Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/8a65bfadc89f81e083a72f90c1ded856407f0dd7.roa
File:                     8a65bfadc89f81e083a72f90c1ded856407f0dd7.roa (raw, json)
Hash identifier:          ckZfOviTFlxE7eGhBoK8kLsMhcobCrtB3Q5XX1OFeuI=
Subject key identifier:   6E:ED:62:95:87:64:83:68:31:B7:CF:3D:E6:16:02:C5:7F:13:5D:4B
Certificate issuer:       /CN=401380c90d8fea0a750a73c0fb6afea72dbcc30c
Certificate serial:       1891
Authority key identifier: DC:BD:BE:5E:A1:9D:9C:6E:CC:17:7D:43:F0:40:5D:40:83:CA:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/401380c90d8fea0a750a73c0fb6afea72dbcc30c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/8a65bfadc89f81e083a72f90c1ded856407f0dd7.roa
Signing time:             Sun 25 Feb 2024 04:27:30 +0000
ROA not before:           Sun 25 Feb 2024 04:27:29 +0000
ROA not after:            Wed 25 Feb 2026 04:27:29 +0000
asID:                     273186
IP address blocks:        45.230.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6289 (0x1891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401380c90d8fea0a750a73c0fb6afea72dbcc30c
        Validity
            Not Before: Feb 25 04:27:29 2024 GMT
            Not After : Feb 25 04:27:29 2026 GMT
        Subject: CN=8a65bfadc89f81e083a72f90c1ded856407f0dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:ca:90:3d:55:61:03:02:10:cb:b1:65:0a:
                    f2:94:bf:c9:39:93:6f:6b:fa:39:0c:40:17:14:a8:
                    fd:11:22:6a:d2:52:28:13:90:57:53:6d:d6:11:e7:
                    73:4e:e8:0e:ee:c2:de:f8:da:64:e4:92:d3:3a:0a:
                    4f:eb:ae:26:0f:1d:41:21:28:a3:a6:42:4c:07:d0:
                    cf:f5:e9:01:85:15:eb:53:af:fe:5b:f3:db:e9:8b:
                    9b:9d:bd:29:93:6c:db:4c:dd:56:4e:47:34:33:fe:
                    2e:db:f4:67:58:1b:82:9f:65:ee:a4:aa:15:65:ca:
                    f9:55:2a:1a:4b:0d:2f:76:aa:d4:0e:2d:e0:d5:c5:
                    60:db:44:f2:a6:da:0e:04:c6:53:b4:b6:fe:89:99:
                    fd:a3:b1:a4:a4:3e:a9:0b:88:1f:0e:fe:9a:ac:15:
                    fd:83:cc:ee:ae:3a:fb:85:3a:81:36:4e:63:0b:68:
                    b2:91:63:3b:50:fd:09:19:79:9d:70:ff:ae:6c:95:
                    30:71:bf:fb:b9:26:dd:fe:9b:ab:24:9f:4a:ab:c9:
                    5c:11:f3:c9:bc:23:7b:28:84:c9:28:98:9c:d7:09:
                    a4:bb:95:d2:36:42:ce:68:9e:86:92:07:d8:a2:9a:
                    d6:03:8b:ba:83:d8:04:6f:22:24:ce:a2:14:a6:79:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:62:95:87:64:83:68:31:B7:CF:3D:E6:16:02:C5:7F:13:5D:4B
            X509v3 Authority Key Identifier:
                keyid:DC:BD:BE:5E:A1:9D:9C:6E:CC:17:7D:43:F0:40:5D:40:83:CA:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/401380c90d8fea0a750a73c0fb6afea72dbcc30c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/8a65bfadc89f81e083a72f90c1ded856407f0dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/401380c90d8fea0a750a73c0fb6afea72dbcc30c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:de:61:7b:eb:00:26:2d:c1:2c:02:8f:a1:0e:5b:25:a0:85:
         b0:a2:8d:a5:8a:0a:8c:40:b4:3c:1a:68:04:36:4a:83:c3:0b:
         85:b7:2d:78:2c:c7:5d:31:d1:25:17:44:aa:91:7a:13:2a:64:
         c3:77:f5:68:33:ba:9c:19:6b:2f:63:23:7a:1c:c7:2b:9e:46:
         c8:8c:ac:19:83:e2:72:ee:14:78:38:f9:05:53:c7:21:46:5f:
         65:68:eb:72:72:b0:e2:42:a2:7d:c3:31:1d:67:72:49:4d:0d:
         bd:66:7f:41:9c:90:fd:49:df:9b:e1:4d:b9:3b:3f:a2:d7:6e:
         dc:9a:76:01:56:42:16:85:d0:14:75:20:d8:d3:af:cc:c8:ff:
         89:0d:8b:ba:7b:f1:1c:f5:8c:2f:cb:b8:0d:dd:5d:ba:a7:1e:
         1f:53:fa:c6:1d:10:7c:5b:b9:0c:af:64:93:28:3f:6b:fb:bd:
         fa:35:0f:07:12:48:f0:43:4f:0f:95:a2:10:62:9d:d6:11:61:
         49:d5:83:79:2f:49:8f:01:2b:ae:9b:45:9f:8e:a3:56:e2:e2:
         29:01:cd:9e:af:1c:31:ac:31:76:d4:f4:05:78:77:2b:39:99:
         c3:27:df:ef:24:32:2f:d7:a8:f2:2c:e0:52:f4:78:e9:e0:ac:
         5f:25:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org