Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/bcaa98f9471178f2c0aec39af4880144dfb196e4.roa
File:                     bcaa98f9471178f2c0aec39af4880144dfb196e4.roa (raw, json)
Hash identifier:          na4sAuSKCqX99ONmpGQ6xV3Cl6Ov4U8NANd0VNHQ8KI=
Subject key identifier:   57:FD:72:B5:B3:4A:81:CD:EF:A9:15:4D:6F:11:62:8D:D8:5C:C7:29
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       117C0B
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/bcaa98f9471178f2c0aec39af4880144dfb196e4.roa
Signing time:             Mon 25 Oct 2021 19:08:35 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145867 (0x117c0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=bcaa98f9471178f2c0aec39af4880144dfb196e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:a8:3c:ca:1d:f7:a8:8d:86:ae:fe:3e:59:
                    f1:00:7b:30:47:dd:bd:e1:4b:16:79:47:54:08:10:
                    ba:6e:70:71:44:f2:ec:bc:c7:8f:7a:45:cd:d9:b7:
                    ec:d8:ef:f5:72:de:15:50:3f:6e:bc:5a:9b:ec:0c:
                    b3:e8:07:6e:c2:a6:3e:bc:91:cd:68:5a:0e:68:90:
                    e9:8c:c6:57:45:2c:09:b9:e9:45:77:9f:95:a4:f4:
                    0d:80:34:bf:37:16:70:d9:c4:b5:1a:af:f2:17:2a:
                    8f:e8:54:fa:7a:dc:ee:d6:7d:af:7a:64:36:75:d4:
                    ad:e7:35:cd:c0:1e:9d:bc:5d:87:95:35:6d:49:02:
                    5e:03:98:13:49:f6:eb:00:c1:b2:77:82:d8:f7:df:
                    c1:53:37:df:e4:77:d3:5b:3f:4b:59:52:c8:88:3a:
                    7c:7a:21:62:41:e7:f9:28:19:10:7d:ac:c1:2e:96:
                    e3:80:87:25:11:36:06:d1:4e:b7:60:eb:08:e8:bf:
                    b9:a9:e2:f3:dd:86:5c:1f:da:c2:14:3f:49:dd:ea:
                    e5:df:7e:84:6f:85:96:6e:c4:16:eb:92:2e:33:b3:
                    4a:ab:59:15:c1:d2:7e:c9:ea:47:00:39:d8:df:5e:
                    05:55:ce:79:9c:38:33:81:a2:39:5c:40:79:1d:11:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:72:B5:B3:4A:81:CD:EF:A9:15:4D:6F:11:62:8D:D8:5C:C7:29
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/bcaa98f9471178f2c0aec39af4880144dfb196e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:e5:8b:3f:e7:f1:bc:91:2d:32:5c:f5:da:da:85:c4:bc:
         0d:23:27:0a:17:96:16:0c:c3:5a:81:2a:f7:56:55:0b:44:e0:
         c0:d9:56:66:f3:e3:00:46:33:9e:77:86:c3:7b:b8:89:90:18:
         7c:0f:10:2b:3c:dd:ce:95:74:7d:42:a3:a0:8d:a1:b2:4e:75:
         d8:ed:c6:d2:7a:d6:5d:14:6b:f8:aa:34:04:74:92:45:c4:0f:
         15:64:2b:24:20:33:c5:c3:26:70:7e:e9:c3:d7:d9:1f:16:64:
         0e:ca:95:9a:1f:82:00:78:65:56:65:ab:e8:4a:ae:ae:a5:13:
         d5:31:1c:22:83:c6:e8:6e:fa:28:71:df:2f:a2:a9:9f:39:f7:
         33:99:bc:ae:08:98:fb:71:ef:e8:18:34:d4:27:bf:53:54:70:
         c2:fe:02:68:df:a6:66:2b:f9:36:00:c0:17:10:aa:2c:5c:bc:
         55:5b:5a:0f:7f:fe:14:50:74:f1:69:db:e4:a9:01:1b:a2:16:
         97:d6:71:3e:16:cf:86:f0:21:df:c3:a1:00:4f:0b:c0:1e:ba:
         de:b7:f7:a6:8c:fe:b9:d1:af:a6:63:0d:07:75:0b:90:2a:08:
         9a:c7:29:d0:91:97:92:38:34:56:e3:ae:74:be:6c:3b:bd:9c:
         22:bd:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org