Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3932e11dcb9ecb21308ac4ad6adaa728dc0f823a.roa
File:                     3932e11dcb9ecb21308ac4ad6adaa728dc0f823a.roa (raw, json)
Hash identifier:          xFqjcV6R6Jm8xOaE2Gm7cPBg91QqwLbt+CuFTx+Olk0=
Subject key identifier:   F4:C5:A8:69:F9:FB:FD:DC:95:CF:99:03:BF:67:BE:C5:A4:98:CA:B6
Certificate issuer:       /CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
Certificate serial:       1DE684
Authority key identifier: 5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3932e11dcb9ecb21308ac4ad6adaa728dc0f823a.roa
Signing time:             Fri 30 Dec 2022 07:30:01 +0000
ROA not before:           Thu 29 Dec 2022 07:30:01 +0000
ROA not after:            Sat 28 Dec 2024 07:30:01 +0000
asID:                     269838
IP address blocks:        45.228.52.0/24 maxlen: 24
                          45.228.54.0/24 maxlen: 24
                          45.228.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959556 (0x1de684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
        Validity
            Not Before: Dec 29 07:30:01 2022 GMT
            Not After : Dec 28 07:30:01 2024 GMT
        Subject: CN=3932e11dcb9ecb21308ac4ad6adaa728dc0f823a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7e:54:f9:78:5a:44:a1:ce:12:d0:37:47:8b:
                    2a:50:2a:b5:aa:7d:6f:95:53:d9:88:de:40:e7:b7:
                    67:5e:82:87:11:11:a1:33:40:50:44:be:c4:d9:00:
                    d2:d2:d9:2d:57:4c:e0:2c:84:76:ae:dc:86:22:0b:
                    72:23:c4:4b:94:94:1c:dc:5a:0f:af:d0:c7:74:f0:
                    46:ea:db:0d:37:15:17:16:15:41:b0:a0:4d:6d:ef:
                    d7:9c:ac:0c:9d:69:e1:67:4e:38:84:08:de:2c:2a:
                    29:07:82:75:48:cf:9e:e2:f8:22:1d:0a:ac:06:89:
                    4d:9c:5d:d9:a5:a2:76:8e:12:92:c5:cb:5a:fa:24:
                    f1:67:d5:50:e3:03:8c:42:3d:75:4c:75:68:6b:ab:
                    f8:77:69:a9:d1:d0:85:f3:f7:11:21:07:c0:bb:34:
                    12:89:74:6c:1f:7f:64:d5:ec:53:13:5e:61:f3:84:
                    ab:e2:77:fc:8b:dc:b6:9b:08:4a:01:90:00:31:27:
                    f8:00:bc:8d:e0:28:93:31:0c:79:8f:e2:e6:38:15:
                    d8:f8:62:f8:05:6d:03:83:7c:5b:72:ae:b7:68:17:
                    e1:2d:5e:47:59:78:20:eb:fc:8b:35:bf:4a:b3:3a:
                    2e:7a:2c:c1:fa:e1:ac:1b:14:48:f5:92:cd:e1:eb:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:A8:69:F9:FB:FD:DC:95:CF:99:03:BF:67:BE:C5:A4:98:CA:B6
            X509v3 Authority Key Identifier:
                keyid:5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3932e11dcb9ecb21308ac4ad6adaa728dc0f823a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.52.0/24
                  45.228.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:75:d4:b4:14:b1:67:e8:31:68:55:68:dd:36:a0:9e:e1:
         19:4d:8a:06:16:4e:37:e2:5f:54:42:af:6f:67:d9:a6:5b:c7:
         82:93:44:19:b6:37:93:c0:13:5e:36:94:8a:86:80:6b:72:81:
         8f:98:68:3a:b4:8f:32:9a:c1:5f:96:2f:d0:f7:1e:35:8c:7b:
         13:8d:ef:8b:c7:51:3f:1c:d0:8c:d0:b2:1a:ac:0a:76:46:bd:
         a5:15:b6:7c:26:04:14:54:2f:ac:b5:6b:69:46:0b:ef:b9:3b:
         d9:f4:7f:69:43:c7:20:68:14:1b:d5:34:52:b3:7a:6d:41:7a:
         c2:77:4f:da:97:f2:89:31:ff:53:52:85:69:8f:eb:fd:f3:30:
         c0:d8:97:22:e4:e8:f5:c2:b4:af:11:50:0f:7a:10:a1:62:4f:
         c0:2a:f3:e4:bf:10:1c:14:35:61:2f:30:a9:48:54:88:0d:4e:
         23:fe:1e:22:50:cc:f4:f4:c9:54:66:dd:0b:04:e1:b8:42:4e:
         87:b3:54:a5:4f:a7:ed:30:8c:20:01:0a:cf:b4:d2:00:1c:86:
         c6:69:d4:02:67:24:e3:c0:fa:96:36:30:b0:fb:f2:80:7e:64:
         73:9e:45:a8:52:f7:ba:1b:5b:76:48:b9:23:91:66:ce:cb:ad:
         c1:32:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org