Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc644d2a-4ff4-4720-831b-a3b30ccbed07/edf101c5aad9ae691edc3f4d09cef4e7d005fa62.roa
File:                     edf101c5aad9ae691edc3f4d09cef4e7d005fa62.roa (raw, json)
Hash identifier:          TdvsJe7g2dfcOk70fwDWXsXsOC1hAfoyaJlPOhpaLXI=
Subject key identifier:   54:59:EA:0B:93:31:E2:4C:53:83:F2:89:B6:02:CC:E2:F8:D2:13:14
Certificate issuer:       /CN=d2657f15efa76883294aa4c063d6ba7e27c1872e
Certificate serial:       250B9F
Authority key identifier: F4:09:C4:6D:F0:46:B7:A0:9D:19:C7:8F:C6:AB:C5:ED:00:20:27:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2657f15efa76883294aa4c063d6ba7e27c1872e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc644d2a-4ff4-4720-831b-a3b30ccbed07/edf101c5aad9ae691edc3f4d09cef4e7d005fa62.roa
Signing time:             Thu 21 Mar 2024 13:25:24 +0000
ROA not before:           Thu 21 Mar 2024 13:25:24 +0000
ROA not after:            Sat 21 Mar 2026 13:25:24 +0000
asID:                     269786
IP address blocks:        45.188.208.0/23 maxlen: 24
                          45.188.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427807 (0x250b9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2657f15efa76883294aa4c063d6ba7e27c1872e
        Validity
            Not Before: Mar 21 13:25:24 2024 GMT
            Not After : Mar 21 13:25:24 2026 GMT
        Subject: CN=edf101c5aad9ae691edc3f4d09cef4e7d005fa62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:88:94:13:1e:fb:b8:5b:d8:37:37:f3:cc:
                    f2:d4:14:6a:5d:03:c2:96:2a:1c:79:33:5a:11:09:
                    9b:b5:da:c0:77:2c:ad:0b:ad:df:c7:27:5f:d4:9e:
                    a2:bc:4d:03:46:e9:c4:c5:18:f6:e0:2c:ed:6d:99:
                    e0:c6:c6:e3:95:b5:de:2d:0b:eb:c5:ab:37:55:a3:
                    34:9e:94:f5:23:e4:ba:36:96:1c:93:bb:f8:bf:79:
                    66:5e:bc:77:d6:25:0a:c4:1d:7c:50:89:35:b7:eb:
                    4c:90:58:9d:a4:94:85:bf:be:07:53:38:6a:ff:c6:
                    ee:41:75:36:0c:a0:82:d6:db:79:92:5c:9e:8f:b3:
                    9c:3c:03:6f:ed:61:0f:db:10:d1:2e:2d:3b:a6:c8:
                    b2:65:90:d9:12:cc:7d:7b:23:87:4b:2e:9a:ad:2a:
                    91:63:ac:0d:f8:2d:6f:e3:7c:67:5c:91:e8:88:ad:
                    df:3b:62:d4:60:cb:d3:b8:6a:d3:78:94:7e:5e:1f:
                    60:54:10:be:88:e6:23:db:90:d7:9a:e7:15:01:87:
                    90:44:10:85:ba:2f:d3:e7:b8:eb:04:10:10:d8:fd:
                    24:49:42:20:cb:6d:5b:68:54:ae:f4:f9:d5:ec:19:
                    2f:50:1e:45:a4:be:80:9f:42:94:8d:ce:59:4b:24:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:59:EA:0B:93:31:E2:4C:53:83:F2:89:B6:02:CC:E2:F8:D2:13:14
            X509v3 Authority Key Identifier:
                keyid:F4:09:C4:6D:F0:46:B7:A0:9D:19:C7:8F:C6:AB:C5:ED:00:20:27:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2657f15efa76883294aa4c063d6ba7e27c1872e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc644d2a-4ff4-4720-831b-a3b30ccbed07/edf101c5aad9ae691edc3f4d09cef4e7d005fa62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc644d2a-4ff4-4720-831b-a3b30ccbed07/d2657f15efa76883294aa4c063d6ba7e27c1872e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.208.0-45.188.210.255

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:ae:03:84:f9:9f:84:ad:ca:b0:9e:63:8b:ed:2b:8d:e0:
         a9:e6:bc:a0:b0:bd:96:4f:fa:7e:7f:a5:7d:7e:fd:f6:c3:bd:
         62:0e:f0:a7:d9:2d:95:da:b7:cb:de:68:83:3f:38:15:f9:27:
         cb:ef:1e:8b:84:6a:2f:63:cf:5e:44:4e:11:9d:96:ae:8c:3f:
         aa:7d:0b:e2:28:62:77:a9:de:f7:f6:f3:af:03:d6:e7:f5:94:
         c8:e3:ff:20:9f:b1:df:6f:c9:fb:79:df:c7:5e:d7:94:95:f1:
         98:2e:33:a1:6f:e4:c9:25:f6:3a:56:8d:33:f9:eb:8c:ac:5e:
         39:c2:88:0c:1f:09:d6:55:91:bd:44:34:33:6a:59:1f:50:ce:
         7a:e2:07:7d:03:d0:35:fa:cb:d4:7e:b9:69:40:ec:62:4c:04:
         53:6b:62:39:7a:17:c5:10:51:5f:07:02:94:29:f7:d0:21:11:
         49:4d:10:b0:f1:41:8f:a1:03:1d:44:6f:78:ff:e2:bc:4a:8f:
         65:93:b6:2e:ab:c3:8b:4f:0c:ad:27:53:bc:e5:34:8b:54:4c:
         f8:76:9c:1b:4f:e3:87:82:37:5f:bd:19:5f:6e:db:bc:44:07:
         6f:c7:08:7e:72:4a:4b:5f:93:92:d3:57:93:30:ad:3b:af:04:
         e1:32:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org