Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/b95aeb29f867b96634d51c2dde38c4cb297c3997.roa
File:                     b95aeb29f867b96634d51c2dde38c4cb297c3997.roa (raw, json)
Hash identifier:          q2DS4cklVrD7pNyunmyiILB6SXQYe6jCjZlq3G7Pz1g=
Subject key identifier:   B1:0B:FA:AB:7B:5C:E8:18:6A:B1:E8:4C:F9:86:BC:3D:4B:74:10:46
Certificate issuer:       /CN=76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5
Certificate serial:       01995B
Authority key identifier: 62:E0:79:8B:7F:60:B0:2E:95:22:5B:E1:9D:22:C6:17:BD:BB:C9:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/b95aeb29f867b96634d51c2dde38c4cb297c3997.roa
Signing time:             Wed 01 Sep 2021 14:22:12 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     266853
IP address blocks:        45.65.188.0/24 maxlen: 24
                          45.65.189.0/24 maxlen: 24
                          45.65.190.0/24 maxlen: 24
                          45.65.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104795 (0x1995b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=b95aeb29f867b96634d51c2dde38c4cb297c3997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:0d:48:85:3c:5c:c4:1b:a8:0c:fd:d8:f2:
                    3e:cb:1b:4b:93:ba:0b:6e:ba:b8:01:09:29:ba:28:
                    df:f6:0b:93:2e:f6:40:cd:57:7f:48:46:71:bf:1a:
                    2f:a3:69:7f:a0:d9:0b:c3:f7:10:db:5b:2f:2a:a2:
                    4a:07:dc:61:4e:3b:10:0a:f4:0c:ba:1b:d4:c2:86:
                    74:bd:52:51:59:9d:da:e8:43:e6:14:b8:7c:cf:1c:
                    ef:54:a4:d9:41:f7:f8:8d:4e:e8:eb:73:28:9d:99:
                    ac:b0:99:bc:78:83:91:e1:10:f8:09:16:34:45:e7:
                    b6:56:8a:da:cb:64:95:4d:87:2f:82:5e:c7:4d:53:
                    0b:dd:62:a5:cb:ce:14:f7:c2:20:fd:d5:b6:a2:c6:
                    52:37:f2:42:19:8f:7c:72:6c:d4:38:87:ab:8b:53:
                    f7:51:94:94:54:c5:b4:43:aa:70:48:ad:13:34:20:
                    10:6a:e6:37:a1:7d:50:d4:f9:34:82:37:2e:cc:1c:
                    5b:7c:6e:d1:8b:b5:b4:fc:2c:b9:69:20:19:07:1d:
                    2a:81:cb:06:d8:69:ee:72:4e:33:6b:2e:03:b5:65:
                    bc:7f:69:41:a5:cd:89:5c:c0:4f:93:23:ce:b9:5a:
                    ff:62:31:3a:f1:67:8b:e7:0f:63:78:e5:9d:a0:8e:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:FA:AB:7B:5C:E8:18:6A:B1:E8:4C:F9:86:BC:3D:4B:74:10:46
            X509v3 Authority Key Identifier:
                keyid:62:E0:79:8B:7F:60:B0:2E:95:22:5B:E1:9D:22:C6:17:BD:BB:C9:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/b95aeb29f867b96634d51c2dde38c4cb297c3997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d06201e3-afe2-4a0e-a5e0-5bdfa59ad812/76f225ab4a9e1e6c7a46478c2f8d4d444393dcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:3a:e7:1c:f9:4e:99:95:36:31:bd:9b:e4:c6:cc:98:b3:
         81:8a:c3:95:ad:bd:ab:96:ac:cc:e8:be:a5:c4:87:ff:a6:57:
         ab:0a:97:9a:32:16:b4:01:d2:04:82:83:21:ba:41:ad:7f:e7:
         e6:0a:1c:bb:14:3c:06:51:f7:80:1f:a6:1b:1f:98:8b:3f:1e:
         3b:2d:20:b4:ab:64:a8:dc:c8:a9:f3:bc:a1:e9:c9:68:23:ab:
         4b:99:ca:46:1a:f8:de:c4:b8:94:87:ed:0b:37:de:45:1d:4c:
         4e:cb:18:c8:94:80:9c:a9:d4:80:59:79:c2:73:ce:dd:92:2d:
         2e:cb:6a:a4:72:1f:ce:6e:a2:57:19:54:5d:b4:58:be:5b:ec:
         cf:a5:3d:fa:00:b3:b9:65:43:4f:d9:71:d8:b3:ed:7d:59:9f:
         cf:07:6d:8c:dd:23:2b:b2:e3:21:ba:c7:c5:e7:b3:c0:17:9f:
         0d:c9:5f:0c:f6:ee:c0:82:8a:36:94:dd:b3:01:d6:d6:a2:04:
         19:7b:56:65:75:a7:f8:07:4c:fb:fb:de:72:f9:03:c0:c4:f5:
         62:b1:41:1f:0c:90:79:d6:41:18:5c:75:41:8a:a1:28:21:a1:
         21:ab:54:47:f4:9b:67:a6:2b:90:33:04:c7:4b:f9:f2:5e:aa:
         9d:ff:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org