Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/5ba756f5e11f3722ca5ea690ba52d4a6bf1db395.roa
File:                     5ba756f5e11f3722ca5ea690ba52d4a6bf1db395.roa (raw, json)
Hash identifier:          w5zfTbpYc5dm8xco3+QOgOcId1643ZAGe5QjJkGr3Pw=
Subject key identifier:   C2:47:43:49:E1:B5:E3:70:79:39:BE:2B:0B:40:10:98:FF:00:0E:D8
Certificate issuer:       /CN=06648e29e39a495ed1db237056c029aa5ab8ead6
Certificate serial:       F01D
Authority key identifier: 2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/5ba756f5e11f3722ca5ea690ba52d4a6bf1db395.roa
Signing time:             Wed 05 Jan 2022 15:21:57 +0000
ROA not before:           Fri 26 Nov 2021 03:00:00 +0000
ROA not after:            Sun 26 Nov 2023 03:00:00 +0000
asID:                     266842
IP address blocks:        45.186.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61469 (0xf01d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06648e29e39a495ed1db237056c029aa5ab8ead6
        Validity
            Not Before: Nov 26 03:00:00 2021 GMT
            Not After : Nov 26 03:00:00 2023 GMT
        Subject: CN=5ba756f5e11f3722ca5ea690ba52d4a6bf1db395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:64:a5:5a:41:90:a1:7a:09:3d:2e:aa:03:
                    50:a7:99:32:44:21:2d:0e:14:7c:0a:36:c4:11:55:
                    29:28:b6:b9:95:ff:9d:48:29:46:60:20:d2:f8:f5:
                    35:90:08:32:e7:c6:cf:84:63:19:3a:4c:4f:69:eb:
                    b7:d5:eb:10:ec:2b:eb:72:b8:75:99:1e:e7:0a:e7:
                    53:94:c1:d7:61:54:23:aa:95:42:56:59:90:ba:3b:
                    94:a5:40:08:6a:e4:f9:a4:18:a6:7e:fd:da:e4:5a:
                    32:99:a6:51:de:da:85:ca:e7:cf:48:fd:74:44:90:
                    6b:e3:53:3f:d9:2d:fb:65:bc:18:26:32:56:f9:b0:
                    d5:94:39:81:d0:f4:57:7f:94:45:f5:1f:77:47:7e:
                    e3:3a:b6:67:15:a4:b9:c1:a9:80:c9:18:37:a3:19:
                    22:e5:50:01:b1:49:d1:19:e2:86:b8:13:d0:ae:06:
                    38:54:a8:8f:e1:de:f6:db:58:f9:1c:84:25:fa:1d:
                    ac:72:a1:65:81:65:ac:d6:c8:fb:a0:bb:26:10:d8:
                    ef:a1:6b:4d:75:d0:cd:dd:94:fe:6b:90:2d:12:58:
                    3f:5a:e4:b9:34:9a:ae:90:4d:58:1b:4c:be:a5:26:
                    80:3f:6a:fe:53:7e:db:d4:01:7a:d4:38:6e:81:83:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:43:49:E1:B5:E3:70:79:39:BE:2B:0B:40:10:98:FF:00:0E:D8
            X509v3 Authority Key Identifier:
                keyid:2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/5ba756f5e11f3722ca5ea690ba52d4a6bf1db395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/06648e29e39a495ed1db237056c029aa5ab8ead6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:14:8c:c8:62:ab:b0:0e:2c:8e:5d:ed:61:8e:a6:b6:73:00:
         eb:ec:a8:49:e8:4b:80:b1:9c:21:ca:9e:82:10:14:d7:d9:44:
         9f:4f:43:2f:d1:89:6c:36:31:98:24:4f:ba:fa:76:88:16:df:
         47:aa:39:bd:9b:c6:ed:d0:b8:c4:f5:86:76:cc:2d:36:30:51:
         b2:88:4d:85:41:c7:c6:7c:35:db:56:65:48:72:5a:e8:1a:86:
         f4:f2:48:7d:4b:1c:72:12:74:b2:5a:89:f0:76:57:9f:90:1e:
         2b:30:22:6e:95:b9:3d:f1:15:56:5d:9f:c5:13:f2:c5:69:8e:
         82:3a:e2:af:3f:7c:3a:cf:03:35:83:7f:dc:cc:f5:e2:4e:4a:
         df:ad:93:b4:24:f6:37:c6:2d:15:3c:d7:9a:2c:4c:c0:d3:f7:
         5f:9a:d5:79:e3:c6:c8:1b:5e:24:a4:c0:44:ba:9c:05:cf:7a:
         bf:5c:65:ab:a8:fb:96:8b:04:a6:ed:ee:3a:44:3a:6b:3c:23:
         68:75:f6:12:3d:98:ba:88:ba:fd:a8:cb:87:26:05:5b:00:8e:
         f9:a9:98:38:d8:87:08:bd:36:f7:f9:fe:5f:bf:e2:0d:f7:06:
         cc:e6:40:b0:58:87:9f:10:a3:6e:34:b1:c7:b3:d4:1c:87:5d:
         af:cc:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org