Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/4ec146f32a4e32f78a65716253a96865bed1ae42.roa
File:                     4ec146f32a4e32f78a65716253a96865bed1ae42.roa (raw, json)
Hash identifier:          EkpiAj2q4SCzr6bkv7vIT9WCIiXIpiiLqRviDPzTgZI=
Subject key identifier:   ED:94:EA:38:90:CE:0D:28:5B:00:11:F2:00:7D:99:13:FB:AB:5E:1B
Certificate issuer:       /CN=b5dca082181b21ea54e3fcb373c3ae36b89b6b8e
Certificate serial:       0C779A
Authority key identifier: 0F:D8:5A:F9:A2:48:0B:ED:3B:B9:AC:B7:69:BF:09:8C:0C:47:D2:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/4ec146f32a4e32f78a65716253a96865bed1ae42.roa
Signing time:             Wed 24 Mar 2021 14:42:03 +0000
ROA not before:           Wed 24 Mar 2021 14:42:03 +0000
ROA not after:            Tue 24 Mar 2026 14:42:03 +0000
asID:                     267713
IP address blocks:        45.164.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817050 (0xc779a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5dca082181b21ea54e3fcb373c3ae36b89b6b8e
        Validity
            Not Before: Mar 24 14:42:03 2021 GMT
            Not After : Mar 24 14:42:03 2026 GMT
        Subject: CN=4ec146f32a4e32f78a65716253a96865bed1ae42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:f8:a6:16:af:b8:d2:ec:87:a5:1d:c2:b0:
                    ef:63:b2:18:7c:c8:70:3e:b2:05:32:79:7b:86:3c:
                    e2:43:3b:7a:06:49:cd:1e:9e:68:ee:e9:c2:22:c1:
                    51:f3:23:eb:89:df:c8:7a:e3:90:7f:1e:fc:4a:4b:
                    5e:23:94:08:4b:ad:b5:cc:e7:ff:54:88:21:93:7f:
                    79:6f:19:eb:cc:b6:e9:63:98:d5:cc:df:fe:cf:94:
                    f4:7b:48:63:97:c9:d8:db:9f:fa:34:9e:1b:a2:58:
                    72:c3:e0:d7:9b:36:cc:7c:2b:02:60:e9:c5:cd:12:
                    dc:b0:3c:45:01:8e:a8:18:4c:3b:69:69:52:ce:c1:
                    59:cb:6f:31:e9:d3:3b:45:91:3f:98:3b:bb:2d:ca:
                    35:92:41:49:1d:c6:a3:69:1e:4e:cb:1d:f8:9c:50:
                    0c:17:8c:e8:60:1a:20:2f:68:9e:87:67:0b:50:a2:
                    63:73:df:0c:b0:28:a8:37:dd:b0:ae:99:f9:72:a6:
                    ea:21:b7:89:0f:b7:99:ff:de:f2:95:2b:52:d6:61:
                    df:f0:ac:0c:70:a7:6e:4a:4c:05:5a:40:35:70:33:
                    d5:28:77:3b:c3:e6:6f:41:20:5c:b5:17:a9:99:73:
                    8a:11:1d:54:72:c4:10:3a:00:26:9e:d2:31:95:74:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:94:EA:38:90:CE:0D:28:5B:00:11:F2:00:7D:99:13:FB:AB:5E:1B
            X509v3 Authority Key Identifier:
                keyid:0F:D8:5A:F9:A2:48:0B:ED:3B:B9:AC:B7:69:BF:09:8C:0C:47:D2:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/4ec146f32a4e32f78a65716253a96865bed1ae42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/402bcce5-6657-44dc-a9cc-a1c5657eae0e/b5dca082181b21ea54e3fcb373c3ae36b89b6b8e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:99:33:53:ae:69:69:9e:a2:35:37:54:e7:96:60:37:71:1e:
         0c:e7:9a:20:71:43:f9:2a:36:71:3b:06:07:9b:09:86:de:60:
         15:af:a9:a3:b4:77:9b:43:4f:94:28:a9:23:64:1b:50:e7:22:
         c8:ba:96:25:f4:e5:6d:0b:d6:2e:48:31:3d:68:7c:f8:ed:ea:
         7e:d9:f3:42:c9:c1:33:13:3f:44:57:d5:fe:e0:89:89:fc:b9:
         67:ba:08:e5:99:f2:bd:c3:f8:17:f5:61:f4:c1:d1:ef:6a:4d:
         7a:5f:e1:f7:82:f2:19:84:de:84:2e:1a:7b:04:d3:fd:a7:06:
         16:56:4e:a3:1d:37:c7:73:aa:19:39:d4:2c:ba:71:55:82:f2:
         06:06:f7:71:21:ca:cc:4b:5d:ed:4f:cb:66:ef:1d:e8:c2:4b:
         38:c9:84:70:c5:c9:51:f3:0d:2a:d5:06:57:ca:d8:31:cd:04:
         8f:17:e3:b9:31:c6:04:0e:a1:69:13:77:55:66:ff:a7:55:93:
         52:e9:5c:b9:14:39:5b:3d:ea:b5:33:24:22:7c:3e:8c:ec:07:
         01:97:8e:06:82:a4:16:6d:8b:22:a9:13:80:fe:bc:42:de:61:
         c5:c6:1a:be:45:57:06:ce:77:92:b3:52:9d:38:c5:49:b8:1b:
         41:5f:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org