Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/ab5c99a3a687b4f12a73f8d710bd37a80b9b8573.roa
File:                     ab5c99a3a687b4f12a73f8d710bd37a80b9b8573.roa (raw, json)
Hash identifier:          O0GyXLeS9s1vRVnNFbcNJI8iPyvPgsRdNIea8ikhx14=
Subject key identifier:   60:B6:9A:76:D5:A1:65:B8:47:54:EB:65:97:C4:E7:F5:4E:0D:9E:56
Certificate issuer:       /CN=d8f649f7e77235e02854ea1e4e378027ec9afcff
Certificate serial:       02DB5C
Authority key identifier: 78:24:78:45:C8:FA:37:C4:A2:45:87:32:A4:2B:FF:2E:89:52:64:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f649f7e77235e02854ea1e4e378027ec9afcff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/ab5c99a3a687b4f12a73f8d710bd37a80b9b8573.roa
Signing time:             Fri 18 Aug 2023 04:57:50 +0000
ROA not before:           Thu 17 Aug 2023 04:57:50 +0000
ROA not after:            Mon 18 Aug 2025 04:57:50 +0000
asID:                     27687
IP address blocks:        45.65.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187228 (0x2db5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f649f7e77235e02854ea1e4e378027ec9afcff
        Validity
            Not Before: Aug 17 04:57:50 2023 GMT
            Not After : Aug 18 04:57:50 2025 GMT
        Subject: CN=ab5c99a3a687b4f12a73f8d710bd37a80b9b8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:77:a6:03:bc:53:68:1b:ee:83:6a:92:3a:
                    18:a8:5f:36:2d:cf:0a:07:b3:5b:8f:e3:e7:62:ce:
                    5d:23:94:e8:a1:8e:ca:b6:b7:62:b0:7d:d8:04:ac:
                    ff:c8:29:c3:19:cd:c0:98:86:1b:20:cc:fb:cb:7e:
                    be:ef:67:88:b7:a6:90:0d:d3:2b:1f:13:c8:b5:c8:
                    73:0d:ea:65:b8:36:4b:48:10:ac:13:70:6f:80:c5:
                    a5:65:da:c5:6e:78:69:ad:10:3f:fa:e7:7d:2f:29:
                    2a:7c:b0:57:e7:ef:13:30:32:70:97:02:f0:8e:74:
                    1d:91:6f:88:31:cc:a9:35:11:65:31:52:16:34:0a:
                    4c:ee:6d:e1:5d:38:b1:be:cf:bf:b3:74:71:bf:1d:
                    3a:54:4b:b3:0e:ed:e9:5b:85:2e:92:93:42:d8:18:
                    31:39:be:f8:80:67:48:5b:1e:cf:b5:de:08:7b:42:
                    fd:be:c1:f9:f7:2b:89:9b:53:4e:b7:b1:e1:5c:bb:
                    32:76:30:12:3f:89:de:22:5a:ab:1b:73:c7:4c:ae:
                    10:ac:7e:27:84:39:ef:f0:aa:57:88:a7:53:d6:08:
                    84:fd:a4:d9:e3:90:db:c1:4f:f5:f9:02:03:1d:61:
                    46:de:83:0d:d0:85:ce:61:64:51:95:8b:3c:f3:fe:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B6:9A:76:D5:A1:65:B8:47:54:EB:65:97:C4:E7:F5:4E:0D:9E:56
            X509v3 Authority Key Identifier:
                keyid:78:24:78:45:C8:FA:37:C4:A2:45:87:32:A4:2B:FF:2E:89:52:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f649f7e77235e02854ea1e4e378027ec9afcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/ab5c99a3a687b4f12a73f8d710bd37a80b9b8573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/d8f649f7e77235e02854ea1e4e378027ec9afcff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:71:dc:e1:8e:a8:47:3b:84:b7:26:45:44:60:2a:22:91:74:
         00:3c:57:25:95:aa:26:a5:cc:61:a0:09:f2:3c:67:57:c6:f4:
         bf:92:1d:9f:ce:cf:8e:c5:6b:e1:29:44:7d:d4:7d:be:2e:bb:
         35:74:8d:02:fe:a6:81:d9:ab:c2:13:4d:55:12:aa:dc:2e:01:
         5d:d5:d7:29:fe:d8:35:48:4b:d6:7e:30:af:14:2c:e5:5b:d3:
         fa:66:aa:08:23:5d:26:8e:a0:10:50:cc:73:e2:b5:1c:04:1d:
         30:4b:ae:4a:33:af:03:63:db:aa:1a:de:78:17:08:9f:4d:8d:
         3f:8b:fa:7f:c7:63:53:bc:99:be:46:a3:31:23:33:21:55:f0:
         98:f9:b8:a8:67:9d:e2:92:9b:90:f9:50:67:46:de:76:f4:81:
         fe:38:74:77:dd:ea:f2:ae:38:f9:46:ef:2c:e4:f0:8e:c3:b9:
         15:02:7a:0b:10:f3:4d:4d:09:8f:54:be:e3:b1:9a:cf:83:c1:
         33:8c:f8:d5:63:e2:52:f8:c3:9e:49:1b:c3:71:f7:4e:a0:0b:
         00:dc:74:b0:a4:9b:8d:dd:4c:e1:6b:ac:b4:7d:3f:d4:97:6c:
         ba:12:79:0f:dd:5a:43:95:c1:05:8a:e7:49:ef:92:54:69:1b:
         bc:97:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org