Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/30561b8b47660a74f9fef366dbb4bd358cfb7717.roa
File:                     30561b8b47660a74f9fef366dbb4bd358cfb7717.roa (raw, json)
Hash identifier:          0Sv3LeliXNQ0b3wCnFXGXcXGeeR1um9yBKSxRECubP8=
Subject key identifier:   C5:52:97:0E:84:B1:58:C5:20:90:BF:7D:48:4F:D5:F2:48:F2:E2:B7
Certificate issuer:       /CN=d13e4d0d0c963a024a98b0007ab0fa0d334261f3
Certificate serial:       1CE484
Authority key identifier: F0:95:8D:9D:72:0D:36:22:A5:DB:FB:09:91:F3:6C:9B:C7:02:92:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d13e4d0d0c963a024a98b0007ab0fa0d334261f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/30561b8b47660a74f9fef366dbb4bd358cfb7717.roa
Signing time:             Thu 24 Aug 2023 08:30:01 +0000
ROA not before:           Wed 23 Aug 2023 08:30:01 +0000
ROA not after:            Fri 22 Aug 2025 08:30:01 +0000
asID:                     269741
IP address blocks:        45.181.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893508 (0x1ce484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d13e4d0d0c963a024a98b0007ab0fa0d334261f3
        Validity
            Not Before: Aug 23 08:30:01 2023 GMT
            Not After : Aug 22 08:30:01 2025 GMT
        Subject: CN=30561b8b47660a74f9fef366dbb4bd358cfb7717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:10:35:d1:35:b8:b9:2c:c9:33:3c:61:b9:
                    dc:42:69:2d:5a:31:8e:aa:bc:1b:25:42:5a:e8:19:
                    07:1c:45:51:eb:3d:b0:95:d8:88:aa:5a:6e:fb:6a:
                    9e:42:f3:3e:fa:ce:e0:f8:23:e5:96:3c:42:f5:d7:
                    34:6c:d4:42:fa:21:d5:c6:d2:02:ea:9b:90:74:ef:
                    32:50:7b:56:37:15:0d:47:8b:ef:e7:c0:c8:25:84:
                    c0:78:e2:63:20:7e:6c:9f:af:7d:9a:b0:df:37:1c:
                    56:23:0e:69:44:55:d6:77:6e:89:01:34:2b:d5:83:
                    20:cf:9f:af:3e:c5:4a:14:17:90:c8:11:05:8d:2a:
                    1a:3f:2a:ed:ca:b3:57:7b:12:57:fa:99:e7:57:7a:
                    1e:fc:f8:49:6b:ae:ec:b3:66:9f:d3:3f:32:4b:3e:
                    84:5f:97:9e:4f:0f:31:88:d4:5c:c6:2e:4b:36:af:
                    7b:b7:b9:b7:f6:63:00:19:fc:98:49:19:17:cd:6d:
                    ec:dc:89:62:3b:d2:0a:59:90:2c:80:75:32:05:57:
                    4a:8b:82:e7:38:e5:4e:bf:1a:c8:32:4c:79:17:c6:
                    f8:ba:bc:75:39:56:df:73:af:57:12:8a:7f:28:82:
                    24:9d:15:d4:f5:40:32:5c:e4:a6:04:bf:24:66:a9:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:97:0E:84:B1:58:C5:20:90:BF:7D:48:4F:D5:F2:48:F2:E2:B7
            X509v3 Authority Key Identifier:
                keyid:F0:95:8D:9D:72:0D:36:22:A5:DB:FB:09:91:F3:6C:9B:C7:02:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d13e4d0d0c963a024a98b0007ab0fa0d334261f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/30561b8b47660a74f9fef366dbb4bd358cfb7717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7b8c9f8-44e0-47f5-9fb7-21c5812b2139/d13e4d0d0c963a024a98b0007ab0fa0d334261f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:61:a4:15:e7:b3:db:d4:71:72:7e:b8:c7:0e:72:ea:8e:8e:
         a9:4e:93:34:c4:85:94:68:02:29:dd:fd:25:69:f4:0b:d3:1c:
         9a:31:a5:92:a7:8d:3f:60:c4:1d:93:88:4e:76:88:03:6c:7c:
         6a:49:c5:5a:c8:1c:0f:3e:17:f5:5c:f1:08:7a:b2:9f:fb:b2:
         16:ba:15:9a:46:37:48:82:6c:e2:56:f4:9a:4c:e3:1c:34:72:
         a3:e0:fd:63:32:3f:c5:b1:d5:d8:be:93:cf:60:a2:ca:ff:c6:
         b1:a6:74:15:64:8f:58:0a:dd:20:dc:e9:53:6d:96:62:27:c3:
         d7:a7:55:b4:06:6c:d6:b4:30:9c:f8:78:08:fb:5d:c9:99:b9:
         5a:9e:f2:6e:ea:98:8b:6c:61:0f:f7:ed:7c:e8:08:06:de:26:
         7a:16:d3:fa:fe:51:66:1b:dd:3d:40:33:ec:89:f6:50:81:a3:
         d8:7b:f0:46:4b:37:bf:ae:0b:46:97:79:73:61:45:60:ff:01:
         15:15:31:3e:2c:7b:7b:c6:8e:e2:c8:84:ad:db:b0:46:db:56:
         df:2d:36:8d:34:6a:d2:3b:4f:c6:27:3d:ab:90:21:b2:35:15:
         bd:c5:cf:3f:d7:11:a9:cc:f1:2d:46:d8:ea:f4:82:6f:8b:cd:
         21:e4:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org