Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa
File:                     cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa (raw, json)
Hash identifier:          iEBieiuV7yFOS0qXX75nJyvo0GjkhmX6vjAYXn1kTRE=
Subject key identifier:   6F:6B:69:87:B4:F7:0A:EB:32:50:E1:E2:AC:E0:29:4F:77:92:E5:E0
Certificate issuer:       /CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
Certificate serial:       79E8
Authority key identifier: 69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa
Signing time:             Mon 09 Oct 2023 01:50:35 +0000
ROA not before:           Sun 08 Oct 2023 01:50:35 +0000
ROA not after:            Thu 09 Oct 2025 01:50:35 +0000
asID:                     64153
IP address blocks:        45.68.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31208 (0x79e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
        Validity
            Not Before: Oct  8 01:50:35 2023 GMT
            Not After : Oct  9 01:50:35 2025 GMT
        Subject: CN=cdab3b5a0206e9bf91ec02c938bf98930f642cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:da:78:72:5a:b6:ac:e9:8d:b9:d1:ab:a1:
                    f0:ea:38:8f:40:14:0e:db:7f:64:d8:0c:44:7d:14:
                    d5:5d:c0:30:71:cf:15:16:50:8e:17:cc:f5:6f:7e:
                    5a:ed:08:43:d8:cd:d8:4b:10:17:8d:18:4d:3a:3c:
                    8c:23:5d:ed:14:57:ea:2e:50:b6:69:42:26:31:6e:
                    2f:2b:a9:c2:9d:11:fd:3f:7e:9d:70:4d:ab:b5:ed:
                    55:7b:9c:f5:0c:e7:8e:3b:fa:c8:7d:b3:7a:7a:4a:
                    59:8b:b6:93:e0:e2:12:a6:99:ea:d6:13:f7:9d:ee:
                    a0:fa:e1:3a:92:5c:8e:6a:e3:80:27:84:18:21:4a:
                    3f:2e:3e:81:00:ef:50:f9:b4:84:8f:22:e8:5d:5b:
                    92:b1:b6:c8:b5:45:23:73:9f:71:b7:07:c1:98:00:
                    90:79:b7:33:75:96:35:01:23:28:de:92:f1:40:0c:
                    7d:91:9d:0d:33:31:91:48:23:da:1f:bc:25:b0:7d:
                    1b:76:88:27:26:b5:cc:4c:16:f6:20:7c:68:a6:d4:
                    31:f2:80:de:d7:e4:df:29:b1:20:f5:6c:d6:51:cd:
                    74:92:47:49:7d:64:85:e6:14:90:36:a3:ad:e1:74:
                    94:30:da:56:8b:ab:29:fa:87:34:a7:c7:44:29:3b:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6B:69:87:B4:F7:0A:EB:32:50:E1:E2:AC:E0:29:4F:77:92:E5:E0
            X509v3 Authority Key Identifier:
                keyid:69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/cdab3b5a0206e9bf91ec02c938bf98930f642cf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/58f96ca109bc5993a1bf6e91b30fce649102e01e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:0e:60:3c:50:79:23:23:49:ec:89:3f:4a:12:f4:33:1c:
         f7:77:74:84:19:bc:52:ca:47:3b:09:c2:27:83:70:39:fe:4d:
         17:fe:0e:aa:87:ef:37:b3:f5:85:c5:4d:ca:32:f5:77:f0:64:
         cd:44:39:a3:86:56:26:ad:53:94:3b:45:ba:7e:93:32:e7:e6:
         71:26:cc:5e:8e:30:b9:d6:66:0e:8b:35:6d:57:0d:9d:22:8a:
         b6:46:1e:f0:cd:fe:28:c6:ef:95:93:78:1d:a3:db:a0:96:8c:
         54:82:9c:4f:50:fb:34:9b:15:80:2f:75:6f:03:88:a6:f7:5e:
         cc:ca:c0:a9:7e:4f:18:d5:00:13:cc:ae:84:d8:eb:12:aa:37:
         81:ed:01:cf:04:cc:d0:b3:43:69:ad:88:4d:fe:21:8c:24:5c:
         a1:f6:39:70:56:64:cd:7b:23:59:4e:a1:9f:8e:5d:90:82:15:
         94:d8:a7:75:f7:0d:af:84:e8:60:de:2a:59:e9:7c:46:91:e4:
         21:28:07:67:03:e9:b9:31:2c:3b:ec:a9:b5:95:4d:15:0e:b9:
         a5:1e:e2:67:77:00:18:08:01:c4:b7:ba:2a:df:38:62:d8:00:
         e8:50:a1:0b:87:4b:03:90:02:0f:dd:5c:66:ab:2b:63:1e:8f:
         1b:c1:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org