Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/09c777b75693d5511781aeb54dbcff0684e3c8d2.roa
File:                     09c777b75693d5511781aeb54dbcff0684e3c8d2.roa (raw, json)
Hash identifier:          n0Q+OequzNhRldjhupD4LWqLPTpD80oUq8H8o8iheHQ=
Subject key identifier:   92:12:94:3F:A6:76:2A:A6:56:81:DA:55:05:F0:1E:EF:CD:D9:44:6F
Certificate issuer:       /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial:       0EF948
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/09c777b75693d5511781aeb54dbcff0684e3c8d2.roa
Signing time:             Tue 20 Jun 2023 18:23:11 +0000
ROA not before:           Mon 19 Jun 2023 18:23:11 +0000
ROA not after:            Fri 20 Jun 2025 18:23:11 +0000
asID:                     263725
IP address blocks:        45.182.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981320 (0xef948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Validity
            Not Before: Jun 19 18:23:11 2023 GMT
            Not After : Jun 20 18:23:11 2025 GMT
        Subject: CN=09c777b75693d5511781aeb54dbcff0684e3c8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:cb:18:fa:c1:ac:d3:46:2c:87:56:3c:23:
                    8f:ea:57:1c:01:fe:5e:43:70:96:38:ee:6c:02:d7:
                    61:ca:83:83:c9:74:14:80:f9:49:0e:dc:8a:6a:30:
                    f4:93:5e:94:52:c7:f9:ce:14:89:52:99:2e:42:c0:
                    e2:38:58:e7:3a:81:0c:e7:40:b9:56:3e:01:23:7d:
                    96:ab:d3:a3:14:e4:89:99:1c:25:f8:59:a6:73:1f:
                    33:f8:a1:31:5e:7a:e4:45:d9:0e:30:1f:71:0b:ef:
                    9e:67:3a:85:2a:53:11:5d:fe:f1:16:6a:6d:f9:dc:
                    78:5c:8a:5a:06:1d:e1:1c:30:5b:da:f2:07:e7:70:
                    aa:b8:46:b1:bb:47:d7:0c:0a:04:94:ec:01:dd:0b:
                    df:da:eb:1d:9f:7d:ef:22:27:af:3b:70:dd:b0:60:
                    0d:0c:5d:b7:7e:72:ab:d8:ba:1a:c5:6c:d4:61:4b:
                    49:1c:14:99:f1:0d:1f:64:db:e1:4a:5c:9e:75:f7:
                    61:0f:41:ef:b3:9e:8b:17:10:ba:67:18:e2:0d:fa:
                    46:92:ec:77:1e:d4:3f:a8:a6:a6:ef:35:6e:d6:51:
                    40:25:a8:7c:5e:52:50:c8:6c:05:bd:03:5b:25:10:
                    42:c6:97:57:31:78:44:66:49:46:ff:26:12:51:a2:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:12:94:3F:A6:76:2A:A6:56:81:DA:55:05:F0:1E:EF:CD:D9:44:6F
            X509v3 Authority Key Identifier:
                keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/09c777b75693d5511781aeb54dbcff0684e3c8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:40:83:be:d5:0a:41:10:03:31:29:cc:9c:9c:e5:c8:50:
         5b:ff:f9:5e:ab:a8:34:30:be:02:2a:0b:58:8e:40:7a:db:c5:
         8c:56:4f:34:5c:e3:a2:52:0b:76:ec:68:9f:cc:f8:d8:62:ff:
         37:48:2b:3a:56:a4:d6:90:1a:47:6a:59:aa:b2:9d:4f:1f:84:
         fe:ef:bb:59:69:d4:cd:41:19:30:ed:0f:90:77:c6:ed:52:7b:
         dc:56:37:46:ad:19:48:fe:cf:b3:2e:07:10:43:2a:3e:ac:25:
         d5:1b:f3:ff:ae:49:a4:e4:80:e8:f8:1b:a6:35:cb:bb:8f:9e:
         17:66:bb:72:e2:1f:d8:e2:b2:ca:c0:b7:bb:6b:36:2e:f1:bf:
         49:7c:7e:d8:70:ad:90:30:85:a3:3c:b1:01:c5:b8:6c:81:f5:
         79:c0:a2:d0:fd:02:62:53:6d:6c:ef:79:b8:3a:bb:10:28:f4:
         7f:36:e0:94:05:67:79:1f:05:db:62:ff:0b:d8:40:c3:9c:70:
         59:42:b1:84:f5:a5:46:6a:af:08:d2:8c:44:94:f9:a1:9d:38:
         f7:7d:0e:5a:78:45:f3:08:2d:0c:0e:6e:86:d5:b7:6e:2d:2a:
         a8:48:b8:be:c1:78:5f:18:0a:e3:0d:77:ee:49:8c:f7:fe:25:
         98:c6:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org