Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f37415b3f33cc9546e21c3db214329f3649fc522.roa
File:                     f37415b3f33cc9546e21c3db214329f3649fc522.roa (raw, json)
Hash identifier:          mfQhX/IZmMzP+P4RSdaIe9LrQOVZivNhbr6kH1VyWkY=
Subject key identifier:   C3:EA:4A:A7:01:80:16:16:DC:7A:70:5A:CE:B7:2B:80:CA:2E:80:12
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       1E3C17
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f37415b3f33cc9546e21c3db214329f3649fc522.roa
Signing time:             Mon 23 Jan 2023 15:20:34 +0000
ROA not before:           Tue 23 Mar 2021 14:40:18 +0000
ROA not after:            Tue 24 Mar 2026 14:40:18 +0000
asID:                     266790
IP address blocks:        45.233.100.0/23 maxlen: 27
                          45.233.102.0/24 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981463 (0x1e3c17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Mar 23 14:40:18 2021 GMT
            Not After : Mar 24 14:40:18 2026 GMT
        Subject: CN=f37415b3f33cc9546e21c3db214329f3649fc522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:a5:3f:0f:83:5b:9d:4e:17:7a:77:9e:44:
                    1d:64:a0:de:09:6f:3e:d2:b7:11:54:46:de:61:2a:
                    79:43:76:62:91:ca:bd:05:28:04:a9:45:21:ed:de:
                    11:66:c9:4c:34:64:26:cf:9b:6e:40:27:42:31:60:
                    7a:b2:94:b4:de:21:de:4a:ec:2e:a9:a4:f8:5e:94:
                    c6:b7:71:35:fa:cf:9d:66:af:d1:be:27:85:43:cf:
                    89:c9:e4:ea:2e:7a:b5:12:11:14:44:b3:70:b7:08:
                    28:9f:a9:1b:83:44:c0:5d:63:3f:b8:2a:51:9e:3d:
                    6e:28:b3:63:0f:c5:21:02:55:64:44:99:16:ae:ae:
                    fb:10:20:81:4e:72:59:ce:68:ae:f0:f0:e1:26:61:
                    35:5d:79:40:45:f1:d2:52:93:8a:56:9f:c6:91:48:
                    5a:bd:68:4f:76:a5:14:f8:32:93:18:a1:8a:89:c9:
                    ab:bd:12:ee:91:09:f7:e3:94:81:1c:f5:c8:8e:42:
                    7d:34:80:67:39:cc:21:ad:89:c9:f4:c5:52:a5:06:
                    07:28:ab:06:56:22:f8:1c:30:c1:64:02:a1:c2:36:
                    9a:79:2f:68:ae:f4:f1:e1:24:51:05:4b:73:8a:a1:
                    dd:e2:4f:74:35:72:69:0e:18:03:04:f7:14:eb:5b:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:4A:A7:01:80:16:16:DC:7A:70:5A:CE:B7:2B:80:CA:2E:80:12
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f37415b3f33cc9546e21c3db214329f3649fc522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.100.0-45.233.102.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:d1:72:5a:2b:97:e8:b5:13:6f:23:36:46:ef:eb:a4:bb:
         d2:69:eb:44:9a:b4:7f:27:fe:d2:05:65:81:69:af:7b:21:74:
         b1:92:5f:af:dc:06:24:94:13:f2:90:96:59:24:6c:80:e8:80:
         a7:61:b5:a1:eb:1a:b3:e0:b3:ea:fd:a7:43:56:0f:35:e0:d3:
         a8:18:23:c4:7b:4d:aa:ab:70:10:7e:f9:0b:f5:32:7a:65:79:
         f2:51:8a:fd:a8:79:4f:12:f5:70:0c:1b:c1:21:f6:cb:25:fc:
         3b:5b:70:9f:1a:cd:e1:7f:5f:dd:30:18:ce:0e:fd:59:90:4c:
         a0:dd:18:8f:8b:1a:35:9a:5a:ed:52:43:f1:7d:49:43:71:b6:
         b2:db:d6:d4:bc:7b:e4:2d:37:cf:d4:89:51:36:77:fe:4e:71:
         34:04:a7:fe:55:36:b9:26:12:a4:c4:f3:70:03:44:d0:65:c9:
         c6:7c:a9:6b:aa:67:a0:3c:24:6e:42:30:b7:94:1f:b0:60:43:
         a5:11:96:4b:3a:2b:66:a9:a5:4b:d7:f3:e2:62:96:97:02:d3:
         3b:71:f6:2e:58:96:93:d5:c6:1e:be:d8:25:78:d2:b8:0f:30:
         2d:2e:24:94:ad:3c:01:64:03:f0:fd:fe:b5:06:37:b3:9c:fc:
         ac:7c:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org