Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/e1807089bcca52a0cb56a54eeed42a608f1a079c.roa
File:                     e1807089bcca52a0cb56a54eeed42a608f1a079c.roa (raw, json)
Hash identifier:          p9z1yUwTitoK2u2qnXwYGfC43lnP3btebRF6Yd/CkmI=
Subject key identifier:   D6:BF:B6:FB:C4:91:37:3D:DC:80:F7:85:36:2C:41:41:FB:DE:68:04
Certificate issuer:       /CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
Certificate serial:       20D7F9
Authority key identifier: 5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/e1807089bcca52a0cb56a54eeed42a608f1a079c.roa
Signing time:             Mon 07 Aug 2023 15:36:17 +0000
ROA not before:           Sun 06 Aug 2023 15:36:17 +0000
ROA not after:            Thu 07 Aug 2025 15:36:17 +0000
asID:                     264824
IP address blocks:        45.183.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152441 (0x20d7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
        Validity
            Not Before: Aug  6 15:36:17 2023 GMT
            Not After : Aug  7 15:36:17 2025 GMT
        Subject: CN=e1807089bcca52a0cb56a54eeed42a608f1a079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:d6:05:d6:06:8f:03:70:4a:2b:2e:b3:30:
                    73:a8:af:c3:42:f8:b1:a9:62:79:89:02:f2:89:b7:
                    dd:0c:0c:39:15:c8:ad:19:0c:a7:4a:76:b7:20:1f:
                    51:28:d2:2e:a8:72:dc:42:1d:3d:04:94:b6:9b:a7:
                    a0:c8:a9:fb:f7:48:47:5c:34:ca:91:db:f8:95:84:
                    e7:11:00:ba:91:3f:bf:0a:ba:fc:f1:8c:79:17:c7:
                    41:2a:0b:07:58:4c:1c:bc:15:b2:65:00:8e:39:be:
                    d3:7a:06:13:e9:5b:39:80:85:91:99:9a:8b:01:01:
                    01:e2:bb:b2:42:af:84:da:62:c1:8f:37:44:33:c1:
                    1c:27:e8:a1:0a:66:e3:8e:05:4b:ec:1d:76:a2:40:
                    18:57:d5:5f:55:4d:57:41:6d:9e:6a:56:53:76:c4:
                    f2:49:bf:1c:ec:11:d4:9d:c3:c1:1d:3a:1f:e9:cd:
                    2f:57:08:c7:d4:ab:89:01:5c:65:cc:e4:71:48:b2:
                    3e:e3:9d:4d:4c:b0:1c:b8:08:75:a3:d8:63:fa:95:
                    f9:bb:2a:4e:5d:a7:2d:c7:a8:36:7d:72:b6:d5:fd:
                    aa:ba:1d:55:f7:96:9a:1b:fe:0a:04:e2:1d:98:61:
                    5b:a6:5a:91:9a:ac:53:d0:9c:d2:c3:37:ec:4f:e2:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:B6:FB:C4:91:37:3D:DC:80:F7:85:36:2C:41:41:FB:DE:68:04
            X509v3 Authority Key Identifier:
                keyid:5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/e1807089bcca52a0cb56a54eeed42a608f1a079c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a40e227e41eada75cd2ecb37649e56571e8b69d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:dc:ad:44:2f:8f:d1:d9:e7:cd:8a:95:94:38:cc:5f:7e:
         70:2c:19:ae:18:31:58:d3:f5:1d:b4:3f:30:08:58:10:85:25:
         0c:cf:48:51:0f:a3:0e:a5:87:7f:2f:64:f9:6b:72:bb:b1:73:
         ec:2a:96:ba:c0:ea:7a:07:59:e1:d0:92:23:9d:a7:35:ef:82:
         a1:26:4f:d9:3d:89:0f:71:0e:ac:7c:ee:29:ef:bc:28:52:d7:
         11:9d:d5:26:6d:18:9b:37:5b:dd:a3:2c:bb:1e:55:4d:85:26:
         15:87:8a:ac:5e:43:bf:40:ad:43:2d:26:49:14:29:56:eb:46:
         67:af:5f:3f:3b:71:16:32:46:e8:a4:c8:95:ed:4f:bf:0e:45:
         67:05:d3:d0:e6:16:90:7e:b3:c3:f8:c1:95:b8:3b:85:d2:76:
         f1:8b:54:97:a1:05:02:a3:7c:ce:ac:cb:34:de:ca:38:18:45:
         2f:7e:fd:00:94:1e:7c:c7:35:11:f1:78:19:1b:35:ac:61:c2:
         c2:4b:ff:03:bb:e1:65:38:cc:1f:bb:75:25:fc:f2:0a:ab:70:
         7f:75:d2:0c:02:b3:e2:97:47:0f:61:c1:cd:5c:7d:3c:55:ea:
         b2:a5:7b:cc:ff:4c:c1:d8:7e:cc:05:d8:a1:6e:f7:e4:38:09:
         a9:10:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org