Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ab1e41c-e929-423a-a5f3-6188daa221fd/ddb696ac7094583cd0116aea3c2e69de6867727c.roa
File:                     ddb696ac7094583cd0116aea3c2e69de6867727c.roa (raw, json)
Hash identifier:          sDQzJmaRKjCbMLDnQ5mAPSE4QCSQhKqQDoZTOD0lHX0=
Subject key identifier:   50:1B:C4:94:34:3D:C3:E3:C0:FD:06:85:69:94:C2:1E:22:4A:E5:F5
Certificate issuer:       /CN=8980279cf5f954eeda0f4da7dc7224d85bf0ee56
Certificate serial:       1599
Authority key identifier: 23:95:28:53:18:E6:DD:72:B8:98:0A:8E:40:B0:76:6F:67:3A:0F:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8980279cf5f954eeda0f4da7dc7224d85bf0ee56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ab1e41c-e929-423a-a5f3-6188daa221fd/ddb696ac7094583cd0116aea3c2e69de6867727c.roa
Signing time:             Thu 25 May 2023 21:35:45 +0000
ROA not before:           Wed 24 May 2023 21:35:45 +0000
ROA not after:            Sun 25 May 2025 21:35:45 +0000
asID:                     265871
IP address blocks:        45.227.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5529 (0x1599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8980279cf5f954eeda0f4da7dc7224d85bf0ee56
        Validity
            Not Before: May 24 21:35:45 2023 GMT
            Not After : May 25 21:35:45 2025 GMT
        Subject: CN=ddb696ac7094583cd0116aea3c2e69de6867727c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:54:a6:a9:6a:f0:f8:5d:61:5d:41:86:dc:
                    9e:fb:34:09:9a:aa:6f:a2:17:8d:5b:b0:60:46:96:
                    b3:d5:90:31:44:2e:ac:4a:14:2c:d8:68:d3:a8:ba:
                    20:15:aa:3d:f6:7e:8c:54:f3:72:38:77:a2:fe:fc:
                    80:bc:39:d3:47:af:3b:db:28:25:79:89:92:2e:b2:
                    25:05:d7:d7:fe:9b:91:ab:7f:99:fb:46:cc:e0:99:
                    25:7d:d8:6f:60:6e:a5:c6:7c:91:d9:83:2f:31:64:
                    c1:20:4c:ad:20:7c:5a:75:41:23:7a:33:5a:72:7b:
                    22:88:c5:71:e2:05:0d:32:7a:d4:c4:2e:63:fd:64:
                    03:b4:48:1d:f2:c9:fe:b6:d2:cb:d1:36:80:7b:45:
                    d6:0a:2f:7e:f2:94:27:d4:d0:a1:55:e4:e7:0f:16:
                    87:90:e5:42:8a:b1:55:83:a8:d3:9a:a2:bb:85:db:
                    1e:13:36:f2:33:8b:f2:a2:98:1e:2d:ac:b1:dd:c0:
                    d7:0f:ab:de:c6:52:80:dd:f3:ce:0c:26:a6:a4:c4:
                    f6:4c:62:9f:4c:a2:68:3a:64:af:b0:c1:e6:a2:4a:
                    4b:4d:bd:37:e1:61:2d:cc:a1:1f:31:b8:a3:2e:ee:
                    99:89:2f:78:bd:58:e0:43:57:9d:61:e1:f7:9c:7f:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1B:C4:94:34:3D:C3:E3:C0:FD:06:85:69:94:C2:1E:22:4A:E5:F5
            X509v3 Authority Key Identifier:
                keyid:23:95:28:53:18:E6:DD:72:B8:98:0A:8E:40:B0:76:6F:67:3A:0F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8980279cf5f954eeda0f4da7dc7224d85bf0ee56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1e41c-e929-423a-a5f3-6188daa221fd/ddb696ac7094583cd0116aea3c2e69de6867727c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ab1e41c-e929-423a-a5f3-6188daa221fd/8980279cf5f954eeda0f4da7dc7224d85bf0ee56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:05:9e:bb:10:57:59:0e:1d:8e:ab:7f:83:8b:31:10:af:
         db:1c:63:fd:9b:a1:91:16:99:92:14:7d:c1:ec:ed:64:d1:6d:
         f4:85:1d:ff:bc:24:59:39:7b:24:a6:8a:4d:6e:88:33:23:5c:
         dc:37:d3:5f:a1:27:98:32:16:37:1f:f9:77:87:14:b7:e5:84:
         19:de:30:25:58:a6:f1:03:0c:b7:73:11:62:bf:46:49:f3:71:
         26:ec:20:5c:c0:84:6c:48:3e:4a:56:e3:c3:ca:ae:77:a1:53:
         d3:7b:ad:30:23:95:15:0a:89:c6:f6:37:74:33:79:5f:89:cc:
         f7:56:ba:74:5a:80:89:ad:0c:25:28:8c:75:d7:73:4a:84:2e:
         a8:be:83:44:21:80:fa:7b:c3:18:cb:2c:cb:0c:be:b9:15:86:
         73:12:a6:83:68:fe:c7:c8:98:3b:0a:75:d0:0f:a1:d6:4a:14:
         b7:d8:4e:bd:92:b7:b1:f2:05:79:fd:78:be:19:f3:bc:b3:36:
         3e:ad:dc:2d:62:1d:15:6b:4d:31:24:cd:4d:98:38:a3:00:a0:
         a5:bd:35:22:22:20:9b:f9:71:0d:6f:01:4a:55:0c:16:7a:b8:
         e6:3f:91:f4:9b:bd:5d:89:9f:a9:08:90:04:3c:79:3b:14:48:
         54:da:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org