Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/8b46c737f54c3a266f7abe2d079424098a6ee238.roa
File:                     8b46c737f54c3a266f7abe2d079424098a6ee238.roa (raw, json)
Hash identifier:          OF4R7xmhE1Vfrk+BAVVmH6X/zBqY40OVOlGISqIeC+w=
Subject key identifier:   17:41:66:D7:70:E0:BF:EA:BE:1D:5B:7B:78:5D:C2:98:12:90:C0:B0
Certificate issuer:       /CN=4358464441e9d4d59b11d9f7116feb4008767b40
Certificate serial:       1380
Authority key identifier: 48:AD:0F:A4:E7:3D:1D:31:ED:EB:E3:38:69:C2:9F:8C:EB:5B:F4:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4358464441e9d4d59b11d9f7116feb4008767b40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/8b46c737f54c3a266f7abe2d079424098a6ee238.roa
Signing time:             Thu 03 Aug 2023 17:51:03 +0000
ROA not before:           Wed 02 Aug 2023 17:51:03 +0000
ROA not after:            Sun 03 Aug 2025 17:51:03 +0000
asID:                     267728
IP address blocks:        45.167.24.0/23 maxlen: 24
                          45.167.25.0/24 maxlen: 24
                          45.167.27.0/24 maxlen: 24
                          45.167.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4992 (0x1380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4358464441e9d4d59b11d9f7116feb4008767b40
        Validity
            Not Before: Aug  2 17:51:03 2023 GMT
            Not After : Aug  3 17:51:03 2025 GMT
        Subject: CN=8b46c737f54c3a266f7abe2d079424098a6ee238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:5a:c1:98:80:ff:a1:50:95:1d:7c:b9:f3:
                    74:03:0e:b0:91:1b:38:a6:b4:34:0b:b6:f9:1d:11:
                    01:7a:7a:12:12:00:70:bd:dc:08:16:d0:02:c2:02:
                    9e:82:88:fb:5a:d1:8a:ac:42:29:06:ff:08:3d:2b:
                    dc:17:bf:3e:f2:aa:6f:7a:ec:df:db:47:53:33:76:
                    9d:73:e7:7a:83:5d:84:ab:76:2a:87:a6:be:c8:4f:
                    a1:54:4a:d0:a5:0a:e0:e8:0d:cc:2f:af:62:c3:cb:
                    5e:00:ad:db:bf:c8:2e:a2:18:68:49:b9:90:7a:74:
                    e0:21:d2:da:ff:e7:a4:91:4e:6d:eb:ea:76:e6:48:
                    1c:8e:21:77:bb:be:f9:a7:02:17:22:a2:cc:53:57:
                    3f:5e:af:ca:c2:d5:c8:7d:cb:b0:74:f8:62:08:fb:
                    eb:53:29:7f:2d:f3:ef:24:09:4d:37:ea:ba:50:ad:
                    39:f0:dd:c5:56:c2:93:f6:91:87:6a:b2:52:2b:55:
                    c7:ce:fd:a2:59:95:6f:94:04:d4:4a:ce:72:f9:7c:
                    d1:db:c1:8a:5a:d8:32:44:85:ff:8c:c8:6a:2d:3c:
                    e7:7a:b4:57:1b:8e:ea:90:da:50:3f:cc:68:50:e2:
                    8d:05:6b:f0:a0:9b:3b:d5:7b:f2:6b:3a:93:cf:e0:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:41:66:D7:70:E0:BF:EA:BE:1D:5B:7B:78:5D:C2:98:12:90:C0:B0
            X509v3 Authority Key Identifier:
                keyid:48:AD:0F:A4:E7:3D:1D:31:ED:EB:E3:38:69:C2:9F:8C:EB:5B:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4358464441e9d4d59b11d9f7116feb4008767b40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/8b46c737f54c3a266f7abe2d079424098a6ee238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/4358464441e9d4d59b11d9f7116feb4008767b40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:c2:29:b7:de:81:fc:d3:c6:b5:61:f5:90:a7:f4:1a:48:
         1c:2d:63:d3:d9:5c:de:67:a9:2e:2f:0c:1e:3a:b0:29:70:31:
         c4:9a:ee:95:93:33:47:e4:bf:7e:13:aa:32:26:4d:5e:14:31:
         5a:1a:cb:cd:2b:cd:1e:43:a6:ad:8b:a9:73:a6:23:97:75:c1:
         6e:6a:b1:01:f6:19:ee:24:4a:73:83:ed:8e:82:5d:e5:a7:99:
         50:8c:91:05:30:cd:ef:df:91:4d:82:e6:81:cf:f0:99:27:db:
         34:af:08:c4:fb:79:3f:78:fa:92:8f:42:99:72:d1:79:5b:4e:
         6c:fa:13:23:e5:12:fd:ce:17:3c:da:5a:97:2e:4c:cc:88:bf:
         be:ed:08:24:ae:c3:6f:7f:d8:6e:99:62:d8:9c:bd:fb:7e:fe:
         a7:d3:56:95:fd:20:38:62:17:ff:0d:85:89:52:9c:ba:c5:f8:
         f0:67:9b:9d:49:a0:51:e4:ed:ff:d7:11:1b:0c:90:e4:64:4c:
         a0:bd:bb:06:b1:3e:20:de:81:c9:22:51:a5:e8:33:56:20:3a:
         04:a7:45:8e:17:62:b5:e0:f6:83:0c:08:3a:c1:25:7f:eb:31:
         59:07:c8:c2:7b:6a:03:2f:80:d5:fa:88:c7:99:42:7c:7d:1b:
         fb:17:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org