Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/0c1b5986cfdc9207266bb80a3a5ff6e4460e20df.roa
File:                     0c1b5986cfdc9207266bb80a3a5ff6e4460e20df.roa (raw, json)
Hash identifier:          tnIiiDd1yiKpV6G2FOqw8Xdf/TJIMxPtjkdNERiQJa4=
Subject key identifier:   7D:8F:E5:C3:B7:79:66:C7:E5:21:6E:3A:FC:C9:66:D2:36:A5:AD:4A
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       210C8B
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/0c1b5986cfdc9207266bb80a3a5ff6e4460e20df.roa
Signing time:             Fri 23 Jun 2023 14:35:25 +0000
ROA not before:           Thu 22 Jun 2023 14:35:24 +0000
ROA not after:            Mon 23 Jun 2025 14:35:24 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165899 (0x210c8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Jun 22 14:35:24 2023 GMT
            Not After : Jun 23 14:35:24 2025 GMT
        Subject: CN=0c1b5986cfdc9207266bb80a3a5ff6e4460e20df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:27:a7:b6:3d:fb:d8:ff:64:6d:81:80:5f:
                    a3:53:8c:3d:4f:c7:d6:a8:ab:92:6e:0a:ca:ae:f5:
                    9b:1c:01:9c:f8:89:38:07:04:ab:bd:72:6e:7c:56:
                    99:79:7a:50:15:26:b3:6e:6d:17:92:37:11:56:e4:
                    73:48:7f:8a:93:55:db:5e:46:d3:16:94:27:40:4c:
                    99:c2:ce:72:e5:7e:c3:03:05:72:8c:89:be:42:6a:
                    37:33:42:eb:53:b6:a6:10:04:45:e5:32:9a:81:33:
                    c3:49:e8:43:eb:c3:0e:9f:b5:fa:16:06:b5:12:39:
                    51:20:a3:3c:4c:d8:91:be:9f:cf:36:62:ba:41:7d:
                    db:11:91:3b:b5:b2:1f:0b:8d:66:85:29:72:b8:71:
                    ed:ac:91:8e:de:cf:a5:b0:10:42:a0:f4:2c:e0:59:
                    36:56:0a:c3:4b:d5:b4:6f:83:ad:0f:4d:ef:31:4f:
                    4a:f8:e7:b3:b5:05:4f:a1:ec:41:78:2a:ad:78:ac:
                    f3:83:b4:aa:fd:48:1f:5a:0b:ff:74:fb:7c:1c:a2:
                    59:36:84:18:03:8b:8f:99:70:b9:2c:27:11:cc:fb:
                    01:80:c1:9e:3c:47:eb:70:c4:a8:04:f4:78:46:08:
                    3a:36:02:29:47:ed:97:a3:9c:02:4c:08:5a:85:7b:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8F:E5:C3:B7:79:66:C7:E5:21:6E:3A:FC:C9:66:D2:36:A5:AD:4A
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/0c1b5986cfdc9207266bb80a3a5ff6e4460e20df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:23:2b:29:58:e7:1d:aa:9d:b4:29:ef:ba:f3:d8:76:a0:56:
         44:7b:6a:45:52:6a:7b:c8:0b:1c:dd:8d:22:8f:98:24:b2:86:
         84:3f:6c:22:91:8a:38:58:a9:ef:32:95:ef:8d:d8:2d:97:2f:
         c2:ce:d1:7c:29:f0:90:ee:e6:b1:56:93:82:23:e9:c3:93:05:
         11:e2:38:e5:55:73:88:79:fe:80:c6:16:b3:92:ca:49:39:ee:
         8c:92:db:80:fc:f4:8f:65:2a:96:bf:5f:65:52:8d:14:ce:f0:
         42:14:b2:c1:7e:0c:3b:d0:14:58:c4:bc:7b:b4:81:db:40:30:
         50:1d:fb:15:88:2c:53:60:a9:d2:98:67:7e:6c:12:24:9c:c9:
         8e:4e:b2:f7:ca:f6:20:ce:2f:82:38:82:f0:a4:c2:3b:3b:34:
         d3:ae:31:93:64:e6:9c:6c:f0:e3:90:45:c5:3d:03:93:be:fb:
         ce:2b:1e:22:61:47:5c:0a:2b:38:a9:a8:1c:22:18:6c:55:9c:
         20:95:d7:7e:c1:7e:df:d2:03:13:d6:76:f6:0a:61:2e:e8:5e:
         98:2a:83:09:ce:35:bc:49:56:3f:d0:54:e5:9d:fa:16:8a:ab:
         3f:ac:11:03:af:92:e5:0f:5e:2e:0d:7d:ab:1a:2e:24:e5:da:
         49:3c:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org