Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/21e4deb7c045d58541c0c2cb59d4f568428cf750.roa
File:                     21e4deb7c045d58541c0c2cb59d4f568428cf750.roa (raw, json)
Hash identifier:          /QV2u295ImsLklHaCiRdCBhx1pO4nAwxO9uVzn+nuH0=
Subject key identifier:   65:88:76:3D:DF:A5:22:E7:AF:6D:C0:56:14:21:E0:64:C7:B9:65:D9
Certificate issuer:       /CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
Certificate serial:       053245
Authority key identifier: 68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/21e4deb7c045d58541c0c2cb59d4f568428cf750.roa
Signing time:             Tue 05 Dec 2023 19:10:11 +0000
ROA not before:           Tue 05 Dec 2023 19:10:11 +0000
ROA not after:            Fri 05 Dec 2025 19:10:11 +0000
asID:                     264758
IP address blocks:        45.173.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340549 (0x53245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
        Validity
            Not Before: Dec  5 19:10:11 2023 GMT
            Not After : Dec  5 19:10:11 2025 GMT
        Subject: CN=21e4deb7c045d58541c0c2cb59d4f568428cf750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:24:14:ae:11:bb:94:13:d6:a3:af:61:4a:
                    0a:05:bd:15:7a:17:74:74:2a:69:3e:ee:b7:ac:6f:
                    bd:25:93:5b:3d:14:d7:36:49:38:49:0d:9c:2a:d5:
                    e0:5d:d7:df:8a:e3:3b:05:9b:87:fc:ec:0e:50:f7:
                    fe:8a:07:c7:3c:68:3d:a8:c9:ca:e5:e9:1b:bb:c0:
                    dc:c3:c6:6e:fe:27:5a:ae:8b:db:51:8c:9b:a0:e9:
                    e2:f8:d0:cd:e2:de:b3:e8:92:04:b7:c4:0b:03:e8:
                    30:9b:fd:78:ab:e7:19:88:0e:59:4e:c1:d3:95:93:
                    7a:6b:82:10:5b:4d:32:31:98:c5:64:0a:b8:82:19:
                    3e:f9:60:1c:c5:7a:b2:25:6d:87:ba:f7:bb:24:0b:
                    1b:d4:14:ca:7c:c3:7a:2d:c1:54:87:0b:58:a1:db:
                    03:ad:6d:cd:4b:bb:e4:93:90:49:68:0e:2d:d0:e4:
                    90:19:18:16:3a:e9:20:6e:34:73:fd:b0:6a:5e:64:
                    79:48:42:65:83:d1:ad:72:17:de:97:56:7a:0e:5f:
                    49:20:97:48:b0:10:8e:e4:c5:22:32:6e:80:32:71:
                    4f:48:89:3b:d0:c7:ce:54:36:fb:fb:75:60:4d:65:
                    52:57:78:14:85:e2:11:0e:e7:12:79:45:f5:99:41:
                    99:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:88:76:3D:DF:A5:22:E7:AF:6D:C0:56:14:21:E0:64:C7:B9:65:D9
            X509v3 Authority Key Identifier:
                keyid:68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/21e4deb7c045d58541c0c2cb59d4f568428cf750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/5a87907b9ef24cb59648e8fd0b029232a460cf62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:c2:12:d9:02:6d:36:44:4e:5e:fa:c2:89:74:77:f5:87:
         cb:65:d8:03:12:27:e4:a5:82:97:7f:84:b1:74:37:00:cd:e0:
         a2:50:b0:23:52:d7:fb:75:c9:fa:4e:41:25:42:de:ab:f9:d9:
         2d:88:d1:eb:cd:fe:f6:d7:8a:85:14:8c:c1:bb:98:50:38:cf:
         f8:94:c8:e9:38:a7:62:5d:a1:e6:ac:d5:ec:73:21:39:48:85:
         52:16:71:36:58:db:9c:c4:7b:35:5f:bc:cf:44:46:03:d6:b5:
         5a:12:17:fd:b8:9a:f9:5e:1a:70:9c:74:c9:b4:11:b9:ac:e0:
         da:10:96:0f:8e:6e:a3:33:f8:01:74:d1:26:de:2c:96:c3:77:
         58:cd:0e:5e:0d:98:95:9a:56:86:1c:af:8c:23:e1:7f:3e:44:
         40:b8:11:36:73:76:7b:b8:5e:d9:b1:01:41:84:61:94:44:03:
         27:a6:85:4a:07:cc:91:b3:ad:61:c3:10:80:07:c2:b7:d0:71:
         59:1e:2c:fa:76:32:0f:e9:54:89:33:07:13:f8:d9:bf:05:cd:
         a4:c9:75:39:45:b8:7b:67:49:42:c2:b1:ae:9c:40:91:dd:d9:
         54:66:4c:61:7c:a6:d7:a7:fb:e0:63:39:1f:32:14:c2:b9:b6:
         dd:f9:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org