Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/5cd5bff9ef772eb1b03292d7c0540e17c9b4eeec.roa
File:                     5cd5bff9ef772eb1b03292d7c0540e17c9b4eeec.roa (raw, json)
Hash identifier:          qWS1lpBVNgfduqQYO1wtImWA3Dea0ixvyfSz6YNo5BA=
Subject key identifier:   55:11:2F:0B:9E:0A:AE:F7:33:73:BB:8D:6F:51:C6:76:D9:50:5C:1E
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       203D70
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/5cd5bff9ef772eb1b03292d7c0540e17c9b4eeec.roa
Signing time:             Tue 11 Jul 2023 02:13:55 +0000
ROA not before:           Mon 10 Jul 2023 02:13:55 +0000
ROA not after:            Fri 11 Jul 2025 02:13:55 +0000
asID:                     396356
IP address blocks:        45.166.108.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112880 (0x203d70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Jul 10 02:13:55 2023 GMT
            Not After : Jul 11 02:13:55 2025 GMT
        Subject: CN=5cd5bff9ef772eb1b03292d7c0540e17c9b4eeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:53:52:13:9c:7f:57:78:d5:9a:79:17:98:
                    f1:cc:70:34:23:57:8c:00:81:6c:83:a6:86:10:c8:
                    6e:9c:81:51:49:32:ea:c8:0e:e4:9b:22:f6:f5:d6:
                    94:e4:ee:6f:1a:34:15:6e:0b:73:06:91:1e:e2:b3:
                    06:0b:8c:57:4a:3f:cc:28:af:c4:b4:4b:ab:c3:01:
                    aa:ef:8b:f5:66:56:fb:f1:0d:01:22:55:e3:6d:23:
                    1c:de:1d:09:4e:2b:a5:0e:0a:bc:47:ef:62:e1:19:
                    cd:c6:e9:ae:c1:b8:dd:79:be:95:2a:db:a2:c7:25:
                    01:41:44:b4:9c:88:dc:dd:a4:31:98:05:af:7f:ae:
                    53:b9:b2:dc:dd:ad:6c:35:fe:52:e5:15:c6:9c:2b:
                    f1:63:61:a3:de:bd:3d:55:bc:57:7d:f4:cc:f0:55:
                    04:89:e9:06:63:4c:44:2c:91:68:83:f2:09:df:9d:
                    95:1e:b1:72:d1:69:9f:80:6e:e5:4c:1a:3c:07:49:
                    77:05:d6:04:97:0b:d2:e4:41:ae:73:6b:13:9d:db:
                    20:aa:4b:09:c0:90:fa:fb:af:a1:a7:a5:32:00:fd:
                    6a:83:1d:5b:b5:a8:04:75:3a:25:ec:16:1c:0f:2d:
                    78:26:b4:d7:69:22:b8:a3:9f:7a:78:38:e8:15:63:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:11:2F:0B:9E:0A:AE:F7:33:73:BB:8D:6F:51:C6:76:D9:50:5C:1E
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/5cd5bff9ef772eb1b03292d7c0540e17c9b4eeec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:c4:56:8a:74:a0:37:5c:59:ce:00:3e:f3:da:9d:23:d3:
         ee:62:6f:48:16:51:96:89:89:7f:d3:29:9b:2d:ce:62:ee:05:
         5c:68:56:3a:fa:d4:ad:6c:d7:b5:22:ba:56:4c:0b:96:65:c0:
         02:46:73:1a:a7:36:21:13:d9:2e:d1:16:18:42:21:74:94:8a:
         09:03:2e:6d:f3:19:19:ef:20:87:95:27:5b:32:d0:ba:0c:9a:
         84:35:4e:43:64:af:28:01:d9:7f:8d:80:bb:32:27:32:cf:9f:
         b7:26:ca:f8:91:e5:36:d0:67:a1:97:da:f9:07:b3:71:99:ab:
         0d:ee:79:c8:d1:79:cf:84:55:23:0a:3c:c1:c7:19:98:f6:61:
         81:46:22:58:5e:2b:28:41:3b:b8:ab:b1:4f:c8:b7:8f:62:fb:
         7a:a2:6e:b7:e1:e4:3f:dc:a8:68:0f:d3:eb:ae:5a:38:e0:0f:
         ba:6d:e5:8b:4a:17:6f:4c:cd:5b:22:a1:bf:52:33:b5:53:21:
         ba:ae:c8:66:9f:a1:90:5b:f0:d9:de:5f:88:74:27:ff:83:c3:
         2c:2e:a4:f3:84:e0:88:7b:49:c2:2c:4f:98:9f:97:98:ad:20:
         fd:e9:23:7d:d8:ff:de:be:1e:ae:ae:65:09:94:94:45:4f:50:
         6a:9d:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org