Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa
File:                     d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa (raw, json)
Hash identifier:          28vH3sosSyeOwUHzlwr1cH7tOCzrs+sveEhTr/HzmlQ=
Subject key identifier:   56:05:DD:FE:44:41:33:52:C9:C7:23:38:FE:C5:B2:89:95:89:7B:E1
Certificate issuer:       /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial:       0EF609
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa
Signing time:             Tue 20 Jun 2023 18:20:27 +0000
ROA not before:           Mon 19 Jun 2023 18:20:27 +0000
ROA not after:            Fri 20 Jun 2025 18:20:27 +0000
asID:                     263725
IP address blocks:        45.182.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980489 (0xef609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Validity
            Not Before: Jun 19 18:20:27 2023 GMT
            Not After : Jun 20 18:20:27 2025 GMT
        Subject: CN=d2b4d2b744e63105944e287b38c8597a5f7ccc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:ed:49:7f:71:48:be:3b:bb:dc:c5:25:c3:
                    86:71:ed:18:92:3f:f5:0a:e4:f4:fd:ee:67:cf:00:
                    d6:57:64:85:a5:d9:dd:23:c6:8b:44:2d:15:cf:71:
                    4f:89:5e:6c:ba:8c:cc:fe:c5:9d:47:bd:c6:21:89:
                    e8:82:ca:87:aa:ab:b8:87:34:1d:44:f5:c6:d8:74:
                    6c:68:1e:76:69:69:e3:d1:c1:49:cb:1a:01:6e:3a:
                    eb:29:a0:f8:3e:64:8e:10:83:bb:0f:81:df:8f:3d:
                    05:f9:bb:ac:de:b0:60:71:76:6a:5c:47:e5:38:e6:
                    91:67:b5:43:05:38:00:13:53:9c:e6:23:3c:9a:7a:
                    6c:a5:30:5c:ae:9f:08:25:78:fc:54:d9:49:6f:4d:
                    fa:12:ad:96:fb:ed:60:a3:70:41:e7:79:84:2a:75:
                    b2:dd:09:e2:f0:7d:f2:b0:69:33:be:b2:4f:2a:b2:
                    59:9f:19:f6:d0:78:78:d3:4a:93:e1:6a:6d:10:ec:
                    57:77:72:77:8e:56:a1:71:ae:aa:76:a8:d3:c8:0b:
                    ea:82:ab:9f:0d:a4:46:d8:7e:92:ae:05:72:68:50:
                    82:85:e6:38:af:c3:8f:82:be:0c:51:4d:f0:a6:36:
                    ee:30:02:1d:b4:03:3a:1f:2c:82:a5:c4:fa:38:87:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:DD:FE:44:41:33:52:C9:C7:23:38:FE:C5:B2:89:95:89:7B:E1
            X509v3 Authority Key Identifier:
                keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/d2b4d2b744e63105944e287b38c8597a5f7ccc8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:20:f4:da:7f:7f:d3:71:e6:3e:c3:23:51:74:65:e1:b8:
         57:9d:1c:79:5b:c6:1e:93:ce:b0:a7:33:86:d1:84:3d:7b:83:
         5f:7e:4e:af:c7:43:dd:87:7a:92:3f:88:f5:f9:6f:05:0e:f5:
         46:76:fa:87:2d:2b:c0:8b:bb:ed:c2:00:a1:db:5a:be:7a:18:
         41:66:cb:c0:bf:a0:b4:c7:bc:0c:0e:e2:bd:ec:bd:6b:63:90:
         4d:ae:e9:e8:71:9d:a6:e4:ab:a1:de:c3:eb:3e:0c:c7:ed:ac:
         4b:78:28:b8:56:c3:1b:b6:51:c1:30:17:a6:dd:c5:ea:9d:06:
         a3:88:b9:e3:72:fa:e2:1d:23:07:de:15:6d:dd:54:2d:96:1d:
         cb:c7:6a:0c:44:01:a7:fa:2d:ef:ae:ba:c7:57:9a:11:f2:99:
         36:b5:96:c6:3d:38:23:1a:cb:c8:ab:80:ae:c2:91:11:c8:e7:
         6f:3e:3d:5c:a7:c5:b2:cf:41:ba:81:e2:cf:34:e7:8e:14:05:
         8e:03:27:5f:cc:01:8b:65:f4:83:4f:3b:53:a1:39:54:95:0a:
         36:0b:d2:e8:d5:fb:14:41:3d:ea:fb:ad:62:e9:4f:49:0f:f9:
         d7:09:f5:85:f8:88:9b:f2:16:95:e9:a7:1e:30:a4:e7:09:ac:
         ef:6a:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org