Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/fe0d68945c18357a5cfd6b7ac3213ba56d550c04.roa
File:                     fe0d68945c18357a5cfd6b7ac3213ba56d550c04.roa (raw, json)
Hash identifier:          nTEm5XNf5GmUeWCFwDsD/flWbqfBVa3Oj+tXEIVv4wc=
Subject key identifier:   DA:53:E0:09:30:8F:1A:4C:A3:D1:6C:38:63:B3:A3:3E:E6:56:E0:76
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       248604
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/fe0d68945c18357a5cfd6b7ac3213ba56d550c04.roa
Signing time:             Wed 31 Jan 2024 00:48:14 +0000
ROA not before:           Wed 31 Jan 2024 00:48:14 +0000
ROA not after:            Sat 31 Jan 2026 00:48:14 +0000
asID:                     269893
IP address blocks:        45.191.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393604 (0x248604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Jan 31 00:48:14 2024 GMT
            Not After : Jan 31 00:48:14 2026 GMT
        Subject: CN=fe0d68945c18357a5cfd6b7ac3213ba56d550c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:6f:5d:48:62:34:58:44:c9:a5:2a:65:39:
                    a1:7f:e9:92:47:b2:fe:64:d7:99:a9:00:a4:6f:63:
                    be:05:34:08:15:87:c0:01:aa:ef:d0:96:b5:2b:4a:
                    74:37:1a:ba:83:50:70:37:97:09:0f:54:7c:c2:6f:
                    cf:56:b1:15:cd:62:c5:0b:01:ef:78:80:e2:3b:a8:
                    61:66:4e:c6:89:a5:71:c5:18:ab:b0:86:63:90:bb:
                    26:2b:f7:35:64:b8:c5:3d:eb:92:b0:41:58:ff:6b:
                    68:2a:15:79:b6:a1:47:21:44:a5:77:2c:2a:44:02:
                    ce:d3:aa:95:b7:77:2c:6c:5c:b6:5b:7a:dd:75:56:
                    97:e9:e7:92:3a:67:24:cd:a2:ab:1f:29:aa:62:56:
                    c0:75:6c:d4:85:b0:83:30:20:f3:4e:38:e1:e3:c3:
                    2e:94:56:b0:32:73:9e:1a:10:88:12:ed:d6:98:b7:
                    5f:09:71:8c:4c:4f:8b:45:9b:4e:9d:52:e3:84:6a:
                    33:76:65:72:fd:72:79:27:fb:3e:e8:52:7d:97:40:
                    22:fa:6b:78:e0:80:4f:47:d4:53:63:6a:a4:c2:56:
                    8f:7c:66:e4:02:f8:71:44:63:11:5b:72:ac:d9:1a:
                    ba:e0:5b:e1:0d:4c:2e:ff:14:ad:e4:35:05:40:36:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:E0:09:30:8F:1A:4C:A3:D1:6C:38:63:B3:A3:3E:E6:56:E0:76
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/fe0d68945c18357a5cfd6b7ac3213ba56d550c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:8e:14:b0:80:42:ac:f3:c4:3e:c2:a7:72:2e:6b:55:d6:
         87:6b:30:c3:5d:b0:cc:07:ef:b5:94:2e:7c:5e:8f:04:f0:6e:
         d6:43:36:d2:4e:4a:2d:77:75:07:13:86:17:01:d6:d4:43:a9:
         e2:26:3b:90:ae:d5:47:18:94:dc:3f:21:71:3a:6d:68:ce:20:
         96:54:86:f2:82:22:bf:24:13:0f:fa:ba:67:af:a2:3d:96:87:
         83:16:29:6d:8b:ad:22:4e:e5:a4:25:77:10:da:b4:fd:d9:3f:
         b2:ae:97:5f:32:3e:f8:53:6c:fd:c8:5a:66:0d:00:b0:88:83:
         ad:5b:54:9f:ed:a3:11:85:d8:9d:6d:30:52:43:30:bc:b7:04:
         3c:ae:b7:9d:66:94:a8:f1:2d:e1:f8:65:8a:fd:fc:53:43:7b:
         68:78:89:43:d7:7e:cb:28:dd:20:9f:0d:64:bd:e7:de:d6:88:
         b4:fe:8f:22:4d:8a:b9:93:cf:27:35:c0:11:19:51:c8:60:75:
         51:08:71:c5:1a:ee:77:22:b4:ba:fc:2c:de:b0:4f:6f:2a:c1:
         40:fd:48:b9:4b:f2:1e:9d:ce:c4:6c:b6:a7:24:75:f3:d0:a6:
         ca:8a:ac:36:e3:aa:60:f5:4f:2e:51:08:18:8e:7f:cf:10:40:
         7b:3e:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org