Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/f9fab44aed87bb2b875fcfd781d37b15ed5680aa.roa
File:                     f9fab44aed87bb2b875fcfd781d37b15ed5680aa.roa (raw, json)
Hash identifier:          5Ol/T1hdALOeKrZKFXtZZoqpSwrWF9PfXZhbhNNiP9M=
Subject key identifier:   70:2E:1B:35:35:B5:77:49:3D:58:22:9A:16:46:11:18:7A:7F:E2:74
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       13388E
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/f9fab44aed87bb2b875fcfd781d37b15ed5680aa.roa
Signing time:             Mon 26 Jun 2023 19:48:41 +0000
ROA not before:           Sun 25 Jun 2023 19:48:40 +0000
ROA not after:            Thu 26 Jun 2025 19:48:40 +0000
asID:                     198636
IP address blocks:        45.4.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259662 (0x13388e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: Jun 25 19:48:40 2023 GMT
            Not After : Jun 26 19:48:40 2025 GMT
        Subject: CN=f9fab44aed87bb2b875fcfd781d37b15ed5680aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:49:2f:e1:78:53:30:5a:70:ff:1c:24:0d:
                    9d:6a:1b:37:4a:da:ca:86:0a:2c:2d:10:37:84:65:
                    62:1a:ee:f8:b9:0c:c1:d3:95:ce:89:2b:d5:a5:61:
                    07:06:6e:56:cc:08:8a:24:f5:4f:6f:a0:19:9f:71:
                    04:9c:52:46:f3:d9:95:7f:c3:51:f5:84:6f:35:13:
                    53:23:93:ac:db:d5:a5:d2:b3:16:b7:bf:11:c7:21:
                    98:f3:86:59:e2:37:38:6e:fc:33:c6:1f:6c:25:0e:
                    0e:d7:01:21:4a:7a:ca:aa:f3:a6:84:75:5e:59:a0:
                    68:2f:3f:0c:d6:81:37:11:8b:c8:c9:12:11:6f:8a:
                    f2:9b:76:ce:91:98:16:f4:42:51:16:ca:ba:c9:79:
                    c9:11:96:11:89:aa:a1:ec:8a:a2:3c:b7:5f:21:da:
                    e5:cf:24:18:4a:72:3a:12:01:b2:eb:72:bd:40:3e:
                    ba:00:bd:27:7c:d0:a9:37:6c:20:a2:80:b4:66:b3:
                    aa:ec:20:78:ad:68:a8:7c:81:51:66:ce:a9:e4:00:
                    d7:eb:36:b1:14:59:7b:0e:82:15:fc:5f:06:60:a4:
                    00:f0:57:1c:2d:40:60:9f:ec:22:ac:7d:73:69:fa:
                    da:51:fa:53:f2:e1:ec:00:50:25:94:47:1d:f8:70:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:1B:35:35:B5:77:49:3D:58:22:9A:16:46:11:18:7A:7F:E2:74
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/f9fab44aed87bb2b875fcfd781d37b15ed5680aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:82:90:03:f7:f7:06:9e:2b:b0:42:ce:45:fa:6c:06:ef:
         0c:7e:0d:f8:d4:5c:63:15:76:95:5e:5f:18:b6:07:15:5d:1e:
         ec:54:62:00:b8:9a:df:a1:f5:d0:1d:aa:18:6f:b0:3a:81:1d:
         3e:a6:9f:99:dc:bb:34:27:57:65:dc:72:60:99:b4:1a:ca:55:
         a2:9e:ea:71:4b:33:5b:e2:99:c0:b4:1e:ee:f5:d7:dc:25:d6:
         b7:32:22:22:1e:69:b9:70:e3:9b:6d:7e:54:10:f6:30:5c:13:
         fe:5c:0f:ea:f8:d4:8c:2c:b7:74:2e:e8:88:bf:4d:50:cf:ce:
         d8:6a:22:d5:3d:6a:cb:3c:af:d0:c7:3e:3f:45:1c:1b:3f:76:
         11:88:60:e4:a0:91:45:c3:9d:1b:66:e9:e4:51:15:17:2f:78:
         65:78:af:c2:24:94:09:ce:9a:2a:cb:ef:92:5f:23:83:e8:d7:
         cd:9d:3d:57:c2:c3:6a:2f:3a:b6:c0:e4:b0:dd:9c:90:c7:fb:
         02:be:df:43:15:c7:8a:87:9c:f9:b4:83:b5:cc:69:01:31:fe:
         28:3e:31:9a:68:63:8f:e7:b3:05:e2:2d:e4:88:16:0e:80:91:
         ae:01:9e:0e:7c:b9:ff:75:a2:42:59:f6:00:98:e5:93:08:98:
         d4:ff:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org