Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/53002133ad071b3937d38a30b272893c68ec34e9.roa
File:                     53002133ad071b3937d38a30b272893c68ec34e9.roa (raw, json)
Hash identifier:          QLyni5SY/QW/XM0sUdsN+32U7HIic1Gt0M5KE/rPrJQ=
Subject key identifier:   D2:00:6C:92:91:83:CF:56:CB:03:87:E8:46:B0:96:0F:71:0D:39:34
Certificate issuer:       /CN=14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25
Certificate serial:       1D73BD
Authority key identifier: 8C:B1:EF:0B:57:86:0F:EE:B9:7A:AD:63:B7:07:CF:4B:AE:61:E7:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/53002133ad071b3937d38a30b272893c68ec34e9.roa
Signing time:             Tue 28 Feb 2023 16:49:41 +0000
ROA not before:           Tue 23 Mar 2021 14:29:48 +0000
ROA not after:            Tue 24 Mar 2026 14:29:48 +0000
asID:                     266837
IP address blocks:        45.238.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930173 (0x1d73bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25
        Validity
            Not Before: Mar 23 14:29:48 2021 GMT
            Not After : Mar 24 14:29:48 2026 GMT
        Subject: CN=53002133ad071b3937d38a30b272893c68ec34e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:26:ba:29:0f:36:3e:0c:35:a7:f4:00:6b:
                    39:2b:0d:3d:71:fb:28:7d:fa:15:03:35:b7:6b:7b:
                    74:e4:a5:24:f7:db:7e:1c:65:0b:bc:ed:83:82:14:
                    38:12:b2:87:6f:2a:9b:2d:dd:cf:b0:ca:89:97:11:
                    6f:ce:07:aa:53:2c:0f:4e:11:ef:ed:ec:5b:4a:14:
                    a1:cb:82:5e:88:9e:d2:d4:dd:bc:12:d7:04:00:d6:
                    b3:b0:d2:6b:11:21:34:32:61:70:c6:a4:75:88:2d:
                    e6:96:51:0e:32:92:bb:23:94:69:54:d4:d5:c9:d6:
                    92:9d:66:62:fa:6a:41:4d:3b:16:04:1d:ad:43:ec:
                    17:96:8e:4d:cd:1b:41:5f:26:c8:e4:10:5f:ac:61:
                    5c:5b:bd:be:98:d0:85:64:c9:d1:4b:2b:76:34:ba:
                    c2:f2:7b:9b:3d:79:32:a8:1e:2a:ea:5d:5d:43:07:
                    d2:46:1d:61:6e:33:e7:4e:e0:af:88:67:17:91:6f:
                    d7:43:15:76:97:53:ef:cc:32:29:08:30:f3:7c:25:
                    06:ef:a8:09:e9:a9:c6:e8:30:8c:a5:dd:d3:58:a9:
                    64:31:07:63:f5:7a:6d:f8:92:88:7d:a6:27:c4:11:
                    de:67:71:7c:2d:3f:c7:84:4c:0a:ac:a4:a7:00:9e:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:6C:92:91:83:CF:56:CB:03:87:E8:46:B0:96:0F:71:0D:39:34
            X509v3 Authority Key Identifier:
                keyid:8C:B1:EF:0B:57:86:0F:EE:B9:7A:AD:63:B7:07:CF:4B:AE:61:E7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/53002133ad071b3937d38a30b272893c68ec34e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:59:5a:69:47:18:26:84:db:07:fd:00:cc:a8:32:d9:f0:
         1d:8c:0e:1e:b8:3e:05:60:32:44:6e:3f:9f:8f:81:a1:2e:75:
         67:70:66:ba:4d:06:f3:65:06:70:be:8a:f2:d7:d4:cd:52:40:
         eb:c5:3b:2c:a5:b8:53:e0:88:df:58:0c:5e:87:c3:f5:8a:99:
         92:6a:8d:2a:3c:26:71:8e:35:2f:94:38:c4:b7:d9:eb:98:8e:
         fe:91:30:f4:e0:39:bc:30:6b:a5:b6:a2:7e:e3:a2:e9:44:a7:
         e5:1e:13:8a:3f:0a:a2:c5:20:c7:ee:52:de:41:2b:20:44:81:
         7d:39:73:0c:66:83:e2:35:b9:ab:3e:c1:52:06:98:82:d0:04:
         82:45:09:48:72:da:84:5c:00:94:1a:de:00:e7:18:4f:4e:f3:
         ff:6e:01:fc:03:49:79:12:2c:49:9a:c8:fd:dc:8f:9e:fa:62:
         52:94:cc:ca:17:84:35:cc:0a:6c:9a:65:dc:8f:17:1c:26:7a:
         f5:87:6a:87:e7:50:d0:4b:83:c6:84:46:5d:fe:d2:26:26:29:
         ee:e4:63:10:e3:1a:b4:ba:42:f0:bc:05:c3:0f:25:bd:8b:02:
         dd:28:cb:2f:26:07:d4:41:c8:c8:62:2f:e3:17:f4:2e:f2:c8:
         e8:dc:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org