Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/79cfa5c8b78be1dbc7ff6222e0b1493d67f98f61.roa
File:                     79cfa5c8b78be1dbc7ff6222e0b1493d67f98f61.roa (raw, json)
Hash identifier:          ySHFT77lvOH0hm/k6dlBDbI5Xpm5biqmqrd8+MVYZ4I=
Subject key identifier:   AD:9F:6A:48:F9:FB:49:78:85:3B:CE:AF:B3:D1:48:F5:15:69:7E:9F
Certificate issuer:       /CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
Certificate serial:       010B67
Authority key identifier: F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/79cfa5c8b78be1dbc7ff6222e0b1493d67f98f61.roa
Signing time:             Mon 22 May 2023 15:48:51 +0000
ROA not before:           Sun 21 May 2023 15:48:50 +0000
ROA not after:            Thu 22 May 2025 15:48:50 +0000
asID:                     266791
IP address blocks:        45.236.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68455 (0x10b67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
        Validity
            Not Before: May 21 15:48:50 2023 GMT
            Not After : May 22 15:48:50 2025 GMT
        Subject: CN=79cfa5c8b78be1dbc7ff6222e0b1493d67f98f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:05:3e:c6:c2:5e:5e:6d:6a:42:95:c3:21:
                    92:f6:d3:3a:f6:37:dc:60:88:ec:20:a7:4f:f3:d0:
                    e3:83:aa:2a:e9:89:0c:65:9f:7f:ee:02:e7:2b:d4:
                    29:54:5f:fc:a2:c3:35:f6:f1:83:7b:49:ea:3d:8a:
                    1f:b1:a4:6d:26:f3:ca:7e:06:cb:6a:83:6e:42:9f:
                    13:bc:25:10:2b:7f:65:e3:23:61:2b:8b:9e:aa:9a:
                    45:da:e5:e1:df:e3:65:49:e3:3c:6c:cf:60:73:2e:
                    ac:2e:ff:06:a0:7f:dc:35:c7:80:20:14:1f:af:f9:
                    ec:ea:27:1e:e9:e4:36:80:7c:cb:d0:fe:8d:ee:92:
                    21:1d:f2:0b:c5:e0:bd:be:23:07:19:93:c4:a7:8e:
                    3c:e5:16:44:0f:46:ab:ce:e6:73:b5:09:56:49:56:
                    fb:73:16:54:a2:2c:75:91:0d:87:e6:90:ad:66:33:
                    4f:e0:fd:2a:0c:01:a4:3a:6b:18:be:b0:d4:ad:71:
                    cc:24:24:24:ad:51:03:3a:71:1a:6e:da:2f:ca:c6:
                    17:8c:10:3f:cd:0b:10:75:12:6e:87:e0:7d:cc:0f:
                    84:1a:3b:40:70:cd:83:66:d6:27:04:30:bc:a5:82:
                    c2:01:58:71:68:4f:e7:5b:cf:c4:58:46:34:3e:89:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:6A:48:F9:FB:49:78:85:3B:CE:AF:B3:D1:48:F5:15:69:7E:9F
            X509v3 Authority Key Identifier:
                keyid:F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/79cfa5c8b78be1dbc7ff6222e0b1493d67f98f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/45261c30c618b29a3cce23bac23ee2522bfc9f5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:a6:3e:9b:e8:01:ca:c2:53:7e:54:7d:9e:90:89:c9:e1:
         ca:4e:6c:77:03:8c:3a:d7:6b:27:9c:75:a2:3d:f5:d5:ad:7e:
         cd:1d:6a:5a:3d:24:f7:c0:79:e5:fa:34:bd:e4:50:ee:ec:ab:
         31:bd:d4:a5:fe:a5:41:0a:49:53:0f:6b:cb:63:98:3c:90:dc:
         18:ca:6b:86:62:32:f2:25:70:83:af:d6:0a:93:10:eb:e0:15:
         ab:22:01:d7:48:af:ec:cd:af:6f:f6:c8:39:7f:75:f0:97:62:
         c8:23:11:7c:53:e0:c3:b0:04:cb:19:f1:ee:7c:00:fd:7e:1e:
         bb:6e:10:86:98:2f:ee:75:88:8a:38:86:df:73:00:f5:58:1e:
         07:cb:62:9f:4a:66:a8:06:85:da:38:28:48:d0:e9:b6:b2:d3:
         f8:78:8d:24:06:37:0f:f5:bd:95:1c:4d:b9:8f:3a:44:31:3c:
         7c:d2:4e:d0:fa:63:e9:1a:08:4c:5a:81:9d:bf:b5:a3:74:4d:
         c8:e1:4d:0c:2a:29:98:63:f0:ed:4b:b5:c7:d5:5d:d2:20:88:
         cc:c2:b2:0d:4c:d4:40:32:fa:b0:94:8e:c0:64:fa:73:a5:d2:
         95:41:3d:7f:4c:06:55:9b:c4:b3:3e:ae:15:6d:5b:f2:85:f8:
         34:98:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org