Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/de487f6f65436e9453ca563d9b9e507b481af2d5.roa
File:                     de487f6f65436e9453ca563d9b9e507b481af2d5.roa (raw, json)
Hash identifier:          Hfmq60dS+9vrKO3WR5AlDgABJgYBUq2DkYN9iFy2nN8=
Subject key identifier:   20:31:3F:5A:CB:8B:55:B6:1C:9D:22:68:08:BF:5D:A6:C8:02:52:49
Certificate issuer:       /CN=94373e51445c3d1c9effa7de1799d8fbf06485a9
Certificate serial:       21BA1A
Authority key identifier: 04:B0:38:1B:45:4A:84:75:75:1A:AD:A3:2A:9F:91:63:F7:6A:C5:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94373e51445c3d1c9effa7de1799d8fbf06485a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/de487f6f65436e9453ca563d9b9e507b481af2d5.roa
Signing time:             Mon 01 Apr 2024 19:32:35 +0000
ROA not before:           Mon 01 Apr 2024 19:32:35 +0000
ROA not after:            Sun 01 Apr 2029 19:32:35 +0000
asID:                     265848
IP address blocks:        45.224.104.0/24 maxlen: 24
                          45.224.105.0/24 maxlen: 24
                          45.224.106.0/24 maxlen: 24
                          45.224.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210330 (0x21ba1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94373e51445c3d1c9effa7de1799d8fbf06485a9
        Validity
            Not Before: Apr  1 19:32:35 2024 GMT
            Not After : Apr  1 19:32:35 2029 GMT
        Subject: CN=de487f6f65436e9453ca563d9b9e507b481af2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:91:16:eb:e8:d8:6c:d3:32:6e:87:49:78:
                    13:97:b4:24:d6:77:aa:90:ad:2b:13:8f:78:ca:ff:
                    43:46:7c:c4:08:59:08:22:4b:41:03:00:ab:ad:a1:
                    b5:bf:fc:c5:89:d9:10:be:b3:0b:cf:ed:bf:7a:8c:
                    57:b1:18:9b:f3:79:93:8b:40:2b:ab:05:dd:f6:89:
                    13:e4:6c:6f:cd:af:a7:3b:5b:83:df:d1:83:0b:5f:
                    19:e1:78:37:77:c1:21:bf:19:bb:bc:5e:55:23:b6:
                    cd:90:73:86:07:74:3a:93:a4:9d:49:14:be:43:7d:
                    7c:43:41:6d:07:36:07:1a:72:da:3a:d4:1c:a6:e9:
                    07:78:c6:8e:df:f7:9c:bd:de:97:57:9c:aa:b4:ac:
                    57:6e:1b:ec:a8:f1:f0:11:30:24:98:aa:2a:32:a6:
                    a5:86:f2:ce:9a:f1:1d:53:55:b3:e2:60:8f:31:b5:
                    b5:f1:26:39:04:a4:e9:b7:73:4d:2b:78:4a:ac:49:
                    6b:81:14:36:35:d3:1e:ba:70:02:00:1e:b3:d9:2c:
                    17:82:ec:36:b1:7a:0f:65:97:04:66:18:87:9a:a2:
                    0f:a7:42:fa:f1:8c:2a:19:f1:df:5e:3a:46:9f:ce:
                    88:8a:ea:16:41:90:3e:25:03:78:76:8f:86:fd:74:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:3F:5A:CB:8B:55:B6:1C:9D:22:68:08:BF:5D:A6:C8:02:52:49
            X509v3 Authority Key Identifier:
                keyid:04:B0:38:1B:45:4A:84:75:75:1A:AD:A3:2A:9F:91:63:F7:6A:C5:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94373e51445c3d1c9effa7de1799d8fbf06485a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/de487f6f65436e9453ca563d9b9e507b481af2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/94373e51445c3d1c9effa7de1799d8fbf06485a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:50:6c:49:ef:43:9d:8a:1b:bc:04:e3:41:bd:4e:fe:7e:e4:
         22:82:ab:14:b8:3b:c9:94:53:e3:94:a0:1c:75:3f:84:d1:93:
         24:23:35:a3:fb:58:fa:8b:19:9d:c9:a2:08:47:1d:14:a7:f1:
         15:87:20:9c:91:e6:85:57:2d:a1:37:8c:9f:26:36:ac:c1:4b:
         70:5a:ae:78:65:8f:96:ed:19:7b:c1:fa:69:11:95:a0:40:94:
         4d:76:09:c1:93:c6:2d:dc:f3:75:f6:4d:2f:69:b5:68:22:f7:
         33:38:37:e1:88:33:14:49:fb:c4:6c:fa:40:34:f4:d1:63:8c:
         d3:81:75:37:a1:7a:5e:c6:2e:70:9c:d3:47:d6:e0:d7:02:ce:
         02:2b:44:54:fb:ae:4a:8f:cd:d9:7b:e1:92:e8:e2:44:6a:ea:
         d8:7d:d0:0f:94:1e:75:fb:25:4b:f1:47:6a:21:ed:f0:40:21:
         f1:3c:b4:a3:af:86:aa:d5:ae:e0:a9:ac:9f:2e:66:c8:80:82:
         09:c3:5c:16:a6:d9:38:26:bb:5a:6d:2a:fc:90:ba:72:07:19:
         f7:b4:c5:59:5b:6d:6b:57:db:d6:8b:ff:35:96:0a:5b:74:ee:
         37:17:83:58:0c:26:c2:e3:85:c9:fa:ea:f8:72:4f:a4:9f:1d:
         b3:51:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org