Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/c9a76b346ceefcb2e5172805d0f297fba373d724.roa
File:                     c9a76b346ceefcb2e5172805d0f297fba373d724.roa (raw, json)
Hash identifier:          vN0+Im4GZeNCbADUWLrDNkb0ZoKi/MJ8k28+WtxYj6Q=
Subject key identifier:   90:1F:63:B2:7F:9F:5D:1F:A8:D8:8F:B5:C6:7E:45:EB:B5:90:FC:03
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       0E3F1D
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/c9a76b346ceefcb2e5172805d0f297fba373d724.roa
Signing time:             Wed 24 Mar 2021 14:40:13 +0000
ROA not before:           Wed 24 Mar 2021 14:40:13 +0000
ROA not after:            Tue 24 Mar 2026 14:40:13 +0000
asID:                     266880
IP address blocks:        45.225.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933661 (0xe3f1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Mar 24 14:40:13 2021 GMT
            Not After : Mar 24 14:40:13 2026 GMT
        Subject: CN=c9a76b346ceefcb2e5172805d0f297fba373d724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:d8:4e:d7:de:9f:46:77:4a:46:2e:f1:7a:
                    f9:3e:1d:94:96:a3:7c:35:27:c6:fc:db:69:a8:c1:
                    d5:20:8d:0c:d1:0f:b9:3f:e2:21:f3:dd:1d:bb:4d:
                    ea:4c:ce:2d:e0:f7:11:c1:71:2a:c8:9a:c8:ea:95:
                    f6:f5:0c:d5:ee:c0:52:1c:57:11:e0:bd:3b:43:d0:
                    de:ce:57:09:a9:57:42:84:57:0d:00:19:31:9b:7b:
                    75:e5:00:f6:cd:4f:d5:46:36:10:07:24:ed:f0:e0:
                    05:18:6b:7a:40:6b:29:fb:d7:6c:45:5a:2f:bd:65:
                    71:60:fe:8f:36:4d:80:ff:16:86:49:20:c7:ce:8c:
                    1d:96:a0:ad:33:77:60:b1:78:a6:02:90:28:bf:90:
                    2c:89:d1:8e:fc:c1:c8:a2:ce:68:11:54:64:58:32:
                    bc:03:c2:d4:da:5d:5e:e9:0d:82:27:db:50:66:77:
                    7f:06:9b:f4:b8:03:a7:fb:79:b4:04:a8:2a:4c:4f:
                    fe:04:e2:51:57:78:b6:0b:bd:de:b1:d9:ce:68:57:
                    61:db:cf:b0:f9:04:08:af:22:af:d7:6f:c2:27:56:
                    e4:c8:39:73:a6:68:04:6c:ef:7f:fb:37:97:ac:54:
                    1d:1b:56:91:60:3a:f5:a7:73:da:05:c2:11:f1:69:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1F:63:B2:7F:9F:5D:1F:A8:D8:8F:B5:C6:7E:45:EB:B5:90:FC:03
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/c9a76b346ceefcb2e5172805d0f297fba373d724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:c8:77:61:55:47:28:1d:52:c7:c0:d4:a8:10:2d:05:1d:
         9a:30:33:be:2c:06:dd:0f:cb:e5:cf:98:fd:e4:1a:12:11:c9:
         f0:ec:e7:dd:d0:9d:1e:85:43:44:8a:bb:9a:8a:62:13:63:62:
         3d:f9:e7:30:1e:e9:21:7f:84:bc:f5:0b:4f:30:76:24:e6:ee:
         02:d1:8f:eb:34:22:18:8b:4b:03:01:2a:83:d6:7c:1c:dd:29:
         f1:f4:6c:8c:d3:40:3e:fa:d1:f5:04:07:b7:ac:7f:b7:c7:47:
         8e:1c:e9:ee:be:37:85:a6:2f:e5:97:9a:4b:f8:5e:00:0c:1a:
         60:b0:f9:6d:98:01:74:c9:49:3c:c2:c6:c8:74:b0:12:45:61:
         64:f3:6f:49:71:cf:4f:12:82:8b:f8:0a:3f:9d:d4:ec:1c:d1:
         33:de:3c:f3:fb:e6:49:51:6e:69:bf:77:cb:f4:77:94:fa:da:
         f0:51:14:e0:e7:e5:f5:26:ee:f7:a7:df:aa:32:9c:7e:17:5f:
         87:be:88:eb:35:0b:04:68:04:45:57:1d:f5:c7:76:2d:dd:e8:
         ba:33:06:f8:f0:0e:4c:e4:9f:52:1a:73:dc:a4:06:1a:ad:03:
         14:2e:b9:97:3f:e3:10:8f:89:12:9b:be:19:1a:91:26:e2:19:
         19:41:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org