Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/5806c8913d68d6aee1fc831defad619d784edf87.roa
File:                     5806c8913d68d6aee1fc831defad619d784edf87.roa (raw, json)
Hash identifier:          crC0E1wSPpi2tJAjlj2VGFVa6f9az7tdy6wVGczKnAs=
Subject key identifier:   B1:DF:88:78:DA:2E:2A:45:DE:4E:07:18:07:C7:49:49:B5:76:A6:0C
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       214828
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/5806c8913d68d6aee1fc831defad619d784edf87.roa
Signing time:             Sun 16 Apr 2023 18:26:44 +0000
ROA not before:           Sat 15 Apr 2023 18:26:42 +0000
ROA not after:            Wed 16 Apr 2025 18:26:42 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181160 (0x214828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Apr 15 18:26:42 2023 GMT
            Not After : Apr 16 18:26:42 2025 GMT
        Subject: CN=5806c8913d68d6aee1fc831defad619d784edf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:f2:3e:c7:dd:d2:4b:64:f6:49:d3:db:2e:
                    61:f0:e5:14:8f:da:b0:fe:24:fb:bb:3a:35:bd:bb:
                    94:b1:fa:33:98:a1:a0:ed:d0:af:7a:57:dd:a3:cd:
                    93:a3:49:c8:31:dc:6b:68:e7:72:e7:f0:54:93:d8:
                    1b:1b:9c:23:86:06:5b:c9:7f:61:68:fd:5f:75:6d:
                    84:e9:6e:8d:ae:42:6c:bd:91:a0:ef:54:b6:66:48:
                    29:c9:08:9f:e5:40:f6:0e:ca:32:da:8f:bb:60:39:
                    65:69:fa:37:8f:bd:43:bc:30:09:14:d8:53:c3:af:
                    1f:b7:f8:11:83:0a:ca:e5:e3:5e:a2:eb:9e:dd:66:
                    e9:a1:d0:32:4b:5d:7c:07:8e:83:d3:f1:e5:eb:1f:
                    95:c9:4a:ca:de:f0:0f:fb:5b:69:e7:33:df:74:15:
                    26:cd:8f:cd:82:45:d5:5b:66:a3:10:83:9e:ac:3e:
                    1b:11:db:c7:f8:39:f8:6c:4a:77:3f:7d:7d:23:e4:
                    3b:64:02:3b:52:08:8d:68:20:5d:18:2f:40:c7:d4:
                    05:b3:96:34:35:37:cb:f0:e8:51:77:fd:e2:88:71:
                    ea:a6:c4:26:2e:00:76:b6:c9:3c:22:6c:18:75:3e:
                    94:b1:fb:d6:79:b8:fc:f2:1f:8a:79:cf:6f:0d:8b:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DF:88:78:DA:2E:2A:45:DE:4E:07:18:07:C7:49:49:B5:76:A6:0C
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/5806c8913d68d6aee1fc831defad619d784edf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:82:75:be:5c:f0:4d:42:09:18:c8:25:79:fa:07:89:5e:
         ae:1a:24:65:7e:9a:2a:9f:56:18:0f:1c:f6:35:f9:3a:2f:47:
         cf:39:f1:8f:52:a0:3c:d8:b3:7e:9e:23:1b:cb:32:bd:ce:3f:
         26:60:ba:08:33:1a:22:83:33:82:f7:f3:05:24:c0:d7:be:fd:
         eb:3e:80:4f:6f:7b:25:81:98:d4:80:13:d1:1f:de:ea:e0:42:
         d7:5c:80:d9:d0:4e:de:9e:7e:76:d3:1d:de:fd:5b:f0:db:34:
         5c:8c:94:98:86:c1:8c:8b:d0:67:db:fc:6a:95:67:aa:9a:28:
         34:7c:6b:3d:64:6a:7d:c3:b8:a7:f5:af:e3:4d:76:e6:74:12:
         ff:89:82:e7:83:31:d2:65:ac:49:04:5b:d2:33:3e:2a:45:cb:
         75:14:6e:b7:16:96:c2:3f:5d:1d:a3:e9:d3:2b:b8:06:38:5b:
         3e:ad:65:be:c6:bc:3c:60:73:97:7f:10:0e:38:e1:3b:c0:4c:
         c9:cf:c2:df:35:b1:3f:10:97:af:37:4d:aa:2d:fb:f8:1f:d1:
         21:cd:78:29:74:68:33:2d:9a:a7:fb:d8:69:d1:77:f5:ff:f2:
         02:fc:ce:56:f7:ca:fe:ba:d9:4d:1c:bd:f0:19:a4:37:06:f0:
         33:67:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:02:56 2025 by rpki-client