Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/6fc34dd6cb20c787aacb8fe0a497bc9c6f0f412e.roa
File:                     6fc34dd6cb20c787aacb8fe0a497bc9c6f0f412e.roa (raw, json)
Hash identifier:          zTC2feIufssk1GiTqWUHmMDd4/4FAXyxHg6oY9D8iCY=
Subject key identifier:   DA:64:02:3F:59:80:E7:1F:32:97:07:9A:51:F7:5C:88:39:66:67:6A
Certificate issuer:       /CN=b08b134d19c661a4a28b302fd9901173cb75358b
Certificate serial:       134ABB
Authority key identifier: 63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/6fc34dd6cb20c787aacb8fe0a497bc9c6f0f412e.roa
Signing time:             Tue 25 Jul 2023 20:46:55 +0000
ROA not before:           Mon 24 Jul 2023 20:46:55 +0000
ROA not after:            Fri 25 Jul 2025 20:46:55 +0000
asID:                     265556
IP address blocks:        45.164.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264315 (0x134abb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b134d19c661a4a28b302fd9901173cb75358b
        Validity
            Not Before: Jul 24 20:46:55 2023 GMT
            Not After : Jul 25 20:46:55 2025 GMT
        Subject: CN=6fc34dd6cb20c787aacb8fe0a497bc9c6f0f412e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:bb:ed:18:ce:2b:95:0c:d2:c0:da:ce:ea:
                    e5:40:9a:54:eb:14:c0:39:fe:13:f1:3a:19:37:1c:
                    e4:67:8d:37:df:a0:a5:e6:84:0e:b7:3e:18:51:50:
                    b2:41:a9:08:50:1f:98:d1:54:c6:c9:f2:37:b8:53:
                    48:9f:fc:be:2e:59:51:e1:72:cb:e6:d8:19:0f:fd:
                    a7:a1:f8:83:df:fc:49:b9:b7:11:78:65:48:c3:55:
                    79:f0:6f:ea:ea:d2:d5:5b:50:bb:d1:6e:09:e9:e6:
                    ca:c2:b1:1b:ae:42:83:8d:93:46:f7:18:fa:e4:ad:
                    eb:c6:1f:f3:a4:e4:83:94:bc:58:7b:77:3b:b2:32:
                    36:ff:3b:92:dd:13:5f:2a:88:56:59:09:86:f7:4d:
                    2e:0f:69:3c:0f:f9:7a:76:20:bc:ac:e8:78:5a:5d:
                    fe:22:a8:54:da:63:e2:a7:a4:12:58:fa:65:81:96:
                    a4:b3:d6:76:1f:21:ec:d7:86:60:36:32:1b:c2:a9:
                    5b:1b:2c:fb:84:29:bb:2d:af:c3:a8:18:7c:0e:80:
                    3d:b3:5d:fb:e3:e2:5e:1e:32:45:dc:b9:a1:a8:7a:
                    ac:8e:43:32:2a:1f:24:fa:49:ef:cd:6c:d0:f1:bb:
                    d0:3c:b5:31:eb:0d:ab:f7:6e:32:9c:e7:b0:07:f8:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:02:3F:59:80:E7:1F:32:97:07:9A:51:F7:5C:88:39:66:67:6A
            X509v3 Authority Key Identifier:
                keyid:63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/6fc34dd6cb20c787aacb8fe0a497bc9c6f0f412e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/b08b134d19c661a4a28b302fd9901173cb75358b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:e2:07:07:dd:cd:dc:3f:8e:07:39:33:99:ef:1f:ad:fa:
         21:21:a7:e3:f5:50:94:7c:74:42:eb:33:d9:b3:33:21:41:d6:
         c9:44:99:47:8a:63:f8:1d:92:7b:1a:a0:70:db:30:63:2c:cc:
         07:9e:38:d3:aa:e1:b7:a5:67:ac:68:2f:e4:5e:12:00:5b:29:
         c8:7c:18:73:e7:f8:83:9b:58:01:d5:2d:66:f4:91:3d:c0:3d:
         54:3f:27:d6:fb:b7:2b:57:7e:dd:4c:84:8d:d0:3f:34:3d:8a:
         6f:df:98:70:54:ba:51:4d:cb:3d:73:cf:1e:58:38:ab:83:43:
         28:81:11:32:a9:27:b1:1b:ad:6c:35:ab:1d:0a:c1:1b:2d:17:
         91:c3:c8:d4:9f:dc:21:ba:5e:d1:90:52:0f:83:21:08:1b:89:
         98:2a:53:fa:1f:09:b7:2f:33:2a:91:b6:dd:13:11:a5:5e:f1:
         97:4a:3b:a1:08:6e:5c:6c:e8:67:12:b6:a9:ed:3b:7a:1e:d2:
         df:27:77:e9:d7:77:6a:a4:5f:8e:d6:11:44:6c:a1:10:ec:d2:
         71:a1:cc:4f:2b:04:e9:92:37:9e:7f:aa:ec:82:67:8d:82:8b:
         d3:5e:53:7c:dc:4b:b2:8f:0f:5c:b3:53:68:85:f1:66:c7:81:
         f6:b3:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org