Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/41f9c2c90361f77e86bd524f31b71da0275b153f.roa
File:                     41f9c2c90361f77e86bd524f31b71da0275b153f.roa (raw, json)
Hash identifier:          0wb8Q10Cp58zw2wcpnAJ5nDH5NT8Be2bieZu3aNsgTg=
Subject key identifier:   90:19:C7:C6:37:F9:F1:EA:BE:80:C1:DB:2A:17:29:0F:68:4C:C2:08
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       0F93C0
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/41f9c2c90361f77e86bd524f31b71da0275b153f.roa
Signing time:             Wed 25 Aug 2021 02:25:48 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     28458
IP address blocks:        45.166.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020864 (0xf93c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=41f9c2c90361f77e86bd524f31b71da0275b153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:39:9e:e1:f2:23:49:24:d0:a8:bc:79:a8:
                    7a:57:bf:9c:70:5c:20:d7:35:c1:bd:a4:be:d4:30:
                    88:9f:a3:ac:0f:93:22:8f:2a:c5:79:05:78:97:5b:
                    ef:1b:7f:30:bf:c3:79:21:ef:e4:e9:8a:02:60:da:
                    13:68:4f:8d:79:56:ac:2c:bf:87:5e:cd:3b:f2:b0:
                    fd:71:af:2c:59:d8:6c:5f:92:ac:ac:b3:b2:5d:71:
                    dc:f6:32:de:08:0e:b5:d1:01:78:6a:10:ca:8d:2c:
                    9d:79:9d:65:4a:ca:e4:d8:be:1e:42:a2:a7:23:b8:
                    39:2f:b5:71:23:78:1a:ac:67:b0:5c:64:c1:80:c6:
                    a3:b0:62:e2:21:f5:ef:c9:19:dd:79:23:d0:9f:0c:
                    5e:ca:b2:5f:88:c2:ab:61:76:0e:d4:fa:8f:ff:68:
                    d0:0a:db:b4:4e:f5:51:c4:67:2f:6a:10:ce:51:94:
                    7f:4b:5e:ad:c2:1e:10:09:4b:22:1c:19:b2:73:e4:
                    1b:66:92:d1:8e:73:a8:bb:78:32:17:7d:3f:26:a5:
                    2e:a5:b5:e3:b3:d4:b4:9c:99:86:e8:2e:44:8f:f0:
                    a4:33:97:85:41:d5:cb:89:1c:b1:ff:de:53:15:24:
                    53:34:f8:f8:c5:9b:5e:56:73:c9:4e:42:52:d2:69:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:19:C7:C6:37:F9:F1:EA:BE:80:C1:DB:2A:17:29:0F:68:4C:C2:08
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/41f9c2c90361f77e86bd524f31b71da0275b153f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:57:f0:83:1b:21:bc:54:af:82:5d:ce:de:8d:75:2b:76:
         5e:f6:fe:e3:76:62:98:3e:30:77:cd:87:ac:5c:f8:86:53:36:
         c8:4c:dd:6b:34:55:03:d9:91:7f:c0:5a:01:b2:be:ac:29:ba:
         d5:34:5e:a4:7f:3c:45:70:93:5a:a8:04:df:00:a8:1f:60:f5:
         d6:9a:eb:7e:98:0e:59:ec:1f:3f:e4:25:68:75:7c:75:5c:42:
         e5:ca:97:92:9c:51:2f:b8:6b:5e:ea:4d:1e:96:3d:55:2e:a1:
         e5:fa:54:e3:0c:09:f6:fe:f4:fb:41:89:d9:67:3d:11:0b:b5:
         25:c4:95:da:82:6a:bc:dc:d7:c3:1e:69:e1:af:c9:e8:6f:db:
         cd:93:ab:76:20:06:08:50:43:35:fa:2e:ab:61:3b:01:0c:0b:
         23:bb:53:3d:a5:fe:cb:d4:00:fc:9f:97:96:f4:5b:12:ac:74:
         31:b0:5a:e3:79:04:4f:be:3e:ba:32:23:21:57:d2:af:8f:b0:
         c6:fd:68:61:6d:80:97:b6:35:7f:86:e4:41:67:f0:9f:de:16:
         5c:fa:5f:2c:41:a2:d9:f9:f3:47:65:e1:96:7d:a3:8a:4a:59:
         39:26:23:ca:94:c8:98:17:3e:70:8e:a7:42:3f:7f:c4:cb:f3:
         ed:04:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org