Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/83fd128e8eb550c931e282a4f9d2566c7faf7110.roa
File:                     83fd128e8eb550c931e282a4f9d2566c7faf7110.roa (raw, json)
Hash identifier:          8I7aBoZbwWQXGBw2jJUWkgnWuukdnJaLbkujT9DANLA=
Subject key identifier:   35:C4:CB:10:B7:96:DB:4F:58:C5:C2:04:8D:89:30:C8:2E:68:AC:64
Certificate issuer:       /CN=4b8b57b22334a0b12bef09679148c1c681fc8149
Certificate serial:       1BE431
Authority key identifier: 97:A7:0D:2F:FD:B3:3C:24:7D:48:B4:2E:CB:CF:94:D5:41:EE:E2:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b8b57b22334a0b12bef09679148c1c681fc8149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/83fd128e8eb550c931e282a4f9d2566c7faf7110.roa
Signing time:             Mon 17 Oct 2022 12:24:45 +0000
ROA not before:           Thu 13 Oct 2022 12:23:15 +0000
ROA not after:            Thu 17 Oct 2024 12:23:15 +0000
asID:                     266685
IP address blocks:        45.228.16.0/24 maxlen: 24
                          45.228.17.0/24 maxlen: 24
                          45.228.18.0/24 maxlen: 24
                          45.228.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827889 (0x1be431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8b57b22334a0b12bef09679148c1c681fc8149
        Validity
            Not Before: Oct 13 12:23:15 2022 GMT
            Not After : Oct 17 12:23:15 2024 GMT
        Subject: CN=83fd128e8eb550c931e282a4f9d2566c7faf7110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:43:6c:0f:59:19:1b:51:05:af:82:d8:b4:
                    96:a5:9b:8f:88:e1:ba:85:c4:b9:52:1e:95:b6:ee:
                    47:24:d8:3f:7c:b3:bd:bf:ee:74:d4:74:71:cf:c4:
                    8c:11:d4:ce:97:ba:35:b4:74:75:0e:51:06:45:61:
                    47:af:a9:96:ae:eb:6c:0c:ad:a6:19:70:76:58:1a:
                    5d:51:a9:69:ba:f9:24:5b:ee:af:3f:13:ec:99:96:
                    7d:21:1b:59:55:a6:6d:ee:a1:8f:1d:c2:eb:6d:3d:
                    5a:59:f8:04:5f:35:fe:30:fe:a5:fb:fd:b1:63:a0:
                    92:b0:5d:c6:2c:b7:9d:4e:f2:7e:6c:89:d5:ce:66:
                    0c:b7:9e:f9:77:12:57:36:17:20:c0:23:94:59:73:
                    21:e7:ff:2a:58:cf:c4:bd:14:e5:d1:42:8b:86:38:
                    95:e9:8d:3e:a2:71:7c:e6:e6:af:81:14:cb:91:6a:
                    1f:dc:23:a6:d6:66:56:bb:df:29:2c:95:45:99:7f:
                    f7:d5:68:d5:f2:76:83:e2:1c:79:e1:83:cd:82:45:
                    0d:60:27:c5:fb:18:8a:3e:fb:a6:5c:19:6d:06:5e:
                    d7:2b:76:2d:31:f1:cd:7a:d8:5c:fb:67:00:5b:09:
                    89:cd:7d:9b:21:58:b8:4a:0c:17:1d:d0:d5:19:f1:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:CB:10:B7:96:DB:4F:58:C5:C2:04:8D:89:30:C8:2E:68:AC:64
            X509v3 Authority Key Identifier:
                keyid:97:A7:0D:2F:FD:B3:3C:24:7D:48:B4:2E:CB:CF:94:D5:41:EE:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b8b57b22334a0b12bef09679148c1c681fc8149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/83fd128e8eb550c931e282a4f9d2566c7faf7110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/4b8b57b22334a0b12bef09679148c1c681fc8149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:72:d3:a1:12:aa:1c:41:67:8d:95:4f:a4:c9:2e:f3:ce:d6:
         e2:00:82:e2:07:90:66:49:cf:6e:f4:a1:0d:4c:95:12:e2:48:
         3a:34:cf:0c:d0:86:3e:39:49:c7:38:d0:53:12:74:c6:79:a0:
         79:4b:99:a7:76:db:f7:f4:44:d5:93:1d:f6:b2:09:f9:c8:3d:
         46:d4:7e:4c:7e:1c:35:12:66:db:4d:de:8d:54:90:bb:f4:b9:
         b4:a1:25:e1:ba:50:06:53:1e:a7:16:66:83:ba:51:bd:6d:40:
         25:82:08:54:d8:e7:a2:e0:6d:30:04:ff:c6:ae:bb:95:fd:8e:
         64:45:95:63:bc:fc:d9:d7:4a:c6:ef:19:f5:ca:ea:d4:ad:83:
         67:aa:7d:64:83:bd:1b:d3:7f:2f:c1:c8:2d:3b:70:06:cd:12:
         18:e4:bd:69:ca:2f:18:56:c3:a9:08:e8:6f:d2:0a:1b:25:b5:
         cb:36:0d:9b:d2:31:77:4f:06:bc:84:2f:5d:e3:22:39:41:46:
         70:b3:a2:f0:6c:b8:58:82:87:88:a2:e8:5a:ba:d9:74:b7:da:
         d8:f8:15:a0:76:7f:bb:09:63:fb:12:8f:32:0f:34:a8:64:bd:
         3a:6a:eb:25:d8:80:45:5a:52:1a:2b:b7:1c:9f:a4:6d:d8:68:
         11:f1:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org