Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa
File:                     295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa (raw, json)
Hash identifier:          gR3QaBzcXIq8ncYaORs5KvcrcthRidSCHf6Vg6/tgJ0=
Subject key identifier:   41:F8:2A:0E:F5:AB:E4:AF:B2:56:DC:66:B0:A3:89:2C:89:AE:19:79
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       0B7C
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa
Signing time:             Mon 17 Jan 2022 23:22:51 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     269735
IP address blocks:        45.181.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2940 (0xb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=295d7a1d0fed65aea5c23eec80b4e7e8d70f891a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:7a:41:6b:fb:fe:f8:02:6a:fc:cf:5c:63:
                    9d:d3:bd:02:ba:60:28:ab:e3:2a:e6:8e:c2:be:a9:
                    dc:ca:54:5c:1b:c5:49:1e:5e:cc:0d:ec:0c:96:ed:
                    bc:85:6d:32:9f:66:dd:b7:4e:89:76:16:01:d5:75:
                    7f:47:66:27:d6:01:9b:d6:5d:05:bc:77:a3:26:6e:
                    cf:b2:2e:7c:88:f5:20:c1:f3:d3:2d:53:20:8f:71:
                    2d:43:60:27:d5:d1:96:1d:9b:f3:72:9a:9c:f9:c8:
                    bf:ed:7d:10:5e:dd:b9:28:3a:23:f7:9b:bb:62:a6:
                    54:9a:27:69:51:f9:15:e4:8e:8e:24:b7:2f:a0:9d:
                    3b:2b:87:f7:58:e5:b9:2e:f9:67:a6:7b:01:3b:cf:
                    45:45:04:6a:c8:ac:33:46:ef:85:57:69:3a:11:bf:
                    b1:4f:c5:b6:e0:4b:5f:c6:3a:4c:0d:7b:df:0f:c3:
                    7b:b9:76:0a:58:30:02:d8:f3:e7:61:65:58:5b:e6:
                    1d:fc:f6:e1:cd:60:ba:56:15:57:0f:01:0e:2d:2a:
                    c4:3e:2f:b1:d3:ef:c7:0a:7f:a8:d3:8d:b9:5c:fe:
                    ce:3b:ad:b7:a1:54:d1:d7:5e:88:67:34:48:e1:17:
                    5d:06:70:23:33:85:a9:03:3a:58:c1:8d:9b:5b:29:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:2A:0E:F5:AB:E4:AF:B2:56:DC:66:B0:A3:89:2C:89:AE:19:79
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:33:82:3f:f2:d9:5e:70:13:e4:1e:64:ae:24:c3:50:e3:
         91:1a:bc:39:06:72:ad:d1:09:34:94:3e:06:b5:18:99:83:a7:
         c0:5b:36:eb:50:ac:e9:85:55:94:35:54:5a:fa:9d:ab:4c:6c:
         35:ab:9c:a5:54:1f:35:ff:75:20:cd:ef:1c:89:e3:e1:a3:d1:
         b2:75:6e:7e:25:99:9d:5b:c5:d5:92:95:ed:2b:38:5b:97:16:
         10:12:8b:66:8e:ff:74:b4:18:80:e9:66:ca:19:5c:e3:80:f1:
         9f:62:9d:05:81:8a:d0:d9:64:c7:f9:34:d3:02:b6:02:b0:78:
         80:9e:a8:f4:62:bb:64:2e:4d:77:69:a2:ad:7b:e0:12:bc:49:
         69:15:e4:8e:f7:e8:ff:4f:30:f3:e2:d8:6d:20:aa:3c:b6:66:
         23:d2:9d:d7:f0:ab:d2:6b:ec:01:ff:2d:81:c5:16:94:c1:7f:
         95:77:d5:63:cb:ab:39:35:d7:25:2e:5d:a4:6d:8d:fb:6c:4e:
         0e:10:fb:6f:4a:2a:6c:05:da:1a:84:cb:12:94:76:f9:e3:e9:
         69:a0:28:49:18:3d:75:5f:e3:cd:5e:04:3b:59:7b:cc:3c:b4:
         df:9f:a8:70:3b:11:9b:f6:d6:d3:21:84:c3:9a:f6:d9:16:7a:
         99:28:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org