Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa
File:                     97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa (raw, json)
Hash identifier:          6L73M40Sx1MioIyFlpa/jRCb/o88kxoexX+n1/Gf81I=
Subject key identifier:   71:CD:7A:87:0A:19:81:11:DC:1E:BA:B0:60:60:B7:25:23:1B:FD:6B
Certificate issuer:       /CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
Certificate serial:       21A76E
Authority key identifier: 78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa
Signing time:             Wed 05 Jul 2023 01:47:43 +0000
ROA not before:           Tue 04 Jul 2023 01:47:43 +0000
ROA not after:            Sat 05 Jul 2025 01:47:43 +0000
asID:                     52468
IP address blocks:        45.71.184.0/23 maxlen: 23
                          45.71.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205550 (0x21a76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
        Validity
            Not Before: Jul  4 01:47:43 2023 GMT
            Not After : Jul  5 01:47:43 2025 GMT
        Subject: CN=97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:e0:67:bc:63:02:31:d0:7a:ad:3d:bc:88:
                    bb:bd:b8:5b:32:81:e4:8a:34:fd:61:a0:8e:5a:a3:
                    cd:eb:af:1a:d8:c9:57:65:d4:a6:00:30:19:83:c8:
                    10:be:4c:2e:81:f1:47:78:27:00:ad:4f:ff:b0:33:
                    ab:0e:c9:18:29:f6:39:a8:7b:c4:d4:9c:ef:29:b5:
                    4a:66:a1:9f:85:48:3e:3f:ad:a3:f4:de:21:9c:e7:
                    aa:74:2c:db:5e:93:df:57:0c:bd:6c:0b:fa:47:b5:
                    02:30:8f:f4:f5:e5:98:f5:0d:90:73:57:9a:85:b8:
                    0a:33:d6:cb:ce:2a:47:4b:ee:53:70:46:fb:cf:8e:
                    78:3e:d3:8b:a2:ab:92:8a:2e:33:ec:ec:01:6f:bb:
                    36:ad:eb:f1:bf:95:1e:c4:d8:79:93:f5:af:1f:16:
                    e4:67:b4:d0:1e:d5:8f:16:5d:76:74:07:62:43:56:
                    93:2e:05:0a:df:0c:60:40:01:b9:a5:71:3a:62:27:
                    bb:8b:26:c4:4e:3c:91:ed:bb:db:24:0f:77:7e:e7:
                    ec:63:67:11:88:e8:12:43:08:61:f3:9f:48:17:d7:
                    3b:d6:17:44:14:59:32:14:b0:1c:e1:0c:67:cb:42:
                    85:a9:e7:e5:90:0b:e9:0e:fb:61:56:df:7c:b1:fd:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CD:7A:87:0A:19:81:11:DC:1E:BA:B0:60:60:B7:25:23:1B:FD:6B
            X509v3 Authority Key Identifier:
                keyid:78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/c63b81088b8ee19ee848e7230778ed21342ec0fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:ea:b3:dc:06:4f:69:38:41:4b:f5:b4:22:b4:03:76:39:
         b7:a3:04:d1:29:d8:ce:14:79:ce:65:94:4b:73:6a:3a:3c:51:
         bc:49:54:6f:83:83:18:f3:0f:0a:5b:20:74:cf:df:ab:84:61:
         48:08:d7:08:b3:16:c4:cf:68:39:c8:b4:33:0c:e4:2c:16:0e:
         65:78:59:6c:04:63:6f:d3:5c:db:f9:82:22:9a:bf:30:f4:7b:
         50:96:39:44:db:23:43:c3:5c:09:22:f8:76:31:49:c2:ec:b8:
         0b:98:17:c6:c9:c7:3a:bf:35:47:05:f3:45:7f:4c:5e:a1:69:
         bd:64:2b:5d:1f:5a:3a:cb:70:30:ba:03:a9:2e:0b:63:7b:cb:
         94:92:c1:b0:45:df:5d:e4:0a:a0:01:f3:87:85:2f:c9:35:8b:
         2b:1a:58:73:71:26:75:6a:88:3e:b5:3c:a3:68:fd:18:c6:33:
         9c:34:dc:a0:c6:c3:00:65:8e:ea:bd:1e:53:37:44:fe:37:70:
         58:56:63:f4:e9:e2:95:e3:1f:7b:0e:86:10:98:64:1a:19:c4:
         72:34:d7:4c:de:4b:eb:60:0d:fd:d6:ec:45:67:a6:24:a5:62:
         94:d2:67:27:d4:25:29:c2:69:bf:91:52:1e:7b:52:73:49:52:
         33:3f:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org