Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/5a8ccce3cd24516836e7a24bd42977054817b664.roa
File:                     5a8ccce3cd24516836e7a24bd42977054817b664.roa (raw, json)
Hash identifier:          7GMjfK8vE8/WQvatPy+vauCJ5dk1xHtdUX67MuG31wc=
Subject key identifier:   6B:1D:5F:F9:9D:4A:33:59:19:2A:25:5B:FF:D2:05:A8:A5:9F:7C:3B
Certificate issuer:       /CN=4f47bb7ead910781563dc199e18418c34ecf5877
Certificate serial:       DF11
Authority key identifier: BE:4B:B9:99:56:DC:C3:A2:22:FC:19:2E:E0:5B:B0:34:71:44:3A:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f47bb7ead910781563dc199e18418c34ecf5877.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/5a8ccce3cd24516836e7a24bd42977054817b664.roa
Signing time:             Thu 11 May 2023 19:31:29 +0000
ROA not before:           Wed 10 May 2023 19:31:29 +0000
ROA not after:            Sun 11 May 2025 19:31:29 +0000
asID:                     265615
IP address blocks:        45.190.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57105 (0xdf11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f47bb7ead910781563dc199e18418c34ecf5877
        Validity
            Not Before: May 10 19:31:29 2023 GMT
            Not After : May 11 19:31:29 2025 GMT
        Subject: CN=5a8ccce3cd24516836e7a24bd42977054817b664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:f9:56:ca:cb:39:94:de:ba:de:d9:83:89:
                    b9:1e:97:ea:69:e2:a4:d6:74:7d:1b:2a:c1:b5:91:
                    de:13:74:18:d8:a8:fd:90:0a:36:02:05:11:a7:0d:
                    bc:fc:87:65:aa:37:09:57:62:d3:20:3a:bf:ea:c7:
                    fd:db:34:21:b0:7b:dc:1d:0d:ab:2d:7c:57:2b:06:
                    b7:de:99:35:1c:56:7c:1f:67:c8:a9:76:ba:71:c0:
                    10:ab:a7:a1:ae:24:cf:42:0d:ef:75:56:ee:10:b9:
                    62:56:f7:3a:32:fe:74:0f:e3:aa:e4:e3:61:b7:e4:
                    06:4f:68:2e:0d:95:35:49:4e:d8:e8:32:78:56:c0:
                    92:a6:95:8f:4d:84:63:bb:ca:39:ae:91:9e:b6:49:
                    ae:b9:99:58:2c:37:4a:fc:0a:49:19:8e:7a:6d:d2:
                    b0:96:2f:da:43:67:31:9a:8f:11:54:41:8a:c6:fb:
                    f9:02:03:ad:58:5f:da:15:70:89:d7:b7:0b:77:42:
                    f4:54:41:61:47:e3:a5:0d:3c:f5:cb:0e:d3:e1:3d:
                    e3:c9:6b:a9:6a:85:16:30:ac:03:2c:b0:c6:65:4d:
                    52:0e:8a:9c:75:36:73:65:6f:45:22:4c:f4:4b:52:
                    24:51:fa:65:87:17:0d:d5:f4:19:96:40:6d:e6:c7:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:5F:F9:9D:4A:33:59:19:2A:25:5B:FF:D2:05:A8:A5:9F:7C:3B
            X509v3 Authority Key Identifier:
                keyid:BE:4B:B9:99:56:DC:C3:A2:22:FC:19:2E:E0:5B:B0:34:71:44:3A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f47bb7ead910781563dc199e18418c34ecf5877.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/5a8ccce3cd24516836e7a24bd42977054817b664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/4f47bb7ead910781563dc199e18418c34ecf5877.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:28:88:8d:eb:a5:39:16:d3:31:e8:1e:3c:aa:a2:da:53:
         89:54:4c:9d:52:bb:7d:00:f8:93:61:e0:6a:50:82:c8:14:19:
         93:1b:3d:cb:43:9a:1e:73:af:21:ab:90:22:f7:b7:ed:4a:86:
         45:07:2f:50:a0:ed:3b:9c:f2:cf:ec:85:dc:08:c9:f7:4f:98:
         9f:fb:15:af:28:b2:96:e8:24:d0:17:53:af:77:c9:a1:3e:4c:
         27:a0:aa:de:ba:ef:92:1d:a1:5b:06:2c:8c:35:39:50:bb:d3:
         79:0f:9b:5c:be:c2:28:db:08:b1:4c:a5:f7:26:d3:c5:de:75:
         ac:3a:7a:cb:89:aa:3c:31:c5:bd:10:a3:a3:ed:21:b5:5f:29:
         ec:cb:76:e3:50:29:94:5a:44:65:42:00:b7:47:3c:49:8f:d8:
         09:ee:54:f9:8f:47:98:da:5e:05:eb:6b:9e:aa:f2:aa:f1:3f:
         f5:6b:fe:e0:0d:af:71:92:61:76:3b:1a:ef:91:38:2d:79:e3:
         65:a3:99:cc:c0:51:83:67:20:60:68:f7:c8:d9:2e:70:81:2e:
         87:d8:1e:19:ae:b8:9e:a9:4b:6c:3d:99:0e:93:62:e1:d6:e3:
         3d:77:7a:d4:a0:88:42:0f:f3:4a:de:5f:62:85:c4:01:2a:d9:
         00:25:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org