Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa
File:                     3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa (raw, json)
Hash identifier:          eRFj/bvLK3yzJq8iyTfzvFt2zEz1yl9BCp+dp2IjKnI=
Subject key identifier:   C4:09:88:42:C3:C5:C6:55:4D:FB:6B:3B:71:31:F1:CE:36:63:A9:CF
Certificate issuer:       /CN=16cac609d27670b5b41abda1b583a7f15ce48526
Certificate serial:       19C483
Authority key identifier: 5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa
Signing time:             Fri 24 Mar 2023 08:31:39 +0000
ROA not before:           Thu 23 Mar 2023 08:31:39 +0000
ROA not after:            Sat 22 Mar 2025 08:31:39 +0000
asID:                     267680
IP address blocks:        45.163.36.0/24 maxlen: 24
                          45.163.37.0/24 maxlen: 24
                          45.163.38.0/24 maxlen: 24
                          45.163.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688707 (0x19c483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cac609d27670b5b41abda1b583a7f15ce48526
        Validity
            Not Before: Mar 23 08:31:39 2023 GMT
            Not After : Mar 22 08:31:39 2025 GMT
        Subject: CN=3820f2f02be01a88c17ba72c85bbbd0dd762c488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:3f:7e:e0:b4:13:b9:99:0b:cb:fd:4e:c2:
                    66:01:c2:25:52:62:f7:9b:65:cc:7c:05:97:ec:a2:
                    06:9f:92:1c:4c:ca:1d:ec:ad:7a:4c:db:b1:a1:fc:
                    b4:33:e4:83:e7:57:29:85:d3:6c:ae:ac:85:ba:e8:
                    46:5d:35:6d:af:46:d7:71:0a:49:15:58:82:ba:b0:
                    02:f5:94:c0:71:25:75:65:49:64:24:14:a0:f6:df:
                    d7:5c:8f:6f:eb:e4:77:40:f8:bd:4a:2e:c4:49:c0:
                    a4:8b:45:c4:92:a4:a9:64:d9:b4:3c:c8:10:4c:46:
                    5f:c2:c2:38:b5:49:40:ef:1c:06:10:f4:c4:16:e8:
                    75:48:ed:4b:d4:f4:02:d8:94:ea:44:d0:7d:3e:de:
                    6c:33:b8:04:b8:4b:a9:54:2c:90:fa:b9:f0:43:60:
                    25:db:14:2c:86:4a:f0:ba:19:9c:04:75:7d:5d:c2:
                    b5:54:03:47:7e:f6:89:a6:13:bb:d4:63:30:1c:f7:
                    87:e5:aa:0c:a8:a7:c9:95:19:65:f9:71:ec:66:44:
                    ff:38:c0:40:bf:0c:40:57:a2:40:65:d4:f1:12:94:
                    d8:19:79:8e:d8:24:dd:14:af:35:83:9f:08:58:2a:
                    ea:03:b4:a5:c4:57:0f:76:cc:22:97:d2:d2:fe:93:
                    9a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:88:42:C3:C5:C6:55:4D:FB:6B:3B:71:31:F1:CE:36:63:A9:CF
            X509v3 Authority Key Identifier:
                keyid:5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/3820f2f02be01a88c17ba72c85bbbd0dd762c488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/16cac609d27670b5b41abda1b583a7f15ce48526.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:24:3c:fc:4b:63:a7:2b:95:5c:24:6c:35:ec:7b:e7:57:
         ed:82:fb:5c:16:f2:b8:0d:dc:eb:b4:d4:44:f8:51:4b:92:45:
         84:f7:37:50:56:76:b9:bc:8e:5e:62:da:a7:f2:2d:14:b6:06:
         8e:ad:7b:c7:21:9b:a4:e2:98:51:15:f7:ea:36:0e:a1:c8:ba:
         ed:5c:27:e3:88:21:c9:5c:92:76:5b:c9:22:c9:8c:22:57:75:
         36:0a:3b:f7:e0:78:a7:67:fb:63:81:50:89:71:e0:d1:ee:af:
         a2:4f:1d:39:e0:ba:30:66:c5:7e:34:a2:7e:13:32:76:15:63:
         d2:0b:c7:12:ca:70:de:87:b0:40:0a:6c:e6:9b:fa:ed:5a:4b:
         63:00:1c:18:b7:be:55:cb:28:40:29:8b:b0:d0:79:7b:6c:44:
         4e:a8:76:27:47:a8:59:dc:98:d0:90:d5:97:46:00:f8:6c:f5:
         98:ce:3b:b3:e7:a9:ee:51:e1:1a:12:f8:d8:77:71:0b:ad:15:
         85:28:8f:db:24:87:cd:78:30:16:d4:d9:81:af:3c:ac:5d:96:
         11:ca:e2:a2:76:54:a8:ec:00:ab:b1:d9:f4:7b:41:20:ef:49:
         39:86:e4:69:aa:7e:67:2b:6e:53:fd:d8:cf:10:9e:62:f7:48:
         ce:c8:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org