Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/ceefe5e38221e23758065dd3a21cea4c24b83d8f.roa
File:                     ceefe5e38221e23758065dd3a21cea4c24b83d8f.roa (raw, json)
Hash identifier:          Ra1Fzyn3eeiC5vfaq0nCgQq4yU0bj5+QuKWpSkBR4EU=
Subject key identifier:   BA:9D:04:16:37:23:24:DC:68:83:99:7D:9E:A1:C8:02:2E:94:E6:DF
Certificate issuer:       /CN=83e071b73134e99e61c3db9163fa966ff3118e3c
Certificate serial:       21EA57
Authority key identifier: 45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/ceefe5e38221e23758065dd3a21cea4c24b83d8f.roa
Signing time:             Wed 20 Sep 2023 20:57:21 +0000
ROA not before:           Tue 19 Sep 2023 20:57:00 +0000
ROA not after:            Sat 20 Sep 2025 20:57:00 +0000
asID:                     263686
IP address blocks:        45.175.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222679 (0x21ea57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e071b73134e99e61c3db9163fa966ff3118e3c
        Validity
            Not Before: Sep 19 20:57:00 2023 GMT
            Not After : Sep 20 20:57:00 2025 GMT
        Subject: CN=ceefe5e38221e23758065dd3a21cea4c24b83d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:83:60:30:b0:aa:81:9e:50:23:a7:38:e4:
                    96:01:67:ed:28:db:e2:10:9e:32:26:9c:32:3a:14:
                    6d:2a:76:0d:f5:a4:5f:1e:62:cd:4a:c2:19:aa:a8:
                    84:71:ed:99:b8:30:b1:40:e9:2c:3b:14:35:98:c8:
                    bd:10:32:12:90:bb:fe:42:fd:ef:43:a7:33:f0:73:
                    ca:f5:4c:b3:8b:3d:bd:5c:d7:a9:5a:bb:d6:be:7f:
                    c8:62:2a:2a:62:55:e2:54:97:80:f7:55:cf:cd:6e:
                    8a:54:cb:1e:95:db:7c:62:f6:d5:c8:9a:5a:3c:42:
                    0c:33:52:75:5e:a0:5b:d4:1a:6e:12:b3:01:04:c5:
                    10:ce:b5:31:06:1e:ad:6a:e0:3e:d1:c5:18:95:00:
                    7d:14:e0:58:71:77:3e:2f:13:f8:fe:7b:95:59:e5:
                    1b:30:58:ca:d7:ce:d9:b2:88:8a:83:72:38:75:91:
                    26:f3:a5:1c:8a:a2:ce:43:0c:d4:ab:29:3a:0c:39:
                    78:d3:2d:80:34:61:9c:b8:53:99:0c:4a:3b:e6:1f:
                    a8:6f:e9:25:91:f4:60:7a:39:91:49:57:b1:55:e3:
                    fa:c0:75:19:b2:26:56:6e:82:31:a8:0a:fb:c5:a8:
                    00:e4:6f:52:5f:72:96:78:ff:d2:92:7d:b0:dd:4a:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:04:16:37:23:24:DC:68:83:99:7D:9E:A1:C8:02:2E:94:E6:DF
            X509v3 Authority Key Identifier:
                keyid:45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/ceefe5e38221e23758065dd3a21cea4c24b83d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:67:90:50:4c:a2:cd:40:92:3f:b9:87:6b:f5:40:60:be:14:
         16:1e:9e:8a:21:fd:50:56:c0:8c:17:c3:5b:da:f6:c3:07:82:
         d1:d2:db:5f:f2:7f:f2:3d:34:7a:7a:73:30:1f:de:81:97:51:
         91:1a:78:52:45:b0:74:35:43:a3:ee:5e:fd:57:b1:c4:45:4e:
         5b:ac:6c:16:5e:11:77:e5:a9:6a:18:d1:c7:50:2b:04:87:65:
         25:1f:47:5a:f5:e7:b0:61:39:fb:b0:37:66:38:8c:fe:94:08:
         fe:ac:04:54:72:6b:4b:e4:fe:f9:4a:92:2e:d5:59:4d:bb:8f:
         ad:7e:32:19:62:ff:af:22:82:10:39:1a:b8:c1:0e:a7:a6:52:
         8a:f9:a5:e8:82:85:3e:7c:7a:4e:b2:7b:db:84:e1:02:fc:27:
         63:55:aa:4b:94:22:94:3c:eb:ac:49:37:9e:4c:aa:0b:05:22:
         f8:58:60:1a:85:37:de:02:1f:10:6c:26:b2:a5:b0:b0:c2:0f:
         a5:96:cf:23:4b:87:2c:84:e7:ae:28:e0:24:98:b7:54:3b:4a:
         dd:85:d6:81:0c:68:81:c6:43:13:67:61:a3:a6:40:6f:dd:64:
         e7:0e:38:ac:0e:fb:54:55:b8:c9:7b:ea:c9:e0:93:0a:d8:d2:
         9b:f8:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org