Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/f14b355846744f6056dcf56cb81010ccb3938451.roa
File:                     f14b355846744f6056dcf56cb81010ccb3938451.roa (raw, json)
Hash identifier:          Wq/S4/mVi1bLbpSoo6Ny/XiSyR4wtmohuYOk3KdCRvo=
Subject key identifier:   9F:0B:8B:89:83:36:3A:6B:40:D8:EF:2D:5C:9B:4F:7A:93:11:89:12
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       1FD6B6
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/f14b355846744f6056dcf56cb81010ccb3938451.roa
Signing time:             Mon 05 Jun 2023 21:09:27 +0000
ROA not before:           Sun 04 Jun 2023 21:09:25 +0000
ROA not after:            Thu 05 Jun 2025 21:09:25 +0000
asID:                     3549
IP address blocks:        45.176.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086582 (0x1fd6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Jun  4 21:09:25 2023 GMT
            Not After : Jun  5 21:09:25 2025 GMT
        Subject: CN=f14b355846744f6056dcf56cb81010ccb3938451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:63:02:6b:e2:6e:11:e9:2d:49:0c:1a:ea:
                    b4:b0:d1:a6:ce:cc:3c:42:c3:21:8f:57:ce:80:16:
                    08:05:23:d1:e8:88:1e:b3:2f:e6:51:12:9e:1d:89:
                    73:71:52:99:f1:b4:e6:91:bf:f5:20:8a:25:1a:41:
                    90:d1:4e:0c:c2:ff:dc:69:24:e4:2f:73:af:45:f6:
                    56:c4:4a:45:65:77:3e:bf:81:2d:94:30:63:f4:bf:
                    3d:5b:e4:88:01:9a:c5:f2:7f:ee:ff:a1:10:eb:fd:
                    34:74:41:f2:82:25:15:9a:b6:c1:13:19:89:bf:8c:
                    af:75:68:40:f9:12:ee:9a:23:7a:17:64:ff:d3:1e:
                    fc:f6:3a:2b:e7:b1:9f:31:5f:b1:d1:71:73:52:f6:
                    7f:70:20:bb:f9:b8:4f:92:bf:f6:5f:e5:ee:da:e4:
                    c9:a9:4d:74:70:28:27:1e:53:63:ba:4f:4a:86:a6:
                    f1:0a:97:d6:11:e1:ad:5b:d1:e6:5e:f9:03:66:45:
                    6b:c6:d0:84:78:17:00:48:28:83:27:cd:b1:1d:4c:
                    00:13:2e:a9:55:f1:d9:b6:1b:77:bd:a8:42:36:5f:
                    1b:04:ea:56:89:4a:f7:5d:1d:75:9b:28:1f:e8:2d:
                    86:39:88:0a:45:e9:99:4e:e4:15:d2:98:08:10:df:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:8B:89:83:36:3A:6B:40:D8:EF:2D:5C:9B:4F:7A:93:11:89:12
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/f14b355846744f6056dcf56cb81010ccb3938451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:9c:e6:cf:20:01:31:88:ac:2e:30:5a:d9:3f:2d:7f:6e:
         3e:18:84:5f:16:e7:9c:21:76:b1:8e:01:5e:68:7e:39:0f:75:
         d2:a0:cb:85:26:9e:8e:2a:2a:30:fb:b7:19:ff:88:e2:99:15:
         94:15:9e:d7:38:a0:4e:ff:21:a8:b1:88:af:50:2a:32:1e:16:
         fd:96:76:8d:0a:98:d3:75:fc:83:c8:f0:da:f5:ed:ca:8a:4c:
         e4:0f:69:31:ab:f2:88:cf:78:ea:69:12:7b:62:8f:b6:4d:46:
         24:9e:7b:a5:4e:0e:6a:c9:b5:e7:4e:7d:cc:ae:0e:43:1f:40:
         e1:ca:00:b2:5b:e6:f1:ab:08:70:af:38:39:3b:44:04:55:d6:
         3a:db:44:90:82:47:3c:9b:a2:71:6a:48:b2:b1:7d:f7:dd:96:
         a7:3c:64:55:4f:99:22:75:a8:fc:ea:75:8b:f5:dc:86:2a:a1:
         64:8a:78:f4:99:ca:bb:07:cf:47:e9:72:94:a9:04:ad:a5:71:
         ec:c3:3a:7b:1a:be:c6:5a:52:ec:81:47:b8:60:3a:e5:45:c6:
         7a:b2:b0:95:58:4a:2a:0e:ca:98:0f:37:14:f0:b7:a6:f6:58:
         24:0b:6c:4b:aa:a1:6d:42:7e:a2:a0:76:81:73:a4:53:65:83:
         21:8d:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org