Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa
File:                     f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa (raw, json)
Hash identifier:          EjMVEVNahKHmaL4741y+8nxgmeYspr6W53XsLsTYz84=
Subject key identifier:   D1:F9:58:C8:A3:63:35:49:2A:29:E9:57:F3:22:DF:C5:22:B9:1D:80
Certificate issuer:       /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial:       496B
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa
Signing time:             Sun 08 Oct 2023 00:25:02 +0000
ROA not before:           Sat 07 Oct 2023 00:25:02 +0000
ROA not after:            Wed 08 Oct 2025 00:25:02 +0000
asID:                     28435
IP address blocks:        45.189.148.0/22 maxlen: 22
                          45.189.148.0/23 maxlen: 23
                          45.189.150.0/23 maxlen: 23
                          45.189.148.0/24 maxlen: 24
                          45.189.149.0/24 maxlen: 24
                          45.189.150.0/24 maxlen: 24
                          45.189.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18795 (0x496b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
        Validity
            Not Before: Oct  7 00:25:02 2023 GMT
            Not After : Oct  8 00:25:02 2025 GMT
        Subject: CN=f942fd5dc09be47a6aec372f983a5e822d7b5ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:f3:ef:24:02:74:9a:87:4f:23:ad:fb:31:
                    57:15:af:bd:8e:62:ee:1d:49:4e:72:f8:96:06:f8:
                    4c:1c:8b:25:38:83:70:79:57:c5:4b:98:b3:63:03:
                    08:d8:33:71:3d:c9:52:16:02:ef:21:d6:57:89:3d:
                    93:f7:03:fe:fd:95:66:94:a0:6e:7f:83:ec:de:6b:
                    df:c4:c6:02:66:48:24:3d:a5:10:72:01:fe:e6:4b:
                    3f:39:91:83:8d:b7:2c:96:16:ea:87:10:2c:22:62:
                    6f:5e:3d:9f:a3:0d:32:59:52:81:18:45:2f:3a:34:
                    92:5e:d0:e8:ff:c3:75:48:08:37:ff:ef:07:46:84:
                    8a:78:0c:eb:c4:58:b1:cb:1d:45:cd:74:e2:42:f3:
                    e4:87:63:35:90:fc:bc:3a:00:71:ea:8f:1b:73:ae:
                    76:1b:2a:a1:c0:2e:fe:6d:e1:d1:43:86:41:15:25:
                    bd:17:53:c4:ae:4d:2b:b7:a9:86:ac:a0:d1:6d:a8:
                    3e:a7:18:5f:e2:85:c1:b8:1b:67:9c:c9:23:c5:f8:
                    c9:38:a9:09:0b:db:ec:8c:43:72:b3:8a:a8:bd:96:
                    f7:c5:1f:66:a4:17:ed:e9:84:74:33:dd:42:7c:3a:
                    74:c5:0d:de:3c:2e:f7:81:0b:ad:8b:7a:8c:62:bf:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:58:C8:A3:63:35:49:2A:29:E9:57:F3:22:DF:C5:22:B9:1D:80
            X509v3 Authority Key Identifier:
                keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/f942fd5dc09be47a6aec372f983a5e822d7b5ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:70:83:aa:cf:e5:07:82:9f:42:86:d1:d5:a7:e0:dc:bd:75:
         a3:7d:f5:48:60:a7:d8:72:ef:c6:f8:10:e6:68:87:88:70:87:
         28:85:d5:2c:1d:88:1b:0b:86:dd:89:d8:cd:de:26:68:6b:36:
         ce:12:82:a7:58:a8:06:c1:97:5b:e4:5f:ff:dd:7f:4f:f2:7b:
         d7:2e:c9:20:22:87:c7:92:ff:d0:b0:6b:ce:1c:e6:9b:ed:60:
         8c:42:06:29:0f:94:f7:83:f7:39:7d:7e:6a:56:bc:e0:42:2b:
         49:68:be:02:20:f5:fa:d2:b9:ff:cd:b7:1e:00:45:da:01:66:
         25:ee:bd:2f:16:39:24:df:5c:4f:96:e8:00:5a:44:30:ab:af:
         04:de:bc:f1:d0:f0:51:92:19:6c:e4:88:a4:7a:83:49:f0:3c:
         ce:0f:74:da:b0:bf:22:16:0c:11:9c:1e:53:09:32:2d:a8:e2:
         31:8d:38:2f:bc:4c:41:20:2a:08:b4:ac:c6:a3:02:4b:88:74:
         2e:44:2e:29:82:2c:1c:50:58:f3:12:d4:03:29:78:a8:d2:bf:
         10:74:a9:61:ac:aa:3c:ad:b3:bd:e2:b5:3c:f8:6c:7b:08:cd:
         ef:42:44:b4:b8:e1:1b:d7:bb:23:c7:6f:f1:79:cb:c3:21:40:
         d5:a9:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org