Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/27e0cc74a406d012be64541c6145472e5c265de5.roa
File:                     27e0cc74a406d012be64541c6145472e5c265de5.roa (raw, json)
Hash identifier:          lw9wxzkCTcXRBpfUNF8wyNNEprGQnE25JBTW1X2ei7c=
Subject key identifier:   F2:6E:80:97:ED:56:36:91:EE:2A:3A:1C:D4:A3:1A:DB:18:C0:5C:34
Certificate issuer:       /CN=1a618361eac522f65082711b4397accad057fff5
Certificate serial:       122FF5
Authority key identifier: 9E:4D:4A:13:DA:54:3E:64:6F:85:0F:8F:3C:5B:FA:9B:02:60:FA:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a618361eac522f65082711b4397accad057fff5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/27e0cc74a406d012be64541c6145472e5c265de5.roa
Signing time:             Thu 29 Jun 2023 08:30:04 +0000
ROA not before:           Wed 28 Jun 2023 08:30:04 +0000
ROA not after:            Fri 27 Jun 2025 08:30:04 +0000
asID:                     265680
IP address blocks:        45.5.76.0/24 maxlen: 24
                          45.5.77.0/24 maxlen: 24
                          45.5.78.0/24 maxlen: 24
                          45.5.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191925 (0x122ff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a618361eac522f65082711b4397accad057fff5
        Validity
            Not Before: Jun 28 08:30:04 2023 GMT
            Not After : Jun 27 08:30:04 2025 GMT
        Subject: CN=27e0cc74a406d012be64541c6145472e5c265de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:7d:3b:70:df:ea:1a:5a:89:1f:51:03:6c:
                    7f:06:fb:de:45:f6:95:8d:f0:eb:6c:7f:6a:5e:ea:
                    19:c7:f4:8d:ea:c9:ae:73:9b:3a:a2:c6:d4:2f:fa:
                    f6:e9:2f:f7:09:d7:24:5e:bb:6d:4e:c1:49:c5:36:
                    41:76:1e:2a:ce:7a:68:e9:fb:3f:a9:52:99:1c:f8:
                    7d:c8:ba:44:0c:ed:a8:c2:e6:d3:6c:0f:59:a6:19:
                    75:e0:6d:2a:36:5e:4f:5a:dc:1e:fb:92:33:cf:d6:
                    6e:cc:46:f4:1a:8b:c8:bd:39:ac:1e:98:04:bb:21:
                    5c:ff:cd:f1:ae:88:b0:13:84:e4:15:ef:5c:cb:43:
                    89:a2:17:9e:b7:4d:9b:09:c1:c0:c6:d7:25:52:53:
                    71:63:3b:af:32:4b:37:47:ac:c2:86:2d:d5:5a:98:
                    8b:75:53:39:42:e9:3d:31:39:7f:5f:93:bd:ad:54:
                    c9:f6:82:78:75:5f:c8:28:3e:ce:20:47:88:f9:d4:
                    d4:1e:9e:c8:32:0f:19:cb:10:d7:b6:05:68:87:f1:
                    e3:8d:f8:3f:70:39:bd:89:be:78:34:79:72:ce:31:
                    0b:1a:9e:56:27:c3:14:af:cd:33:19:36:5e:f1:38:
                    f4:ac:06:5a:00:49:81:73:58:93:49:45:5e:93:81:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:80:97:ED:56:36:91:EE:2A:3A:1C:D4:A3:1A:DB:18:C0:5C:34
            X509v3 Authority Key Identifier:
                keyid:9E:4D:4A:13:DA:54:3E:64:6F:85:0F:8F:3C:5B:FA:9B:02:60:FA:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a618361eac522f65082711b4397accad057fff5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/27e0cc74a406d012be64541c6145472e5c265de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/1a618361eac522f65082711b4397accad057fff5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:07:7b:84:de:73:77:1e:ba:1a:89:6f:55:35:56:23:f2:6f:
         11:9e:a6:3f:b6:73:6c:38:39:cc:9d:0f:fa:0f:94:9e:ea:20:
         ad:f3:62:93:fa:bc:0c:1d:51:84:e0:92:d9:0e:2a:77:69:a4:
         97:67:e1:df:85:35:d8:a8:f2:b5:f5:c9:07:54:c8:3f:cf:52:
         ea:11:a7:aa:13:59:f4:ab:90:31:ee:6e:34:1b:f6:ca:21:cd:
         a5:dc:b6:ef:c9:f3:e4:03:39:b4:f9:35:20:d9:61:0a:1c:93:
         65:86:7b:dd:5e:a2:8f:ad:04:4c:90:df:ac:36:af:98:e7:b0:
         e6:ce:23:12:cb:45:3b:f5:6e:36:4e:e0:3b:78:c2:bf:00:80:
         6c:88:f3:1d:b9:d4:c4:cd:f9:4e:dc:52:c2:ab:79:a4:18:a3:
         58:10:44:a5:cc:4f:a3:1d:83:12:c2:e1:5d:4e:e0:b4:c9:f6:
         39:f1:cb:48:d8:9e:36:87:74:09:bd:e8:77:d1:e7:94:63:b7:
         41:90:9d:f6:05:b4:51:d2:e5:b4:c8:c3:6f:ae:c0:bf:cb:00:
         58:4e:91:ed:55:65:63:81:20:e3:5d:dd:76:af:65:d6:57:0b:
         ec:54:f7:d9:c5:04:c9:01:52:9e:8a:a1:97:5a:0e:97:68:48:
         3b:8e:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org