Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/756f6949c78beafc858e29a36745abbd86192beb.roa
File:                     756f6949c78beafc858e29a36745abbd86192beb.roa (raw, json)
Hash identifier:          f2VvkmcEICR+0v8bLk1EE5r5S4dJ34KFbGM0iet1yw8=
Subject key identifier:   18:61:B4:B4:89:31:74:AA:62:00:2D:C6:95:C1:F8:98:6D:1B:3E:B3
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       0CB444
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/756f6949c78beafc858e29a36745abbd86192beb.roa
Signing time:             Wed 24 Mar 2021 14:32:04 +0000
ROA not before:           Wed 24 Mar 2021 14:32:04 +0000
ROA not after:            Tue 24 Mar 2026 14:32:04 +0000
asID:                     265862
IP address blocks:        45.225.216.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832580 (0xcb444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Mar 24 14:32:04 2021 GMT
            Not After : Mar 24 14:32:04 2026 GMT
        Subject: CN=756f6949c78beafc858e29a36745abbd86192beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:de:e5:a6:81:4f:84:77:60:25:81:74:93:7e:
                    2a:fa:a6:e2:0c:90:c9:5e:87:c6:c5:c5:b4:b1:23:
                    ee:3f:cb:f0:5e:1d:6d:52:0b:32:84:bd:96:49:b4:
                    f9:39:44:a2:83:f4:e8:06:86:dc:d7:13:c2:8b:6a:
                    8d:19:7f:08:c7:32:c3:df:d8:4f:f9:4d:9f:bf:94:
                    6b:0b:96:65:d0:cd:ce:53:ae:c0:87:b4:72:1e:61:
                    68:2a:c2:b5:53:85:ef:34:49:92:1e:75:11:47:a5:
                    2b:96:d3:1f:40:1a:02:b4:eb:0a:1a:03:1f:1e:f6:
                    a5:bc:de:96:53:8f:cd:21:24:32:4b:84:d0:2e:a4:
                    36:d4:ab:2e:d7:9c:7a:e2:9e:31:63:aa:02:00:c7:
                    c5:d0:fa:2e:e7:79:1c:76:36:1e:9a:23:43:bd:bb:
                    be:74:87:e7:73:ce:41:4f:f4:77:d0:49:a7:a9:ff:
                    52:9e:54:c2:d1:a8:91:ec:6c:f4:81:82:31:cb:60:
                    57:1f:20:38:7e:fd:55:8d:74:ae:47:a4:c7:b2:14:
                    31:6d:97:5e:81:7e:00:1d:ad:a2:64:d8:02:0c:22:
                    2d:3b:f0:ad:31:2a:8d:d4:da:75:57:b0:6a:78:4c:
                    35:bd:98:ec:e3:a3:27:0b:cc:c4:24:58:4b:56:e0:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:B4:B4:89:31:74:AA:62:00:2D:C6:95:C1:F8:98:6D:1B:3E:B3
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/756f6949c78beafc858e29a36745abbd86192beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:27:13:b7:4e:eb:07:48:aa:9c:cd:d3:44:6e:57:88:8f:50:
         c6:58:47:0b:d4:cc:a3:14:26:80:31:57:60:4f:79:b1:45:96:
         26:d1:1e:44:11:a4:ad:ae:2e:7a:46:37:cb:5e:cb:46:fd:d8:
         3c:3c:f8:c6:64:1f:f7:f0:da:a3:53:c5:01:28:63:fc:3e:06:
         82:13:3e:c9:2d:27:27:a0:e1:94:29:b4:33:8c:83:7c:c7:fa:
         01:47:29:5d:5e:c6:61:e2:0e:4f:32:69:8a:7e:a1:b8:8b:6e:
         46:93:94:ae:3a:24:b3:49:b5:1e:54:a9:09:54:11:76:2e:c9:
         9a:f9:27:6c:30:6f:b4:06:60:e8:b3:87:2d:58:9e:2d:97:2b:
         21:15:8d:1d:00:c8:a3:56:fb:2a:5c:8c:11:85:eb:e7:a0:36:
         cd:3e:43:59:8a:a9:84:c9:90:cc:dc:15:0a:cf:6b:80:b9:24:
         8d:55:92:92:47:9f:ca:a8:5a:76:89:c4:a4:f5:67:77:78:92:
         ad:b7:4b:62:89:60:61:ba:89:62:55:e0:89:36:1c:d7:8c:1f:
         66:75:f9:cc:bc:a6:4d:74:db:54:7c:75:5b:a2:3d:e6:40:80:
         3d:6a:a5:7c:03:3d:39:20:04:7b:4f:7b:ae:93:9e:78:4a:b2:
         dd:a7:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org