Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/07740ddb42709f373dc6df9de26a88396096bba4.roa
File:                     07740ddb42709f373dc6df9de26a88396096bba4.roa (raw, json)
Hash identifier:          s1a7J6lKZQv0rXcPbOJ8+RC7gi4DxxNaH2oblfbSHxA=
Subject key identifier:   E3:ED:F4:8C:25:85:5D:C2:F6:C9:EF:1E:D1:2D:30:25:7B:29:22:3A
Certificate issuer:       /CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Certificate serial:       189A25
Authority key identifier: FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/07740ddb42709f373dc6df9de26a88396096bba4.roa
Signing time:             Mon 11 Jul 2022 15:46:39 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     61512
IP address blocks:        45.161.236.0/22 maxlen: 24
                          143.255.140.0/22 maxlen: 24
                          2803:6940::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612325 (0x189a25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=07740ddb42709f373dc6df9de26a88396096bba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:f1:93:9d:8b:f4:b3:af:b5:d8:e5:06:d0:
                    29:90:fd:97:7f:6e:3e:f7:52:c8:d1:33:3d:2b:0a:
                    2d:fd:48:71:f3:4a:89:20:85:82:04:b1:89:de:93:
                    de:d8:41:af:4f:c9:e4:08:a3:f1:fa:1c:84:fa:05:
                    0a:3b:34:7a:31:b1:b9:60:1e:22:a5:3b:30:66:17:
                    94:43:05:19:b1:68:18:df:15:df:32:6c:f7:b0:23:
                    c7:d4:56:58:4a:2e:c9:fa:45:4c:d5:44:b0:65:34:
                    b6:b7:f9:1f:03:ff:ab:84:3f:35:fd:7c:f9:a3:f6:
                    8b:c7:53:5e:61:a2:c5:9c:7c:e8:17:42:2d:4a:3b:
                    54:1a:c4:6a:11:6f:7e:52:7f:5f:09:c7:c5:d6:3a:
                    07:a7:30:c1:7b:86:3c:23:f6:e6:7b:e4:47:26:7a:
                    b2:d2:24:5e:f4:cd:a1:b2:1c:8a:1f:2a:6a:7d:13:
                    7d:61:34:11:f6:4d:44:f3:a4:6c:5d:df:25:f3:64:
                    3f:34:b9:8e:8d:d5:5b:74:80:5f:79:3f:9e:29:4f:
                    96:48:8a:6c:00:59:ea:7e:12:4a:3b:47:06:32:15:
                    1a:ed:fa:ca:a1:d2:5f:29:c2:4d:5a:32:a0:21:ea:
                    16:36:9f:85:de:99:a6:a3:7f:df:fb:3f:82:7f:ce:
                    39:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:F4:8C:25:85:5D:C2:F6:C9:EF:1E:D1:2D:30:25:7B:29:22:3A
            X509v3 Authority Key Identifier:
                keyid:FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/07740ddb42709f373dc6df9de26a88396096bba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/7855868bb89dd668c1f57896b07b3922fccf8b7a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.236.0/22
                  143.255.140.0/22
                IPv6:
                  2803:6940::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:44:63:6c:14:b9:d0:b2:74:ad:2f:d0:eb:4b:2f:15:04:d8:
         1f:92:f0:6c:a1:e6:f4:25:04:3a:b0:0b:12:0c:a8:7c:93:23:
         09:a4:29:12:12:d5:e7:4c:88:86:47:af:0a:f7:3c:b5:4d:6e:
         54:ce:c9:52:87:2d:4d:45:37:5e:f6:d7:4c:10:20:b0:e8:7a:
         f8:9b:4a:90:20:f6:74:d2:6e:64:4c:8c:26:b0:9e:62:a0:b9:
         a4:e0:5c:06:d3:99:c6:bf:df:e0:da:46:38:c2:71:21:b6:eb:
         38:5a:b1:a1:5b:5e:94:04:87:5c:94:f4:81:90:db:16:a9:72:
         cc:fb:06:45:84:ea:ed:1f:a9:f9:12:a0:cb:f2:a6:8c:77:e6:
         4b:1f:e2:75:56:70:0e:3e:aa:a8:4a:bf:0c:9a:4e:0e:87:e7:
         b4:49:ff:7b:63:31:a0:83:7f:f0:82:a5:5e:77:2a:68:ca:fc:
         8b:6e:c6:93:08:55:c5:77:a7:62:da:e8:bb:c7:65:91:e7:34:
         6d:5a:1f:6d:9b:97:25:ed:a1:f5:49:ac:b5:60:d1:cd:23:31:
         e5:df:71:ae:f1:29:5f:19:b6:b1:1b:3d:f7:9b:64:00:92:00:
         be:15:d2:4c:3a:c8:b0:27:da:a8:5b:df:59:48:b7:2c:12:0c:
         29:57:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org