5:a8:26:fe:d7:a3:2f:e6:81:d5:1a:
         07:49:a9:d9:7a:a7:e0:5d:19:5c:bb:48:fe:01:1f:f2:bf:ba:
         5e:24:c1:47:bb:b2:a5:d7:0e:be:3f:40:6d:15:bf:a9:08:26:
         f4:43:7f:d1:a1:f8:f0:a9:cd:b8:09:ef:d4:b8:d1:10:a1:80:
         b8:f5:51:53:9b:41:19:13:9a:31:cb:1f:17:d1:ef:60:e0:5a:
         c2:2d:e7:0d:d5:a1:2b:65:15:8c:52:84:74:7c:e0:32:b2:49:
         9a:66:5d:e9:44:0a:09:8a:3f:60:01:ab:04:63:7a:65:16:ed:
         6f:63:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org