Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/da35e09ac2ee8b086ca5f02995abcf155d4c621a.roa
File:                     da35e09ac2ee8b086ca5f02995abcf155d4c621a.roa (raw, json)
Hash identifier:          DyoYIWiMWsuyO8RmQb9dt55pjuIy0ft1o9pKXF0ThUI=
Subject key identifier:   22:CA:8B:85:30:B7:FB:73:78:05:32:D0:B5:31:0D:55:90:29:CE:A3
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       1ABFA1
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/da35e09ac2ee8b086ca5f02995abcf155d4c621a.roa
Signing time:             Mon 24 Oct 2022 12:33:05 +0000
ROA not before:           Sun 23 Oct 2022 12:28:08 +0000
ROA not after:            Thu 24 Oct 2024 12:28:08 +0000
asID:                     265862
IP address blocks:        45.225.216.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752993 (0x1abfa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Oct 23 12:28:08 2022 GMT
            Not After : Oct 24 12:28:08 2024 GMT
        Subject: CN=da35e09ac2ee8b086ca5f02995abcf155d4c621a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:4e:ae:30:ee:d8:fb:64:b8:15:dd:d8:0d:
                    d0:dd:7c:58:cf:81:57:1c:f5:6e:b0:9e:b3:10:e0:
                    c4:a5:9e:6a:14:18:16:a3:29:44:e2:da:c0:ca:e9:
                    11:b7:dd:6f:22:33:21:30:cd:db:c3:2c:f5:ba:4b:
                    1c:06:c4:1a:55:78:54:bb:50:f9:35:62:58:09:f6:
                    c7:6c:c1:02:de:9e:6f:c4:e7:83:91:d4:f9:b3:f8:
                    9c:f6:88:6f:aa:e6:b6:b3:e5:bc:e8:26:a1:42:fc:
                    64:60:53:a0:68:27:8b:87:20:68:c4:7c:14:8d:b1:
                    3c:43:93:83:20:17:df:68:82:3c:d1:56:70:54:2e:
                    63:8e:e6:70:1c:dc:29:cc:06:1a:73:e1:a1:d8:95:
                    54:da:50:61:a7:61:60:b4:3d:81:5a:6d:29:25:8f:
                    87:35:09:79:f4:3c:fe:25:fe:e1:bb:9a:15:d7:2a:
                    97:6c:90:e6:16:88:a2:95:49:00:6a:83:ee:6a:4d:
                    51:00:ee:37:33:e0:00:5c:90:2b:bf:82:38:f5:3e:
                    38:66:d0:18:c0:ed:83:61:59:83:fa:67:13:91:4f:
                    ca:fa:f0:34:84:b4:d7:6f:6d:14:88:f6:49:e5:44:
                    99:f4:68:2e:d0:55:7f:8a:22:db:49:59:ea:8c:bc:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:8B:85:30:B7:FB:73:78:05:32:D0:B5:31:0D:55:90:29:CE:A3
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/da35e09ac2ee8b086ca5f02995abcf155d4c621a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:62:7d:b7:72:88:8d:82:01:96:33:4e:4a:dd:ba:a3:03:
         5f:c3:eb:99:0e:ba:07:15:54:b3:32:a4:d1:0e:ea:53:68:3a:
         8b:d1:44:42:55:f9:54:bd:d9:d9:f7:09:89:86:1f:18:35:cb:
         d3:32:8b:fa:ce:3a:8d:67:66:db:82:66:7f:3c:e2:3b:0a:e3:
         f8:a7:0c:34:7f:70:0d:bc:6a:a0:33:27:eb:4a:4a:2a:c3:8b:
         5c:36:a4:09:fc:86:3d:f0:30:23:44:9c:06:26:ef:04:a1:53:
         4a:35:db:41:ba:d2:b9:f0:72:84:72:86:6b:63:23:fa:74:ed:
         42:9f:89:48:61:5c:a3:14:f2:71:49:83:be:34:75:61:e9:3c:
         4d:ff:0c:c0:f9:d3:f5:50:f1:44:60:61:ad:b0:69:08:f4:c0:
         0e:e6:2c:5b:29:14:10:b5:e8:e7:cf:d3:4d:65:63:09:ff:e3:
         ad:13:18:21:aa:26:9e:75:9f:11:b6:f0:2f:30:fc:71:a2:e3:
         79:e3:94:bb:96:ca:72:15:8a:39:31:f4:8c:a0:45:f5:74:c0:
         69:ac:55:15:f6:9e:87:c7:b8:31:77:e0:ed:dd:73:70:b0:a7:
         53:e3:0f:c9:bf:b2:02:b1:8c:6a:a6:ea:a8:7e:b0:c8:59:69:
         78:72:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org