Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/64e1c89e443c40b249a6891d50884be509c95923.roa
File:                     64e1c89e443c40b249a6891d50884be509c95923.roa (raw, json)
Hash identifier:          VtauaUki62dnrbiUmJNzfOPHOol5HicRZdPEQaMqIaY=
Subject key identifier:   47:CB:EF:DA:A6:76:58:A8:58:78:17:67:C9:37:14:BB:74:7E:D4:96
Certificate issuer:       /CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
Certificate serial:       07D323
Authority key identifier: 27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/64e1c89e443c40b249a6891d50884be509c95923.roa
Signing time:             Mon 08 Apr 2024 16:08:12 +0000
ROA not before:           Mon 08 Apr 2024 16:08:12 +0000
ROA not after:            Wed 08 Apr 2026 16:08:12 +0000
asID:                     267850
IP address blocks:        45.175.136.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512803 (0x7d323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
        Validity
            Not Before: Apr  8 16:08:12 2024 GMT
            Not After : Apr  8 16:08:12 2026 GMT
        Subject: CN=64e1c89e443c40b249a6891d50884be509c95923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:f6:8d:35:82:ea:6c:61:24:27:49:9b:69:
                    fa:a4:a9:7a:6e:d5:3b:be:48:45:5f:f0:d3:ac:7b:
                    89:7e:8a:11:66:c0:15:c5:86:3e:4c:94:14:ba:8d:
                    36:7c:09:73:7b:34:e1:93:50:86:e0:56:b8:e3:0f:
                    64:9f:20:c2:a0:9d:7f:f2:6d:4f:c7:18:fc:0d:f7:
                    18:19:f3:a3:00:5b:08:68:1e:74:55:9d:d2:40:cc:
                    3f:11:fe:f4:10:37:80:a9:23:e8:10:60:07:8b:cb:
                    26:9e:be:e5:a4:b7:69:84:c2:c3:3f:df:f2:65:dd:
                    9c:46:77:f9:99:69:27:9a:7a:f6:e0:6e:47:c1:b7:
                    ab:2f:44:d8:2d:a2:91:2d:26:03:e2:49:4d:37:32:
                    8b:1a:d5:c3:09:e6:12:3b:94:fd:5d:be:7f:82:24:
                    16:9d:36:33:d8:56:33:b4:f3:bf:c5:db:81:f6:51:
                    73:9e:f7:09:f1:ec:07:97:82:e6:9d:8c:54:c3:71:
                    f3:93:30:c4:cf:76:c9:fd:43:5e:97:09:08:8e:c7:
                    5b:90:9f:19:dc:a1:fb:9e:38:0f:91:a1:dd:28:2c:
                    01:2b:58:c9:59:c5:5f:0c:1b:18:5e:3d:b1:6e:e5:
                    9e:f9:05:52:92:d2:44:47:f3:28:4c:d9:14:c7:63:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CB:EF:DA:A6:76:58:A8:58:78:17:67:C9:37:14:BB:74:7E:D4:96
            X509v3 Authority Key Identifier:
                keyid:27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/64e1c89e443c40b249a6891d50884be509c95923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/cb0d50fb966e4001e10ac528d57fe833560a5d85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:eb:56:f9:22:00:ad:37:92:e0:86:18:5a:b2:e7:85:6f:
         55:65:98:02:ea:d4:c1:12:05:99:ea:39:5a:1a:00:11:e4:fa:
         10:86:52:24:85:51:f0:f9:de:e3:c0:2b:67:9a:ab:86:e0:bd:
         15:bd:cd:2a:b0:3c:78:06:fd:fa:59:3a:24:86:48:67:ca:28:
         03:65:bb:88:c4:0d:f6:93:89:ba:23:49:20:f9:a4:6f:37:6b:
         15:84:c0:69:f9:2e:df:f1:0a:be:34:da:13:e3:67:f7:c5:27:
         a5:42:6e:db:56:69:dc:58:5f:11:be:dd:a8:e1:6f:7b:1e:54:
         1e:85:54:90:18:52:e4:bc:0b:44:d1:2f:26:32:6b:d0:e0:d6:
         62:cd:c4:0a:d3:d7:41:f0:16:63:b6:24:95:a7:af:ce:bb:95:
         1f:07:57:9c:1d:72:27:90:8b:42:d7:2a:18:da:82:a2:d2:eb:
         c5:2b:6d:9c:3a:ea:01:22:f0:45:dc:7e:72:9d:ef:19:cf:48:
         24:c0:47:c5:13:e7:79:e3:f2:b5:04:89:20:1b:5f:a0:51:76:
         3f:90:2e:bf:c8:82:f3:0e:f3:fe:44:f6:e4:88:5f:d3:01:e8:
         2c:78:42:d1:45:d1:60:14:8b:eb:09:d9:34:5a:d3:45:22:b4:
         cf:1f:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org