Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/4fae3ff3dc5508fda5387c9b4d2ffec309de9dfd.roa
File:                     4fae3ff3dc5508fda5387c9b4d2ffec309de9dfd.roa (raw, json)
Hash identifier:          wzBp7a1sfMyg7qG/am9dT8nfOlPlQsyQfaMXQ0Kulek=
Subject key identifier:   5B:DE:2C:9E:78:FD:CC:8E:92:71:EB:BB:20:5A:02:B3:58:1D:67:96
Certificate issuer:       /CN=ad8c36c507af96fcaa01a28345aaa933b573ddf3
Certificate serial:       05CA
Authority key identifier: D4:49:1F:85:6A:DF:B2:A7:F8:A7:E1:57:19:71:BF:35:5C:38:0A:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad8c36c507af96fcaa01a28345aaa933b573ddf3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/4fae3ff3dc5508fda5387c9b4d2ffec309de9dfd.roa
Signing time:             Thu 11 Jan 2024 17:30:07 +0000
ROA not before:           Thu 11 Jan 2024 17:30:07 +0000
ROA not after:            Sun 11 Jan 2026 17:30:07 +0000
asID:                     273149
IP address blocks:        45.68.48.0/22 maxlen: 24
                          45.68.49.0/24 maxlen: 24
                          45.68.50.0/24 maxlen: 24
                          45.68.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8c36c507af96fcaa01a28345aaa933b573ddf3
        Validity
            Not Before: Jan 11 17:30:07 2024 GMT
            Not After : Jan 11 17:30:07 2026 GMT
        Subject: CN=4fae3ff3dc5508fda5387c9b4d2ffec309de9dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:0f:b3:5a:2f:81:b1:5e:67:c1:6f:4e:9c:
                    1c:e2:39:9e:3e:ca:2e:99:7f:6a:94:69:a7:45:cc:
                    a2:91:5b:8e:fc:d9:a1:cf:66:9a:f9:0c:a1:b3:bf:
                    e9:c0:20:66:34:1b:e3:03:db:8a:05:34:0b:2b:f2:
                    22:ef:6a:cd:51:1e:cb:9a:0a:a1:a8:bf:a9:c9:7e:
                    c2:6c:f4:63:5f:6d:6e:8c:65:aa:57:9b:5a:3b:a6:
                    c7:4c:ca:c5:2c:99:cf:c7:8f:63:16:cf:56:62:12:
                    52:d3:3a:2c:b8:09:58:13:3a:75:a0:76:2e:52:12:
                    ef:47:9b:9f:79:b0:ba:42:9c:3f:e7:3b:3f:c8:0d:
                    2b:44:bb:f5:e4:b4:c2:44:48:cc:a1:91:90:7f:2e:
                    1f:b5:c4:6d:e9:48:9d:7c:46:55:e0:49:5c:0f:02:
                    4e:78:4c:4c:82:b6:dd:e0:da:d2:ee:ff:cc:fb:fe:
                    20:92:52:44:4c:36:3d:5f:fd:78:b1:3f:c9:37:32:
                    a6:fd:0c:d3:4d:4d:14:69:00:a1:1a:b9:a1:7e:e2:
                    49:a3:2e:72:db:9d:c2:ff:db:f7:f1:84:f2:d8:c4:
                    79:db:c3:d2:d9:fc:2a:fd:3f:39:d3:69:0f:7c:21:
                    a2:99:57:3d:ca:8e:e0:3f:04:7e:1e:64:a4:28:4e:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DE:2C:9E:78:FD:CC:8E:92:71:EB:BB:20:5A:02:B3:58:1D:67:96
            X509v3 Authority Key Identifier:
                keyid:D4:49:1F:85:6A:DF:B2:A7:F8:A7:E1:57:19:71:BF:35:5C:38:0A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad8c36c507af96fcaa01a28345aaa933b573ddf3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/4fae3ff3dc5508fda5387c9b4d2ffec309de9dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ad8c36c507af96fcaa01a28345aaa933b573ddf3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:7d:ab:98:d4:ab:30:3c:5e:97:bc:2a:de:86:3d:f6:53:
         a7:e7:e6:3e:76:a0:a6:be:e3:05:61:d2:d4:11:e5:48:a7:ff:
         aa:fe:81:42:54:17:12:3d:b9:22:b9:4e:90:bf:5d:61:d1:d9:
         ad:38:d5:28:55:48:84:4f:1c:da:6f:0a:00:20:5b:9e:b7:81:
         19:b1:86:f0:2a:71:cc:b0:6d:92:5b:ea:8c:36:25:7d:45:f7:
         00:17:e1:a0:0a:f3:74:2a:54:98:9d:52:08:05:11:63:cf:94:
         66:af:97:c4:04:68:83:43:62:ac:9d:09:40:1a:27:78:f5:55:
         ed:52:57:d2:6c:a1:4a:d0:8c:0e:f9:ae:eb:cc:67:76:1a:f2:
         b6:c4:77:1f:8f:14:ec:03:0f:b2:cc:ab:97:9e:f7:02:b1:74:
         dd:e9:44:56:99:9d:8d:ea:9e:13:dc:1d:d0:2c:a9:3b:fa:64:
         d0:4a:3e:2c:00:f5:d4:47:6b:a4:1e:6d:a0:c5:fa:71:e3:93:
         e9:43:df:4f:f4:69:ba:90:c2:ba:69:bb:9f:8d:e0:49:2d:a2:
         f4:54:08:f5:21:3b:8a:1e:af:76:6f:68:ef:63:70:b8:d4:b0:
         1b:5f:83:ad:d7:fb:c0:d6:b9:ef:77:ee:40:b3:3d:e7:bf:01:
         ea:48:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org