Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/fefc5ed2f94255d03b5267bf24f11050babef686.roa
File:                     fefc5ed2f94255d03b5267bf24f11050babef686.roa (raw, json)
Hash identifier:          ZhMdaSK/uGMC7AWvHtvkaKvqyH4IphEvB4kwS9rLcHQ=
Subject key identifier:   9C:3F:10:86:0A:9B:E9:CD:7F:38:CC:DE:19:E9:9C:4F:35:13:CE:16
Certificate issuer:       /CN=14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25
Certificate serial:       1D7B86
Authority key identifier: 8C:B1:EF:0B:57:86:0F:EE:B9:7A:AD:63:B7:07:CF:4B:AE:61:E7:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/fefc5ed2f94255d03b5267bf24f11050babef686.roa
Signing time:             Tue 28 Feb 2023 17:52:42 +0000
ROA not before:           Mon 22 Mar 2021 14:29:48 +0000
ROA not after:            Tue 24 Mar 2026 14:29:48 +0000
asID:                     266837
IP address blocks:        45.238.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932166 (0x1d7b86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25
        Validity
            Not Before: Mar 22 14:29:48 2021 GMT
            Not After : Mar 24 14:29:48 2026 GMT
        Subject: CN=fefc5ed2f94255d03b5267bf24f11050babef686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:3a:71:ae:23:4a:dd:0b:f4:1b:77:aa:fa:
                    12:6c:00:41:aa:00:bd:36:c7:c7:42:62:3e:81:00:
                    22:1c:9b:e0:74:f6:e2:78:e4:7c:df:79:f5:14:15:
                    20:ae:e6:31:59:fe:78:1d:73:10:0d:93:b9:2c:ab:
                    57:98:be:b8:b3:21:37:74:c5:8a:64:32:fa:2d:37:
                    69:0f:e6:cc:24:0e:82:2a:eb:32:35:60:3b:b8:fe:
                    82:f4:04:36:80:f4:db:d4:46:73:22:e6:eb:63:9c:
                    24:c0:d8:29:81:f2:af:b0:7b:96:f2:b4:1f:70:cb:
                    ec:c7:09:d4:40:1b:75:c6:b9:21:b8:73:2e:52:a6:
                    27:85:88:45:a7:cd:60:38:43:5f:50:12:12:da:5a:
                    e0:97:86:9b:e9:43:b0:8d:cb:7a:34:57:87:56:34:
                    99:c3:ee:6f:8b:03:97:46:c7:b1:7d:65:86:af:3b:
                    7f:38:47:3f:34:b0:45:34:57:2b:88:98:c7:43:2f:
                    7c:b7:53:0e:de:e7:9d:5e:d7:a5:16:1a:fd:ce:5f:
                    99:b3:2e:9f:46:74:75:aa:bd:9b:4e:63:44:0c:96:
                    4e:48:07:8f:96:1c:fe:63:ab:c7:5b:06:53:9e:12:
                    19:af:5a:53:64:80:a6:b6:89:13:57:2a:1b:2d:f9:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:10:86:0A:9B:E9:CD:7F:38:CC:DE:19:E9:9C:4F:35:13:CE:16
            X509v3 Authority Key Identifier:
                keyid:8C:B1:EF:0B:57:86:0F:EE:B9:7A:AD:63:B7:07:CF:4B:AE:61:E7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/fefc5ed2f94255d03b5267bf24f11050babef686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c7cad75-fbcc-4805-b124-9f95529a26bd/14950cdf2c6b3df6f56cbcba5ef080a14fbbeb25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:16:84:c1:4f:ac:0a:67:7c:c6:bc:47:7f:90:37:d5:3f:24:
         0b:fd:7e:ab:28:4c:e3:75:19:dc:ac:f9:0e:29:42:1d:cb:71:
         0a:99:c0:9a:57:3b:ec:bc:ba:cc:18:b6:ec:82:3f:14:ba:79:
         9d:4f:fb:d2:6e:72:15:17:d9:37:d7:14:3c:9c:fa:cd:cf:e7:
         39:ee:57:94:12:5b:87:7a:f4:40:81:13:bf:bb:33:8a:9a:3b:
         b8:51:d5:a5:6a:a0:20:f2:91:96:54:ef:2f:07:2f:cc:8a:8b:
         91:b7:62:1b:bc:c6:59:b7:6e:b5:3d:ee:4c:af:d4:9f:89:32:
         67:38:a8:5d:26:5f:e7:79:5d:aa:c2:f4:35:21:20:2a:5d:5c:
         d4:00:50:d8:a1:7b:6f:41:f8:0e:03:a0:e8:ab:c0:9e:48:15:
         ca:d5:c9:c2:fc:48:6e:49:9c:f8:f3:f5:b8:c5:a1:8e:61:de:
         ff:7e:eb:7c:bc:48:9b:b1:00:1c:4b:35:ab:f6:a7:d1:be:90:
         14:57:b0:64:bd:28:aa:fc:d4:eb:4e:f5:a0:3d:bd:6e:65:58:
         b6:97:49:a5:75:fd:fe:c6:d7:13:eb:5d:56:cf:37:ed:50:45:
         ad:b7:b8:d6:26:c4:b4:65:b3:3b:83:84:ee:6b:b7:ad:2b:09:
         a4:c0:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org