Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/eac3b1e5e2bfe04f4e29d30cb7e65983343bad94.roa
File:                     eac3b1e5e2bfe04f4e29d30cb7e65983343bad94.roa (raw, json)
Hash identifier:          T8P59HJJrvpGMH32oP1kU7BkO5iGxQPX/01zhBkf5PE=
Subject key identifier:   BC:43:57:6F:6A:64:3D:6F:E4:AD:41:5A:4D:7B:17:F6:12:72:D1:BB
Certificate issuer:       /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial:       24B87D
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/eac3b1e5e2bfe04f4e29d30cb7e65983343bad94.roa
Signing time:             Mon 06 Nov 2023 17:24:11 +0000
ROA not before:           Mon 06 Nov 2023 17:24:11 +0000
ROA not after:            Thu 06 Nov 2025 17:24:11 +0000
asID:                     263725
IP address blocks:        45.166.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406525 (0x24b87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Validity
            Not Before: Nov  6 17:24:11 2023 GMT
            Not After : Nov  6 17:24:11 2025 GMT
        Subject: CN=eac3b1e5e2bfe04f4e29d30cb7e65983343bad94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:9e:76:b2:ad:52:6b:9f:fa:0e:78:96:ab:
                    b7:4f:ce:a9:b2:85:31:5b:bc:45:c7:51:e2:00:49:
                    76:34:cd:0f:62:74:d3:76:9b:bb:78:5e:6e:be:bf:
                    91:f0:a7:99:37:12:24:46:ee:2d:e3:91:4a:cd:f6:
                    82:2a:1b:51:8a:eb:2d:5d:9c:39:a9:56:83:3f:a5:
                    d9:45:60:08:ea:7d:8e:15:26:b0:4d:7c:ce:5d:40:
                    28:57:f1:8d:c4:c4:eb:2b:dc:5f:3c:2c:57:41:47:
                    a3:4c:3d:1a:00:31:73:7f:8f:ac:fe:9d:37:f9:2c:
                    1f:96:4b:f5:ac:7a:11:f0:0d:c7:73:71:19:97:9e:
                    f5:a1:61:85:4d:da:bc:f9:0c:37:22:34:1d:8c:81:
                    e4:02:28:b1:aa:b9:38:53:26:ab:32:62:38:c1:38:
                    ae:5d:d3:7e:18:75:e7:5c:55:88:6d:a8:4e:45:81:
                    31:f2:9e:83:73:a0:0f:ad:d2:42:8d:ce:d8:d9:eb:
                    c7:d2:99:6d:37:64:ae:9c:03:66:57:2d:b1:62:ca:
                    a3:cf:a0:97:c2:d4:e2:0c:8f:93:aa:2c:ce:eb:0d:
                    e6:b9:d2:0d:9a:e4:d5:fb:c7:25:4f:d4:47:d7:0e:
                    ab:da:59:36:65:da:90:f8:97:48:a8:3d:58:1b:48:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:57:6F:6A:64:3D:6F:E4:AD:41:5A:4D:7B:17:F6:12:72:D1:BB
            X509v3 Authority Key Identifier:
                keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/eac3b1e5e2bfe04f4e29d30cb7e65983343bad94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:ae:d4:71:74:43:ca:6e:78:a3:f6:4f:26:fb:81:6c:ef:
         dd:d3:3c:3e:4b:c4:54:d2:c6:80:09:b7:da:ea:b0:ec:20:79:
         61:7b:e5:1b:4d:88:a1:82:ec:51:70:bc:da:7c:c7:ea:f1:91:
         fe:10:f3:41:09:52:92:b1:d4:ac:3a:89:0b:ef:01:7c:0d:72:
         2c:71:a5:51:a7:b2:23:72:d2:f8:ef:6f:f7:bb:2a:4d:75:9e:
         00:95:80:a1:84:10:d9:d6:c9:6a:9b:34:f3:40:4c:55:c4:78:
         13:11:f2:78:8a:d1:7f:eb:dc:e0:8f:da:2c:a0:21:bc:f1:4e:
         67:a8:0a:ac:f2:c2:05:d7:63:2d:53:64:18:a5:9e:11:7c:ac:
         e5:df:d5:39:6c:8d:55:6f:01:43:1c:ac:ae:53:42:d5:0e:2a:
         46:94:35:9a:a8:40:f3:59:e0:c9:12:a1:a6:08:4d:3d:84:63:
         63:35:10:d4:01:74:1f:a8:e0:53:2e:04:cd:e4:a4:b9:22:36:
         11:3f:30:c1:4a:a7:ba:05:73:ac:50:a4:3e:f4:40:68:9d:89:
         da:4f:b7:72:ec:9e:14:b4:62:54:27:3d:6e:93:e2:7d:9f:c5:
         05:69:5a:f9:c4:22:e1:fb:0a:66:f5:f4:a6:eb:67:1d:dd:37:
         69:d3:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org