Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/cc732cb9692237c41954a40bb5e6c336a4048b4f.roa
File:                     cc732cb9692237c41954a40bb5e6c336a4048b4f.roa (raw, json)
Hash identifier:          ATePflFBO7fwau1GCEpvObzuV9jhidfFxzRJ1TpCGXo=
Subject key identifier:   7B:C4:C7:AA:08:EC:20:E4:92:46:6D:EC:A6:BD:72:AC:49:9D:4C:28
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       11DC34
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/cc732cb9692237c41954a40bb5e6c336a4048b4f.roa
Signing time:             Sat 15 Apr 2023 08:30:04 +0000
ROA not before:           Fri 14 Apr 2023 08:30:04 +0000
ROA not after:            Sun 13 Apr 2025 08:30:04 +0000
asID:                     267878
IP address blocks:        45.175.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170484 (0x11dc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 14 08:30:04 2023 GMT
            Not After : Apr 13 08:30:04 2025 GMT
        Subject: CN=cc732cb9692237c41954a40bb5e6c336a4048b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:10:72:88:9a:53:4b:8c:d4:b8:b5:82:6b:
                    3f:2c:86:f0:71:07:92:9c:53:c4:3a:03:59:cf:86:
                    ba:5f:d5:ee:d0:76:79:e9:ba:99:ea:00:64:c4:20:
                    68:ad:72:65:6f:46:fe:d7:b8:39:b7:0a:90:08:4b:
                    36:18:2e:d8:34:03:f4:b9:65:7a:e5:16:7b:e1:d9:
                    27:f1:75:7b:0e:8a:d9:92:34:55:c4:34:2a:bc:69:
                    ee:0b:a9:81:56:3b:58:d2:64:b0:75:93:fd:87:3d:
                    9b:2f:66:91:61:d4:d1:cc:a8:76:3e:98:a6:81:75:
                    10:45:c5:45:b2:5f:e1:d1:09:b7:53:c9:fa:8c:b2:
                    be:d1:39:d3:6b:a6:70:f1:8c:41:95:26:f7:98:e1:
                    08:28:af:e5:61:f4:4e:a1:be:01:10:6f:75:bc:84:
                    8c:ac:4f:1a:23:8d:c6:86:e6:24:5e:67:76:c2:dd:
                    e9:b4:e4:22:5d:b1:c1:f8:90:7d:82:84:b1:a5:21:
                    8b:66:ce:e3:ad:46:24:ab:8d:e3:b6:aa:92:18:b2:
                    a4:bf:1f:98:3c:c5:1d:0c:f1:ab:d8:5b:23:f2:db:
                    88:4a:a6:1f:df:4e:a5:d9:0e:ad:47:24:7e:95:64:
                    6c:fe:9e:59:3f:63:10:8c:ba:b6:30:bb:8a:02:37:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:C7:AA:08:EC:20:E4:92:46:6D:EC:A6:BD:72:AC:49:9D:4C:28
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/cc732cb9692237c41954a40bb5e6c336a4048b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:45:ca:e6:d9:23:c1:e1:0c:23:8b:26:e5:d7:95:7a:b9:43:
         05:23:5d:5e:34:bf:f5:cf:c0:38:a1:fb:21:72:3c:24:7f:cc:
         e6:b5:7f:ea:fd:29:2d:2f:e0:9b:a4:9f:68:ff:be:f0:fb:ac:
         8b:4b:f7:4e:6e:f2:ec:90:02:d4:ac:34:67:89:0a:7d:56:76:
         40:b9:41:36:0f:ff:de:0e:64:b0:31:fb:1b:d6:73:5d:e1:1a:
         e3:e6:d8:5a:62:6e:28:53:ba:63:0d:fe:15:6b:69:c4:35:99:
         37:ea:b9:88:22:65:9b:e8:10:b9:7f:83:1b:bf:66:79:50:70:
         de:cd:d0:11:8f:2e:a7:74:c0:da:66:e0:26:a5:67:fd:25:e8:
         f3:98:31:d2:02:d6:d4:ad:5b:c9:5e:af:a7:57:f5:bd:45:4c:
         89:35:f3:dc:96:49:af:25:be:b1:ab:89:0b:6a:a6:31:da:10:
         54:cd:35:de:0d:56:99:de:34:3a:81:eb:01:7e:45:f1:da:3b:
         71:b2:7e:8a:6a:7c:b5:00:f5:46:23:1c:d9:44:91:28:ce:48:
         d4:e1:d2:ba:f5:9d:2a:e5:be:4f:6e:df:d8:af:42:3a:ab:5d:
         eb:c3:1a:88:8d:f4:85:e0:23:aa:5a:69:1a:eb:cc:a0:6d:20:
         ec:d3:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org