Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/a19725ba4f6f2bb41d4a95787d9b6a7bd5946439.roa
File:                     a19725ba4f6f2bb41d4a95787d9b6a7bd5946439.roa (raw, json)
Hash identifier:          hkG75jdlCHDm3qt5GuU6tQYqiSsAUURTjvNaNJWExQE=
Subject key identifier:   5E:A9:29:D9:A8:E3:A2:BA:CB:EF:BF:F5:64:6B:E6:1C:DD:51:8D:2F
Certificate issuer:       /CN=f48a793247cd1f645923603f197e3d287d051040
Certificate serial:       0C3A6D
Authority key identifier: 79:3A:BC:6F:D4:8E:32:89:36:F7:E8:BA:DB:7E:2A:91:8E:39:B9:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f48a793247cd1f645923603f197e3d287d051040.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/a19725ba4f6f2bb41d4a95787d9b6a7bd5946439.roa
Signing time:             Wed 24 Mar 2021 14:46:10 +0000
ROA not before:           Wed 24 Mar 2021 14:46:10 +0000
ROA not after:            Tue 24 Mar 2026 14:46:10 +0000
asID:                     267800
IP address blocks:        45.172.11.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801389 (0xc3a6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48a793247cd1f645923603f197e3d287d051040
        Validity
            Not Before: Mar 24 14:46:10 2021 GMT
            Not After : Mar 24 14:46:10 2026 GMT
        Subject: CN=a19725ba4f6f2bb41d4a95787d9b6a7bd5946439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:68:93:04:8d:16:60:76:bc:47:ff:7e:1d:
                    aa:7d:72:c2:92:66:cd:ec:eb:b9:73:97:f0:89:d3:
                    0a:16:74:45:1a:87:d7:6b:e3:10:28:06:79:ef:1b:
                    bd:b6:45:92:b5:a8:41:2f:ca:d0:31:bd:fb:c0:b4:
                    ac:68:7e:0f:e9:af:1c:3e:51:6e:a1:18:76:3d:90:
                    c0:24:35:54:39:df:56:53:33:1e:6c:6e:52:ff:95:
                    06:b0:27:70:cd:d5:72:b8:9f:96:6c:60:a9:9c:85:
                    de:5f:72:a1:a8:6e:da:2f:d1:0d:83:de:72:0e:63:
                    40:d5:7c:ea:61:6d:97:fd:c2:aa:f6:e4:65:83:4c:
                    35:20:a1:7f:56:41:0e:d8:21:e0:a4:59:c4:d0:f5:
                    bc:80:de:af:a3:90:43:ae:be:33:55:de:f2:f2:de:
                    50:3f:59:1b:65:04:ba:b4:dd:1e:e4:a1:0d:7a:14:
                    f2:3e:85:6c:3e:1a:ed:13:6a:d2:b7:ff:0f:15:fa:
                    e4:26:d0:ca:15:2d:8f:3d:e1:48:fc:4c:c0:13:e5:
                    dd:5a:e6:00:89:ae:14:33:e8:eb:85:55:e0:8c:05:
                    59:75:c7:cc:fd:3b:68:45:6e:16:4b:03:5a:24:1b:
                    f7:8d:30:e5:69:b2:4b:9b:5f:73:f1:cf:44:8b:0f:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A9:29:D9:A8:E3:A2:BA:CB:EF:BF:F5:64:6B:E6:1C:DD:51:8D:2F
            X509v3 Authority Key Identifier:
                keyid:79:3A:BC:6F:D4:8E:32:89:36:F7:E8:BA:DB:7E:2A:91:8E:39:B9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f48a793247cd1f645923603f197e3d287d051040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/a19725ba4f6f2bb41d4a95787d9b6a7bd5946439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dd887bd-0ea8-459b-b945-daea7ada6183/f48a793247cd1f645923603f197e3d287d051040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:80:b7:78:f0:9a:a5:9a:4b:b9:0f:80:17:41:74:f6:f8:e1:
         46:6e:91:74:91:18:3d:d3:95:57:41:64:fb:d8:7c:7b:fb:af:
         b9:5a:2b:85:01:5a:95:40:74:6d:ad:98:f3:90:63:70:70:7d:
         2d:9a:a2:2b:71:5b:17:cf:2b:bb:ea:c1:90:dd:4b:ba:2e:cf:
         5b:d3:30:5b:d4:02:70:09:1c:e5:c0:02:be:31:d5:b9:cb:65:
         ea:d2:f3:7f:f0:5c:d0:80:1d:02:13:2a:c3:7c:fa:e8:14:73:
         2a:1a:cf:f9:6a:1d:a6:a3:7e:a4:7e:5b:23:1a:d7:5d:50:04:
         f4:3c:26:3b:70:c6:93:11:c0:a3:c1:2a:6f:3b:77:29:f6:e9:
         07:ea:a1:22:b5:6a:c1:2b:eb:54:98:1a:53:46:7a:e5:7d:1a:
         80:48:12:40:3a:30:70:83:02:bd:9f:7d:d2:27:d5:d3:0b:03:
         17:84:e7:ea:8a:ed:34:6c:79:9d:16:85:fe:81:6f:02:64:fb:
         bb:33:41:99:dc:09:08:4f:a4:8c:b3:c6:26:e4:0e:48:93:6b:
         8c:a9:39:7e:a0:44:09:07:45:16:3c:33:2a:ab:cf:64:bd:13:
         02:85:b7:40:26:f6:1f:86:ab:80:24:b1:fa:24:a3:8a:95:f5:
         0e:66:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org