Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/978640718cc49c4ccd7f680db872e6f0e5dd6875.roa
File:                     978640718cc49c4ccd7f680db872e6f0e5dd6875.roa (raw, json)
Hash identifier:          AZYkuP5kY3NsTj3prHsQJMPa+W2wkquACbrBzoTB6vE=
Subject key identifier:   FF:D4:9A:C8:50:47:F0:25:A7:0C:04:19:4E:69:56:7C:B1:38:79:30
Certificate issuer:       /CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
Certificate serial:       255995
Authority key identifier: 20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/978640718cc49c4ccd7f680db872e6f0e5dd6875.roa
Signing time:             Wed 03 Jan 2024 14:09:17 +0000
ROA not before:           Wed 03 Jan 2024 14:09:17 +0000
ROA not after:            Sat 03 Jan 2026 14:09:17 +0000
asID:                     267820
IP address blocks:        45.174.129.0/24 maxlen: 24
                          45.174.130.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447765 (0x255995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
        Validity
            Not Before: Jan  3 14:09:17 2024 GMT
            Not After : Jan  3 14:09:17 2026 GMT
        Subject: CN=978640718cc49c4ccd7f680db872e6f0e5dd6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:8c:48:59:59:75:4c:98:4c:68:7b:37:3c:
                    bd:2a:98:42:0b:b8:9e:5e:b1:c5:b4:d1:13:46:cb:
                    a3:b1:53:0c:75:24:06:4d:61:80:03:ad:be:40:1b:
                    c5:54:01:e9:2e:db:a4:19:98:77:bc:8c:f0:ed:6e:
                    a0:98:c7:8c:f9:29:05:2a:c0:e5:1f:7d:db:0d:8d:
                    e7:4a:8b:49:3b:58:e2:f9:2c:aa:1d:6e:d1:ec:f1:
                    0e:5d:72:d1:a9:82:d9:cb:2d:74:cc:0c:d4:d8:99:
                    35:bb:14:03:42:63:ac:2c:89:3e:d8:89:0a:98:87:
                    10:87:8b:61:cf:30:62:c7:a5:25:ce:da:9a:5f:8d:
                    34:40:5e:ec:6d:05:35:6c:a7:2e:c0:9c:09:a8:47:
                    9e:37:94:b0:84:c7:fe:d1:87:db:7f:d6:4a:cf:74:
                    19:b9:9c:7c:c5:cb:23:77:3b:96:a4:82:48:91:54:
                    af:92:54:e4:db:e5:ff:d9:2e:01:17:5b:a4:1f:12:
                    6c:6a:1a:e4:ce:14:9f:8b:67:21:01:b1:90:49:9b:
                    88:e0:2b:e2:74:87:af:e2:0e:6c:16:ac:45:0b:37:
                    33:4a:bc:39:79:df:46:8f:35:93:04:2b:21:69:4e:
                    7f:fd:76:3f:d3:04:0f:73:56:c7:a4:e6:11:a1:6f:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D4:9A:C8:50:47:F0:25:A7:0C:04:19:4E:69:56:7C:B1:38:79:30
            X509v3 Authority Key Identifier:
                keyid:20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/978640718cc49c4ccd7f680db872e6f0e5dd6875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.129.0-45.174.131.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:10:20:9f:b8:21:4f:22:79:23:2a:1f:13:94:29:1c:04:
         87:22:68:a8:ba:26:14:df:00:26:1c:85:5b:fc:88:17:63:a5:
         99:b5:55:e3:6d:ad:29:9e:1d:73:13:e5:e1:16:9a:eb:54:ec:
         87:8d:77:c9:94:ce:92:5b:5d:3a:0d:62:fd:bb:63:7d:cd:43:
         d9:b8:75:c2:06:08:05:b9:5c:1e:4f:ea:db:e3:08:77:73:55:
         ab:fc:88:35:69:bd:9f:e2:43:a1:44:12:e1:b6:58:57:22:ee:
         73:de:61:79:d8:c8:4d:66:3c:90:be:3e:a0:94:64:17:7e:4e:
         78:93:51:ce:94:b6:4b:f3:b2:52:a4:bb:c6:54:8a:ed:f5:0b:
         35:7e:c9:62:61:59:d7:fe:a7:cf:99:36:91:d0:57:cc:3c:27:
         60:a2:1f:9c:d4:6d:af:8c:54:4b:0b:a1:ce:38:20:f3:86:e2:
         aa:2c:d9:71:3b:fb:b4:0d:26:bd:70:90:78:7a:2c:a7:f1:84:
         8f:9b:94:f8:42:0b:8f:fa:25:9e:93:da:9d:b1:62:2d:64:fe:
         d8:11:99:54:88:96:d6:fc:91:a9:7a:7e:b6:9a:2a:21:b5:7b:
         9b:e2:3e:cf:18:9e:f5:be:ad:af:3e:30:0b:24:68:e3:56:c2:
         70:12:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org