Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/84c422635108715a942ab63eb0537c27fbeb9f33.roa
File:                     84c422635108715a942ab63eb0537c27fbeb9f33.roa (raw, json)
Hash identifier:          ATpvO8beVjEPAuC06ewodDZOFHOQJiPWt3R3Q/aspuM=
Subject key identifier:   6F:B3:25:B0:EC:9E:EC:FD:D7:DC:59:9E:AE:0F:C3:53:6F:70:30:9A
Certificate issuer:       /CN=a568c9247534945780b8bc16b4a7698b9de06a94
Certificate serial:       1ADABD
Authority key identifier: CD:3B:4F:80:BA:32:D5:16:95:A9:1B:9C:6C:2D:F5:50:58:9E:D1:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a568c9247534945780b8bc16b4a7698b9de06a94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/84c422635108715a942ab63eb0537c27fbeb9f33.roa
Signing time:             Wed 31 Jan 2024 16:03:46 +0000
ROA not before:           Wed 31 Jan 2024 16:03:46 +0000
ROA not after:            Sat 31 Jan 2026 16:03:46 +0000
asID:                     266762
IP address blocks:        45.234.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759933 (0x1adabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a568c9247534945780b8bc16b4a7698b9de06a94
        Validity
            Not Before: Jan 31 16:03:46 2024 GMT
            Not After : Jan 31 16:03:46 2026 GMT
        Subject: CN=84c422635108715a942ab63eb0537c27fbeb9f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:ee:19:e4:91:36:31:b7:b0:7a:ea:bb:29:
                    77:80:2a:4c:b3:bf:cf:b5:2c:52:bc:21:ed:c8:20:
                    b0:37:6b:8a:5d:b0:17:9e:72:44:d6:2f:50:8b:59:
                    b9:33:12:b2:f2:0b:7a:64:ab:d2:53:dd:a5:6a:8f:
                    b6:09:2c:f3:77:02:01:f1:a1:78:eb:18:8b:12:87:
                    34:c2:83:20:33:72:ee:7d:22:dd:60:da:8d:3e:39:
                    91:cd:31:97:8c:1a:54:89:6b:94:f6:43:5a:85:a5:
                    14:9d:c5:43:a7:cd:15:b9:a2:57:96:96:71:d1:11:
                    7c:aa:5d:7c:82:9d:c5:a3:48:35:ba:26:03:03:80:
                    b3:53:de:73:ff:6d:a0:00:d5:10:44:6e:db:3b:4e:
                    c6:2f:91:65:c5:6d:28:41:df:f2:5b:2f:6a:4a:eb:
                    41:29:d1:9a:80:df:8c:72:89:a8:93:31:07:00:c9:
                    5d:ec:ba:87:36:83:27:59:c7:3e:8f:58:f9:e0:0e:
                    52:43:e3:79:92:90:a9:ea:d2:b1:89:b6:5b:98:46:
                    b4:bf:13:f1:05:64:73:28:20:c2:42:5f:04:4c:f4:
                    09:41:42:35:33:28:d3:77:d4:10:dc:84:af:68:2e:
                    28:3d:10:26:43:c9:29:65:3f:ec:99:2e:38:62:19:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:25:B0:EC:9E:EC:FD:D7:DC:59:9E:AE:0F:C3:53:6F:70:30:9A
            X509v3 Authority Key Identifier:
                keyid:CD:3B:4F:80:BA:32:D5:16:95:A9:1B:9C:6C:2D:F5:50:58:9E:D1:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a568c9247534945780b8bc16b4a7698b9de06a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/84c422635108715a942ab63eb0537c27fbeb9f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/a568c9247534945780b8bc16b4a7698b9de06a94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:e0:51:53:42:52:97:8a:74:35:c4:f3:69:35:b4:e5:3b:
         e7:4c:65:0d:ba:af:33:80:30:4e:d9:81:30:d9:0e:55:25:83:
         f6:9a:a0:27:5d:43:64:09:d5:e1:6c:c9:7f:5f:f0:32:7a:39:
         78:59:b2:09:00:56:8f:48:1c:d4:1c:19:60:f0:ed:42:a7:66:
         e8:97:3e:3e:77:24:92:74:d1:0d:0a:25:9b:a7:5a:a7:d3:69:
         55:65:d0:d8:b4:65:e6:7a:f3:72:70:22:ad:91:a5:9b:1d:dd:
         76:82:5a:43:29:0e:3d:f5:45:ef:4e:59:1e:86:5a:33:5c:ad:
         29:83:b7:cf:ec:9f:ff:33:c5:b6:88:12:1b:6f:ce:3c:15:4e:
         50:9b:07:4a:10:0f:9a:7f:44:b7:55:c7:3c:9e:7e:36:c2:a2:
         b8:8e:c5:ed:26:4e:55:93:95:21:79:e3:cb:c6:06:2c:11:3e:
         6d:74:00:18:dd:33:f7:bb:c4:52:0f:cb:a6:e7:fd:06:6f:83:
         1d:fb:3a:a7:d3:2c:18:90:78:41:88:7b:2d:e2:f7:44:b3:b8:
         e3:b3:08:6b:7e:03:ea:92:08:80:19:cb:73:4b:c1:81:29:07:
         b2:ce:62:ba:3e:57:51:b1:7f:c3:53:f7:36:1c:03:61:3d:e2:
         26:a3:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org