Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/f2f2202e8859ba48654a0081f7973745b40fb33a.roa
File:                     f2f2202e8859ba48654a0081f7973745b40fb33a.roa (raw, json)
Hash identifier:          K8l1rxZeZqy96l7xp+/p03LoyVmaHFkxbx7nwdZJhco=
Subject key identifier:   51:7C:FA:BD:EB:DA:BD:46:3A:C4:DE:11:25:06:75:11:26:AD:CF:89
Certificate issuer:       /CN=7d023573ee3a0783b026e6880294e091aed01196
Certificate serial:       26A806
Authority key identifier: 58:9B:8B:11:2E:BB:2C:46:27:64:4F:17:5A:C5:70:33:39:D0:69:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d023573ee3a0783b026e6880294e091aed01196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/f2f2202e8859ba48654a0081f7973745b40fb33a.roa
Signing time:             Fri 19 Jan 2024 18:00:44 +0000
ROA not before:           Fri 19 Jan 2024 18:00:44 +0000
ROA not after:            Fri 19 Jan 2029 18:00:44 +0000
asID:                     266886
IP address blocks:        45.228.64.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533382 (0x26a806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d023573ee3a0783b026e6880294e091aed01196
        Validity
            Not Before: Jan 19 18:00:44 2024 GMT
            Not After : Jan 19 18:00:44 2029 GMT
        Subject: CN=f2f2202e8859ba48654a0081f7973745b40fb33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:81:af:c5:02:9a:42:f7:2a:67:7d:25:46:
                    6a:92:3d:43:27:2b:ae:e0:36:21:ed:71:06:ec:08:
                    5d:9e:90:ad:81:d9:17:71:dd:8f:1c:5d:97:a1:1e:
                    d3:5f:5a:d6:2a:85:50:73:ae:b5:f5:15:61:0f:50:
                    15:2b:1b:f9:cd:20:f3:38:d2:1c:58:6e:3e:ae:ca:
                    98:d5:f1:dc:32:fa:e5:f4:de:9b:8d:f9:5d:a5:c3:
                    c1:6f:5f:82:48:2d:28:dd:c6:60:c0:57:2f:8e:52:
                    60:66:f2:dc:90:6b:84:e0:89:3d:59:3c:df:fc:35:
                    f1:61:ce:7a:0d:af:7f:70:13:e2:b9:1c:58:e8:24:
                    40:7f:e8:ce:42:fa:15:43:de:a3:c7:4e:51:16:74:
                    59:2f:82:cd:68:fe:3b:fa:26:c9:ea:32:af:a5:ae:
                    12:39:5d:e4:7b:92:cb:3a:2b:db:13:87:0f:97:4c:
                    10:dd:19:72:e7:2f:4d:75:25:8d:1e:04:93:55:2c:
                    26:a0:76:42:17:99:3f:fe:b7:e3:83:50:f6:59:18:
                    f5:1d:f8:76:f7:a2:11:9c:c2:e7:63:33:b3:02:0a:
                    36:1e:b1:18:e0:95:b6:68:0f:f5:5e:34:7d:30:73:
                    52:06:bf:77:4c:bc:c6:0d:b8:08:f0:b0:14:2d:e7:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7C:FA:BD:EB:DA:BD:46:3A:C4:DE:11:25:06:75:11:26:AD:CF:89
            X509v3 Authority Key Identifier:
                keyid:58:9B:8B:11:2E:BB:2C:46:27:64:4F:17:5A:C5:70:33:39:D0:69:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d023573ee3a0783b026e6880294e091aed01196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/f2f2202e8859ba48654a0081f7973745b40fb33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/7d023573ee3a0783b026e6880294e091aed01196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:2f:6c:cd:be:9a:fe:bd:a0:85:5e:1d:be:e0:3f:76:46:
         e8:0a:05:fe:44:3d:11:59:a2:40:d6:d9:f9:3f:c2:90:b2:0c:
         07:13:cb:1c:26:ba:72:97:1b:0c:11:40:5c:db:d6:ae:56:f0:
         cb:9b:87:0b:7f:e1:0b:f1:57:90:df:68:ef:38:11:92:a4:8e:
         1e:8f:31:7b:dd:b0:c1:0e:48:fd:02:1a:78:7b:90:f1:65:f6:
         18:5e:20:d3:bd:1c:20:8c:18:8d:98:c7:27:b6:b0:e4:79:f6:
         26:92:5f:2f:e8:96:d4:d9:c8:ac:37:95:d2:1e:f4:bf:db:b4:
         0d:7a:4f:c4:a0:bf:02:9d:73:77:3e:3c:08:55:a0:99:d0:30:
         ae:a6:7c:3a:76:e3:a8:19:76:47:0f:6a:0d:1a:1e:ce:66:0a:
         74:64:2d:17:99:fb:21:02:0d:21:2e:a5:af:10:7e:c7:f1:74:
         c4:17:6b:03:82:71:87:1d:40:cd:a6:f2:60:2c:17:91:82:97:
         22:c9:4f:30:ef:d5:6a:ff:25:b1:81:ef:a7:18:70:bf:6c:66:
         b3:91:1c:c3:ed:36:7b:41:64:3f:e3:24:ca:4b:94:c6:7f:d2:
         cf:ca:9b:c5:ce:46:c3:0c:78:79:bb:c3:c1:15:1f:64:da:a0:
         8e:d0:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org