Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/0362be8444d2168bcee78e27218aa78d70716d8d.roa
File:                     0362be8444d2168bcee78e27218aa78d70716d8d.roa (raw, json)
Hash identifier:          p2RmqdZQ8Kykw1A3rK4qcdrPxP1+N002bvEWjn+qeV4=
Subject key identifier:   77:34:3A:85:3A:F9:73:B3:EF:0A:57:61:F9:1F:05:ED:2C:10:00:E7
Certificate issuer:       /CN=40dd355863a64b49aaea56a333a078f4104009ff
Certificate serial:       136996
Authority key identifier: 30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/0362be8444d2168bcee78e27218aa78d70716d8d.roa
Signing time:             Wed 19 Jul 2023 13:19:53 +0000
ROA not before:           Tue 18 Jul 2023 13:19:53 +0000
ROA not after:            Sat 19 Jul 2025 13:19:53 +0000
asID:                     266754
IP address blocks:        45.232.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272214 (0x136996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40dd355863a64b49aaea56a333a078f4104009ff
        Validity
            Not Before: Jul 18 13:19:53 2023 GMT
            Not After : Jul 19 13:19:53 2025 GMT
        Subject: CN=0362be8444d2168bcee78e27218aa78d70716d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:5f:cd:6c:6d:46:2b:3e:a6:e5:11:82:36:
                    1e:42:a1:14:dd:0f:b0:95:d0:71:0f:2c:52:20:6d:
                    ee:cc:0d:81:a4:a5:cf:cc:b5:52:93:38:bf:d0:07:
                    1c:97:ff:b2:7c:61:b9:0d:6b:b8:4e:ab:cd:2a:0b:
                    b8:49:cf:43:17:4f:84:ad:77:6f:a2:d4:1a:8d:18:
                    f0:1b:6b:74:2a:17:d2:67:94:76:1d:70:1b:c2:6f:
                    b5:a3:90:55:08:97:8b:db:d6:f3:12:8b:91:ef:b8:
                    2f:18:19:b6:4b:de:00:f3:b5:e3:8f:f2:91:8b:96:
                    00:8c:a3:13:b7:fb:ed:59:39:93:15:5b:1e:5c:a9:
                    79:79:3f:d8:c7:a6:4b:39:9e:f6:b2:e2:63:4b:24:
                    0e:36:fc:85:0b:d3:e2:f9:1b:fc:9a:25:48:20:a8:
                    b2:14:44:b7:da:85:7f:2d:2b:d3:d4:b8:92:ef:1a:
                    62:5a:38:95:29:8a:0b:f0:4b:5a:d2:8b:8d:9c:32:
                    97:2b:f6:06:35:fc:1a:63:d0:10:fc:c1:22:b0:61:
                    06:62:ec:4e:52:84:1a:50:33:83:bb:ad:cb:36:d5:
                    f4:7d:c7:c5:29:6b:9f:10:46:28:65:95:58:7a:ce:
                    d7:1d:19:4e:e4:5f:6c:e9:40:97:be:12:96:c4:ae:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:3A:85:3A:F9:73:B3:EF:0A:57:61:F9:1F:05:ED:2C:10:00:E7
            X509v3 Authority Key Identifier:
                keyid:30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/0362be8444d2168bcee78e27218aa78d70716d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:d9:f1:ea:1b:33:e8:6b:d9:9b:a5:e0:43:45:47:24:dc:
         5d:93:14:20:10:f7:f9:6a:5d:c7:cd:12:bc:33:60:8a:60:3f:
         03:89:0b:2b:0e:26:90:84:e0:e6:0c:5b:ec:7a:eb:c4:74:9c:
         b7:d3:57:a7:57:b2:fd:52:3a:3f:86:4e:a3:59:e2:21:48:24:
         94:97:1b:2b:d0:ba:5c:4e:ee:c3:40:8e:48:c8:6b:3f:fa:21:
         41:48:ed:a7:26:a0:ce:08:40:1b:37:49:2f:1b:6f:47:a8:54:
         21:d3:b3:ff:2c:84:02:38:bc:1e:d0:fd:22:ba:17:ec:c1:83:
         a9:8b:3c:ef:ff:d3:fa:14:17:17:e3:76:64:f9:ff:2b:1c:ab:
         a8:5b:e2:a0:0e:99:dc:87:c1:da:46:5c:8d:16:64:23:73:4e:
         93:56:a8:cc:a6:cd:5e:25:46:3f:8c:93:45:71:e9:40:91:54:
         a1:dd:f9:27:07:0c:4b:ce:61:40:00:20:e5:0e:d5:17:3e:ea:
         40:10:1c:46:8e:99:99:e1:c9:91:3b:a4:0b:b8:44:fe:e6:eb:
         9e:46:d0:7f:89:e6:99:d8:eb:4e:7a:8a:f9:90:04:a3:7d:1b:
         4d:39:5e:23:39:18:91:69:49:f1:2f:01:d9:7f:b6:96:60:c2:
         d4:42:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org