Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/4b91795182192e1933a62791a29065b8e29467fc.roa
File:                     4b91795182192e1933a62791a29065b8e29467fc.roa (raw, json)
Hash identifier:          KybUbsY2cMrKCJgeEv/JelESeUQJL6+8pYF8CqovLNs=
Subject key identifier:   81:48:31:23:7B:C2:D7:C3:15:CF:2B:1B:2F:C7:F5:45:DA:DC:1D:67
Certificate issuer:       /CN=47b26b4cc424b80b0e574677390a5e2698d3886d
Certificate serial:       10BFB2
Authority key identifier: 2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/4b91795182192e1933a62791a29065b8e29467fc.roa
Signing time:             Fri 22 Dec 2023 20:33:20 +0000
ROA not before:           Fri 22 Dec 2023 20:33:20 +0000
ROA not after:            Mon 22 Dec 2025 20:33:20 +0000
asID:                     273044
IP address blocks:        45.5.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097650 (0x10bfb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b26b4cc424b80b0e574677390a5e2698d3886d
        Validity
            Not Before: Dec 22 20:33:20 2023 GMT
            Not After : Dec 22 20:33:20 2025 GMT
        Subject: CN=4b91795182192e1933a62791a29065b8e29467fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:36:bf:e9:68:ca:d9:98:86:f1:27:1b:8d:
                    3c:69:e7:b5:71:14:9c:3b:33:51:a7:f9:0d:9e:f1:
                    1f:21:5b:e5:bd:56:6b:73:69:71:5d:06:59:c5:f6:
                    05:72:8a:a1:0a:76:d0:cf:4d:78:24:08:f4:3c:11:
                    1b:6a:89:f4:2f:f6:92:93:fb:4e:5f:36:7e:1b:55:
                    a4:2e:ec:b1:15:8a:89:4f:49:7d:42:75:aa:c2:c3:
                    1e:6e:63:8a:51:6a:80:4e:90:1b:c8:27:03:03:89:
                    74:a1:ac:b6:99:2d:3f:d8:40:c3:16:7b:e6:6b:aa:
                    cb:0f:7c:23:17:9a:35:51:80:69:8f:ac:97:f7:3c:
                    d9:60:9e:3e:f3:84:bd:93:7e:fe:e2:5d:41:33:94:
                    ac:78:e9:d6:cb:e4:6f:74:1e:c6:f3:86:9e:cb:a7:
                    83:08:cb:ce:92:c4:81:90:ba:cd:eb:f5:4e:72:23:
                    97:66:a4:f7:c6:dd:70:46:9f:83:a2:4e:14:a9:04:
                    7f:78:b0:99:58:7d:f1:49:f4:7b:6c:06:03:77:b2:
                    04:98:cf:ff:12:8b:f9:bd:f8:5d:b5:9b:48:85:0e:
                    48:00:9f:32:23:e9:4f:7e:6e:dd:56:7b:3c:c2:e8:
                    a2:16:81:f6:b2:dd:bc:5e:e7:69:99:c3:58:b2:23:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:31:23:7B:C2:D7:C3:15:CF:2B:1B:2F:C7:F5:45:DA:DC:1D:67
            X509v3 Authority Key Identifier:
                keyid:2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/4b91795182192e1933a62791a29065b8e29467fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:74:d8:28:aa:6e:d6:64:7c:c2:98:37:b0:44:02:24:86:bf:
         0f:2d:e3:50:f0:84:98:48:7f:6b:06:21:01:81:bb:39:a6:e2:
         53:db:9d:4a:99:22:54:d3:9f:15:b8:79:cb:45:14:e5:c7:46:
         47:e2:95:d1:61:e3:c6:60:25:75:94:45:50:5c:42:ea:b3:c4:
         7f:00:ed:69:5d:78:a1:0d:4f:56:33:47:40:ec:f9:79:d7:08:
         1a:90:03:a0:64:59:6c:9d:fc:ca:7e:57:f8:7d:4b:39:c7:59:
         5d:be:a4:cf:da:9a:5c:98:4c:66:75:29:90:59:a2:e7:3e:88:
         31:5a:69:63:e3:15:9f:35:4e:48:a1:e9:59:bb:36:d0:5e:c4:
         be:75:08:23:35:97:e7:3d:77:73:59:30:c4:2f:47:e9:5d:83:
         86:fb:49:1c:a8:84:21:4a:66:82:0e:9d:5c:52:42:b5:a4:82:
         12:19:e1:a6:16:04:01:cc:d2:63:54:72:e9:0c:65:4a:76:20:
         81:2d:58:40:75:d9:15:91:de:88:4b:55:d2:b3:f5:cf:a2:9e:
         c9:cc:58:f7:e8:52:96:d8:ea:d3:1e:c5:01:11:4e:bc:a6:9d:
         ad:a9:e8:ae:d6:43:29:26:cf:4e:c5:53:37:9a:5a:33:fb:25:
         63:df:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org