Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/49e4bda91f1be8212b535f3e75ee49d227eabeb3.roa
File:                     49e4bda91f1be8212b535f3e75ee49d227eabeb3.roa (raw, json)
Hash identifier:          vjZShG3zdrnnWn/sSBHgf3QjIqUEM4hbwkM3W3rD9TI=
Subject key identifier:   0F:C1:E9:F3:CA:26:E9:8E:7E:EC:23:4B:50:2F:B1:5E:3B:FB:05:04
Certificate issuer:       /CN=b599ff6abed9cdb293d9edb880b956e9257dfdb1
Certificate serial:       062AD0
Authority key identifier: 88:5B:11:D2:95:97:47:5A:A4:E4:9E:81:40:4C:78:1C:0E:23:26:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b599ff6abed9cdb293d9edb880b956e9257dfdb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/49e4bda91f1be8212b535f3e75ee49d227eabeb3.roa
Signing time:             Mon 19 Feb 2024 21:56:55 +0000
ROA not before:           Mon 19 Feb 2024 21:56:55 +0000
ROA not after:            Thu 19 Feb 2026 21:56:55 +0000
asID:                     264800
IP address blocks:        45.172.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404176 (0x62ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b599ff6abed9cdb293d9edb880b956e9257dfdb1
        Validity
            Not Before: Feb 19 21:56:55 2024 GMT
            Not After : Feb 19 21:56:55 2026 GMT
        Subject: CN=49e4bda91f1be8212b535f3e75ee49d227eabeb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:de:f1:33:5e:ea:9f:62:fc:09:d8:b9:db:
                    8e:90:65:67:1f:08:1f:98:4f:bc:45:5d:d8:ae:60:
                    fa:63:af:3a:2e:51:45:6f:83:cc:88:93:3c:ea:84:
                    86:49:87:43:9f:5c:1a:34:d9:38:44:41:2f:7f:5f:
                    a0:25:46:48:ea:e8:f3:e6:2b:b9:cd:60:26:00:a0:
                    4b:57:eb:3a:39:00:bc:d8:27:45:53:5d:8a:ab:f8:
                    bd:52:2c:23:90:b5:e1:6f:93:c7:11:44:58:98:f0:
                    35:66:80:53:ce:6b:ff:85:b2:d1:57:ba:54:dc:33:
                    32:da:e1:7a:37:df:d2:8a:72:dd:02:d5:37:3b:48:
                    77:8f:cf:09:c1:bc:cd:61:4e:51:f1:b4:db:c6:9d:
                    64:ba:6d:e4:c3:b8:ce:5b:ad:4c:ce:93:5e:66:40:
                    08:e8:95:4c:8f:02:62:09:e2:4a:c2:ad:81:f7:be:
                    4b:4a:18:16:5f:83:7d:a1:05:c4:ec:40:28:0b:08:
                    d8:51:61:6b:40:b3:8d:2d:dd:00:fa:a2:49:62:a8:
                    c6:1d:83:f3:85:4e:ab:25:a9:54:1a:db:d9:6e:c4:
                    60:2f:c2:b2:be:90:db:fe:68:b6:c0:cc:10:c7:f9:
                    3b:49:13:aa:d6:e6:06:86:2d:3c:ed:cf:c7:04:75:
                    2c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:E9:F3:CA:26:E9:8E:7E:EC:23:4B:50:2F:B1:5E:3B:FB:05:04
            X509v3 Authority Key Identifier:
                keyid:88:5B:11:D2:95:97:47:5A:A4:E4:9E:81:40:4C:78:1C:0E:23:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b599ff6abed9cdb293d9edb880b956e9257dfdb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/49e4bda91f1be8212b535f3e75ee49d227eabeb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:bf:67:97:32:cb:82:a6:57:04:6b:2e:8d:61:27:53:ff:d0:
         a0:1f:79:9d:bb:2b:53:60:55:6e:b5:be:ba:51:f6:8a:79:48:
         f9:7c:0c:e8:90:c8:c3:ff:eb:ff:3e:71:15:f1:13:62:7d:60:
         e9:36:f0:40:24:dd:2c:81:10:5a:45:3d:eb:66:bf:ad:3d:fa:
         fe:be:1a:e6:b8:84:e4:68:ee:7c:e8:64:62:e6:b9:5f:b3:40:
         0c:61:b0:fb:11:6f:42:f4:b9:24:ed:f0:b2:9e:0f:d7:d8:5e:
         c9:4e:f3:9e:bd:85:48:e7:9a:1a:e9:41:e7:8a:97:14:74:2d:
         8b:7b:76:93:bd:05:bd:9e:a5:a1:3f:96:7a:05:67:ea:76:a0:
         e1:ef:a1:8c:7c:e2:7b:63:8f:99:a2:92:e8:c1:51:bb:61:d6:
         15:d4:6d:ff:5f:bf:e2:8a:43:53:cd:74:0f:78:25:f4:eb:ff:
         d9:d0:7d:be:9a:b6:dd:18:bb:28:8c:cf:f3:04:6f:4b:99:09:
         64:bd:87:4e:3b:21:34:68:bc:3d:f8:a8:2c:f7:38:b2:63:f4:
         a6:7b:72:0a:02:8b:7c:5a:47:59:b2:0c:8e:f9:4b:d3:bb:31:
         c3:fb:69:12:24:a6:cb:71:db:2f:b3:93:de:87:3a:32:72:eb:
         b1:8f:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org