Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/228340d259f856df85ccb1bf0b09270285d2d950.roa
File:                     228340d259f856df85ccb1bf0b09270285d2d950.roa (raw, json)
Hash identifier:          +IbzMfbLMiXheapUsoKqan3u/YPtsSPRQDBCA8njgzs=
Subject key identifier:   CD:7E:81:83:6C:E1:83:85:EF:56:10:D3:B7:15:92:BB:92:7E:32:58
Certificate issuer:       /CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
Certificate serial:       1A0E2E
Authority key identifier: 5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/228340d259f856df85ccb1bf0b09270285d2d950.roa
Signing time:             Fri 05 Aug 2022 07:50:52 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Sat 31 Dec 2022 03:00:00 +0000
asID:                     269838
IP address blocks:        45.228.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707566 (0x1a0e2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2022 GMT
        Subject: CN=228340d259f856df85ccb1bf0b09270285d2d950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:73:35:62:f3:50:04:60:6a:31:ab:5a:01:
                    63:02:80:45:bd:19:e5:71:31:74:52:fc:fd:f7:36:
                    6d:c3:01:a4:80:5d:27:16:e3:d5:b9:6f:98:d2:45:
                    96:8e:96:87:e3:12:53:a1:9d:87:35:00:b5:40:f5:
                    ef:3d:ad:83:4e:d6:87:8d:a1:88:ec:9a:69:3d:59:
                    b9:85:b0:b4:70:05:fc:13:a6:63:3c:92:21:a8:a9:
                    91:14:b2:97:da:85:1c:8b:96:31:31:c1:63:d2:e5:
                    dd:b9:55:f6:65:dc:c3:5e:ee:af:58:fd:54:36:aa:
                    ac:91:cb:b3:dc:33:10:c9:3b:b6:03:19:57:34:eb:
                    44:73:00:d2:09:ed:81:8a:d4:77:a6:a5:c6:f2:0b:
                    34:0c:8b:69:cb:cd:57:cd:51:9d:b8:8a:b2:86:3c:
                    01:f7:b5:31:2a:b1:a4:75:e5:d1:cb:39:14:77:0c:
                    9f:98:a6:d8:88:29:a0:6f:55:e5:80:0e:88:c3:3e:
                    e6:64:80:02:2f:29:62:61:ef:c8:14:91:64:fe:85:
                    08:0b:e0:82:e7:6b:8f:82:b6:09:5a:c4:68:df:26:
                    1c:f2:b6:b0:5d:b0:fd:9c:6f:f8:d1:a7:51:30:94:
                    c9:80:c0:47:9e:d1:85:dc:00:66:04:76:40:44:24:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7E:81:83:6C:E1:83:85:EF:56:10:D3:B7:15:92:BB:92:7E:32:58
            X509v3 Authority Key Identifier:
                keyid:5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/228340d259f856df85ccb1bf0b09270285d2d950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:50:a8:85:d3:d5:2a:7a:8f:d3:ca:ba:cb:8a:37:58:28:
         3c:16:dd:cc:eb:2b:9f:0c:bd:2e:b0:59:91:97:f3:79:d9:6a:
         6a:ae:6d:e6:1d:56:e0:72:af:69:e7:f6:80:64:6e:e4:d3:ed:
         a5:18:66:17:24:fa:e7:e3:a5:5a:74:fa:2c:02:5f:4c:e8:1e:
         1d:7e:24:30:a2:4a:15:99:93:7a:3e:8a:62:04:9f:4b:e8:1a:
         c7:7f:50:cf:dc:dc:c3:39:3c:c6:2e:de:53:0c:1b:a3:a6:0f:
         07:44:40:31:44:9b:f8:6b:a6:9e:46:09:a7:00:f2:06:b9:9b:
         c8:fa:64:a3:b1:85:05:39:71:4b:a5:0e:0d:11:20:2b:53:0a:
         e9:8d:17:90:4f:a9:59:e6:a5:73:c9:db:a4:80:5a:c4:ea:cc:
         cd:e3:3e:97:1d:2a:de:d6:c1:6e:7c:c6:18:55:94:56:8d:5e:
         24:09:8c:3f:f8:99:a7:8b:e2:be:12:6e:ee:e1:e8:d0:0c:c7:
         c6:ff:aa:f4:dd:17:e6:bc:30:88:ec:ca:4a:9f:86:7b:c7:0a:
         65:80:1b:90:88:e7:45:11:be:fd:f4:9c:d7:af:4e:07:c6:91:
         7e:17:77:79:55:fe:ed:bf:fe:7b:eb:52:76:20:1a:85:b6:ca:
         0c:40:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org