Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/1c18117479e412b7d1ce2ae0336e9eed2b0faae0.roa
File:                     1c18117479e412b7d1ce2ae0336e9eed2b0faae0.roa (raw, json)
Hash identifier:          cq4WCew6P1uR3BMHBtnhm46xY+Hd2BmyKCySKlS+6+c=
Subject key identifier:   76:77:61:1A:AC:97:5B:88:3C:B7:9F:6A:A8:A0:21:20:29:C0:FE:5A
Certificate issuer:       /CN=f5a6fc62579b19a2435b117b3d5b39a73d68bc1f
Certificate serial:       0C30CD
Authority key identifier: D1:93:C5:2D:59:93:7A:5D:CE:B2:8B:41:30:C1:2E:27:F2:5D:6F:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5a6fc62579b19a2435b117b3d5b39a73d68bc1f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/1c18117479e412b7d1ce2ae0336e9eed2b0faae0.roa
Signing time:             Wed 24 Mar 2021 14:48:01 +0000
ROA not before:           Wed 24 Mar 2021 14:48:00 +0000
ROA not after:            Tue 24 Mar 2026 14:48:00 +0000
asID:                     267809
IP address blocks:        45.173.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798925 (0xc30cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a6fc62579b19a2435b117b3d5b39a73d68bc1f
        Validity
            Not Before: Mar 24 14:48:00 2021 GMT
            Not After : Mar 24 14:48:00 2026 GMT
        Subject: CN=1c18117479e412b7d1ce2ae0336e9eed2b0faae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:f7:28:1b:2a:f5:7d:93:22:4e:71:02:e9:
                    08:be:45:7e:92:fe:74:fc:ed:b0:95:6f:cc:d8:40:
                    39:ca:ae:e9:7b:33:4b:ea:ae:47:ab:a8:c6:bc:a3:
                    9b:c0:f2:f5:25:44:fe:f1:0b:d9:9a:09:11:c1:72:
                    65:56:80:24:ee:10:89:9a:91:a0:c2:90:ad:e0:c8:
                    c2:3a:e8:8a:76:c3:fc:5a:2b:12:d5:b9:0a:8a:da:
                    be:4e:e2:f3:10:06:13:d2:6a:f3:27:b9:07:c4:dc:
                    93:f9:14:99:55:e8:23:50:c0:45:83:9a:72:f4:c9:
                    1a:1c:8e:8d:85:43:c4:84:61:c2:b0:10:a1:9b:76:
                    b1:b9:80:55:7b:92:da:c4:d5:20:99:3d:ce:e3:7b:
                    7a:db:45:c9:2d:9c:94:51:c2:dd:51:fb:94:84:2f:
                    c8:ec:6b:28:48:02:ed:1f:4a:23:a1:a7:fb:34:e2:
                    72:e7:a2:b6:7c:aa:9e:cc:65:9f:2f:07:ed:e0:cc:
                    d4:cb:e2:68:e2:c7:3c:e8:01:fe:0c:26:88:75:a9:
                    18:26:d2:12:50:c5:ce:f3:ae:b8:c5:1c:1f:19:d5:
                    cd:5f:20:ed:c0:d8:6f:78:ff:8b:21:ca:a4:7e:74:
                    86:b0:7b:6c:ba:43:1f:31:53:56:c4:5d:d2:61:51:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:61:1A:AC:97:5B:88:3C:B7:9F:6A:A8:A0:21:20:29:C0:FE:5A
            X509v3 Authority Key Identifier:
                keyid:D1:93:C5:2D:59:93:7A:5D:CE:B2:8B:41:30:C1:2E:27:F2:5D:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5a6fc62579b19a2435b117b3d5b39a73d68bc1f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/1c18117479e412b7d1ce2ae0336e9eed2b0faae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef3f025-4103-4531-b740-b3a46a6da645/f5a6fc62579b19a2435b117b3d5b39a73d68bc1f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:fa:cc:3d:eb:b4:e1:07:a7:bb:2b:f4:b4:23:eb:ef:3a:
         f2:47:f0:44:d2:03:f4:80:ef:b3:c2:25:1c:55:45:6a:31:68:
         2d:46:c3:07:8d:61:29:7a:05:a2:67:fc:b7:59:83:36:79:b3:
         93:9f:d8:3a:f2:57:5f:7f:07:38:09:3b:56:b8:8f:8c:21:a6:
         4b:c5:3e:4a:49:43:2d:6c:2f:6a:cc:3c:e6:5b:d6:12:cf:15:
         33:06:3e:8a:6c:23:b8:8a:6f:86:77:d4:bb:d6:19:c6:45:e2:
         c7:81:39:67:88:08:d6:d5:46:40:b4:57:1a:da:66:80:52:eb:
         ff:e6:cf:85:0d:28:4a:b4:22:de:bd:eb:f8:9d:2d:e0:78:2f:
         aa:28:5c:dd:cc:01:73:ef:1c:26:04:91:ef:ff:e5:e9:03:f4:
         7b:94:b7:c4:38:1b:bc:89:5a:3c:8c:77:34:36:b4:7f:b3:a6:
         cf:1d:62:ed:ac:c3:37:4b:c7:e1:00:f7:d1:7b:37:98:14:f5:
         ae:a8:1e:ea:78:a2:1b:8b:00:cb:f2:56:56:0d:a2:4f:13:ef:
         46:f1:8f:24:ed:87:a0:70:37:7c:f2:f5:1f:dd:3d:fe:f7:36:
         95:e1:4f:f3:9e:3c:73:d4:87:41:3b:3a:9e:3b:60:21:9a:4d:
         51:9c:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org