Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/1513a7f07d2964f1ec9d834e2c804386abe0849f.roa
File:                     1513a7f07d2964f1ec9d834e2c804386abe0849f.roa (raw, json)
Hash identifier:          W1OHY51DG9dIkRFTo6lL5JbhJxYskBdTPuPafH417sU=
Subject key identifier:   EB:07:81:C1:44:26:96:09:E2:4C:AA:3E:8B:B0:75:7F:67:7E:3C:8E
Certificate issuer:       /CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
Certificate serial:       01E0BA
Authority key identifier: 7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/1513a7f07d2964f1ec9d834e2c804386abe0849f.roa
Signing time:             Tue 22 Aug 2023 22:57:55 +0000
ROA not before:           Mon 21 Aug 2023 22:57:55 +0000
ROA not after:            Fri 22 Aug 2025 22:57:55 +0000
asID:                     267724
IP address blocks:        45.166.144.0/22 maxlen: 22
                          2803:85a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123066 (0x1e0ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
        Validity
            Not Before: Aug 21 22:57:55 2023 GMT
            Not After : Aug 22 22:57:55 2025 GMT
        Subject: CN=1513a7f07d2964f1ec9d834e2c804386abe0849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:8c:4a:7e:b0:7a:a8:e1:a4:57:c0:2b:9a:
                    48:5a:5a:8b:b0:2e:70:6f:da:c1:1e:1d:57:d5:65:
                    bc:a6:ae:fe:5f:7f:2c:65:66:2f:34:35:1b:14:e1:
                    d6:38:50:04:92:bc:64:36:e4:87:23:1f:26:26:93:
                    e6:91:c4:11:f1:54:a0:bc:45:5b:f0:8b:4d:e3:5d:
                    3f:1f:ca:2d:f8:db:a5:d8:ba:31:3b:7c:15:b4:38:
                    77:49:b6:31:43:44:99:f6:6e:e1:eb:4e:92:85:5f:
                    14:94:90:38:f9:6d:03:d3:e5:78:9a:00:fd:52:d3:
                    72:61:ba:de:7e:89:2b:6d:6c:e7:29:d0:16:3b:68:
                    83:53:8e:05:ed:3d:f8:ed:fd:51:77:f6:8d:5d:1b:
                    04:e7:31:65:61:0c:c3:ba:07:e6:9d:12:27:7b:82:
                    aa:92:de:de:3c:74:9d:0d:ca:5d:9f:97:59:c2:7c:
                    d7:d5:61:00:6f:3c:62:e9:b1:5a:cc:fb:2b:ff:83:
                    05:cd:ed:fd:85:5b:fa:b4:66:e8:90:a5:81:0d:1f:
                    e3:7e:53:83:03:09:11:8f:14:b4:ae:cd:4c:7b:da:
                    bc:ff:e8:04:9f:1c:f3:71:12:32:40:0c:d4:3b:8b:
                    00:a1:bb:99:af:05:50:9c:db:75:22:c9:14:61:89:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:07:81:C1:44:26:96:09:E2:4C:AA:3E:8B:B0:75:7F:67:7E:3C:8E
            X509v3 Authority Key Identifier:
                keyid:7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/1513a7f07d2964f1ec9d834e2c804386abe0849f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.144.0/22
                IPv6:
                  2803:85a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:2d:cf:25:f1:7b:ec:24:d0:49:11:56:12:70:5f:43:82:
         bc:67:ac:65:45:51:7e:11:fe:5b:b6:ce:1d:da:46:50:f7:e3:
         7b:2f:f1:a3:5c:79:25:24:45:1e:1f:58:f5:ce:c0:f2:f3:ef:
         1d:85:41:b8:92:1b:ca:2c:99:e5:84:ee:9c:d7:51:75:32:f5:
         ee:e5:14:69:19:5c:36:a2:ad:43:40:24:f6:20:9f:80:9d:8b:
         27:86:b9:45:de:01:ac:5e:45:cd:62:a9:14:40:6c:e8:d8:e2:
         9b:39:dd:4f:50:1c:3e:07:67:60:21:61:41:1b:04:c3:8a:ed:
         56:4a:bd:85:0e:3f:d4:05:24:b3:6a:e0:df:5f:de:8f:c2:3b:
         2a:1f:f4:a0:88:66:2e:3c:d7:f3:44:1e:8f:6e:f2:8e:2f:9b:
         8c:0c:4d:01:88:3a:e8:56:c4:b5:6c:35:ed:48:ef:69:27:02:
         ae:5b:5b:77:42:c3:ec:e0:80:13:4b:62:93:92:4b:22:48:d4:
         bf:70:f4:77:07:19:d0:b0:f7:d1:ce:74:fd:c5:f8:7e:55:ae:
         8b:78:1e:07:76:c2:b0:b0:44:fb:7b:c4:d1:c6:29:ba:3c:73:
         6c:89:7d:7e:b5:02:39:64:63:9e:21:d0:63:2a:a8:72:4f:d1:
         40:91:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org