Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa
File:                     b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa (raw, json)
Hash identifier:          hO/nHxXCwLFxt5xQPnY3vKgCCrYXiCkuLRcIenO9yRo=
Subject key identifier:   17:FD:2A:31:08:D3:25:58:4D:DD:6D:A5:09:29:1C:4A:B2:75:6F:15
Certificate issuer:       /CN=a431b12cbb45857ee37540244e236b5fe1793e26
Certificate serial:       25A1F6
Authority key identifier: 0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa
Signing time:             Fri 05 Jan 2024 13:36:31 +0000
ROA not before:           Fri 05 Jan 2024 13:36:29 +0000
ROA not after:            Mon 05 Jan 2026 13:36:29 +0000
asID:                     23487
IP address blocks:        45.238.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466294 (0x25a1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431b12cbb45857ee37540244e236b5fe1793e26
        Validity
            Not Before: Jan  5 13:36:29 2024 GMT
            Not After : Jan  5 13:36:29 2026 GMT
        Subject: CN=b2c09a88cd9f3ce08cf61240b1db032b8e8343b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:17:d2:7b:cf:f3:87:c7:40:f6:ed:3d:e7:
                    ef:22:c2:fa:27:cf:c9:df:c6:92:d2:54:51:8b:3b:
                    36:4e:fb:8a:88:91:be:55:ed:d9:c4:86:3a:dc:6d:
                    af:96:43:61:64:68:0f:3f:25:37:c7:85:b0:4d:2a:
                    a8:1a:ac:41:62:1a:5c:4e:a8:e0:c9:05:2f:17:c2:
                    80:5e:66:e8:8b:bb:17:9e:59:95:69:2b:57:d0:55:
                    ce:eb:71:a7:d9:7f:e4:63:20:78:55:9b:97:b6:f8:
                    46:3e:da:66:72:c6:f6:fd:ba:4a:40:77:a1:70:ec:
                    2b:81:f2:44:c6:24:d0:90:cd:1e:5c:03:14:fb:22:
                    da:75:67:20:e0:e6:00:e1:88:c5:20:03:b9:c9:be:
                    37:71:7f:93:fd:30:bf:db:c9:e0:cb:d5:ab:f4:03:
                    2b:32:34:b2:65:5d:53:82:8d:45:57:b7:09:6d:8c:
                    b7:85:88:6d:09:4f:1e:66:38:64:b7:44:b8:7d:07:
                    9d:02:38:d4:51:82:4a:73:6b:ca:90:4f:79:9c:57:
                    06:0d:fe:db:1a:be:a5:1d:c5:79:6b:77:bd:49:87:
                    ce:02:36:b9:cc:b4:6f:a8:ae:e2:93:eb:b5:bb:1e:
                    9a:b9:5f:d9:ae:35:20:c1:5a:69:5c:e9:52:4b:f4:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FD:2A:31:08:D3:25:58:4D:DD:6D:A5:09:29:1C:4A:B2:75:6F:15
            X509v3 Authority Key Identifier:
                keyid:0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/b2c09a88cd9f3ce08cf61240b1db032b8e8343b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d3:dd:b7:07:1d:39:c4:87:a8:22:32:74:0e:d8:b5:2d:11:
         2a:a5:88:a9:12:ec:3f:19:9e:b9:5b:f5:19:d1:1f:cd:40:42:
         52:44:dc:57:3b:9a:e7:8a:29:ac:96:81:11:23:32:f6:50:8c:
         ce:67:be:86:63:c3:46:9a:30:fa:f8:cc:59:8f:97:c5:60:e1:
         06:39:87:ab:ba:47:c3:4a:16:54:bc:6a:6d:d4:b0:25:27:08:
         82:f0:5f:cc:f9:63:77:10:7f:18:ad:c5:15:19:8d:aa:c8:a3:
         4b:6a:74:0c:85:c3:d8:a3:d8:c7:96:9f:d4:f9:6e:1f:6d:5a:
         5d:de:82:a7:a0:1b:81:b7:d1:cc:5d:6a:37:b5:e5:cc:74:d9:
         60:73:8d:b8:d6:bb:b1:1a:1a:e2:8d:1b:41:bc:0d:cf:f6:be:
         fb:bc:e6:b3:9b:0f:4c:f3:b9:82:d2:44:ec:4a:0e:69:bd:c9:
         08:dc:89:ad:ec:bf:7e:e7:81:94:dc:39:8b:35:a8:43:3e:7f:
         72:a2:67:80:5c:68:41:ce:96:f7:41:85:e3:be:17:5d:e5:61:
         57:cd:99:ac:20:05:d7:6f:4e:21:7f:88:c2:dc:48:0c:72:b4:
         33:19:b1:26:54:66:c5:90:5d:51:74:5f:e9:ae:a6:91:9f:0e:
         8d:d2:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org