Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/b1cd7ab54730cd0e62101a5b7283e66e2addf6c6.roa
File:                     b1cd7ab54730cd0e62101a5b7283e66e2addf6c6.roa (raw, json)
Hash identifier:          96TX9v7WnnVfCIDVxccGIx8Ho/JuIFNjiVVtz991iQc=
Subject key identifier:   10:4E:13:F7:1A:B3:AC:9B:66:98:95:FF:BC:B1:63:4F:D8:E0:C5:8A
Certificate issuer:       /CN=f49af8394a6a993c0d1ddee49822705b80fbc0cf
Certificate serial:       043068
Authority key identifier: 4E:DE:54:7E:19:2E:CA:81:48:ED:05:2B:F6:34:97:47:D7:83:CF:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49af8394a6a993c0d1ddee49822705b80fbc0cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/b1cd7ab54730cd0e62101a5b7283e66e2addf6c6.roa
Signing time:             Wed 24 Mar 2021 14:30:29 +0000
ROA not before:           Wed 24 Mar 2021 14:30:29 +0000
ROA not after:            Tue 24 Mar 2026 14:30:29 +0000
asID:                     270070
IP address blocks:        45.185.204.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274536 (0x43068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49af8394a6a993c0d1ddee49822705b80fbc0cf
        Validity
            Not Before: Mar 24 14:30:29 2021 GMT
            Not After : Mar 24 14:30:29 2026 GMT
        Subject: CN=b1cd7ab54730cd0e62101a5b7283e66e2addf6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:b4:de:28:62:16:46:8c:f0:19:28:53:45:
                    c5:86:df:75:37:00:c9:a8:1f:4f:8b:13:fd:5d:f4:
                    d7:26:39:06:2f:a2:7f:2b:c9:12:41:49:ae:f8:1a:
                    84:d6:ae:c8:99:13:89:f5:08:45:46:09:fd:58:71:
                    f1:8f:fe:b2:bc:63:03:a7:53:9b:dc:e0:a2:44:93:
                    b0:f5:9d:10:3d:ed:81:52:77:33:13:94:4d:23:5d:
                    7b:a9:81:2e:34:04:c4:76:0a:d5:07:d1:ed:42:07:
                    45:7a:74:b3:94:7a:84:61:f7:1f:4e:56:f1:8d:38:
                    dd:7e:40:ee:5d:c6:3a:5b:48:b1:17:04:87:8e:9a:
                    ae:7f:46:3c:97:83:1e:23:60:dd:63:e9:a3:0d:d6:
                    01:e8:dc:6b:6c:1b:03:88:f0:82:4e:d8:65:5a:44:
                    7f:e6:87:40:9b:41:28:8f:d4:79:cf:62:55:45:b7:
                    7c:8d:1d:a3:93:d5:83:84:cc:0f:31:2e:ae:2c:27:
                    8e:27:6b:5f:4c:e7:2b:b6:bf:0a:9c:1c:0a:4f:1a:
                    e2:a1:35:1a:68:7d:30:cd:c7:d7:22:e9:52:07:bd:
                    91:89:47:d7:ca:2b:cb:78:b2:76:57:ee:91:eb:e5:
                    22:33:05:e1:5e:51:e5:71:f3:27:48:d8:7e:29:76:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4E:13:F7:1A:B3:AC:9B:66:98:95:FF:BC:B1:63:4F:D8:E0:C5:8A
            X509v3 Authority Key Identifier:
                keyid:4E:DE:54:7E:19:2E:CA:81:48:ED:05:2B:F6:34:97:47:D7:83:CF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49af8394a6a993c0d1ddee49822705b80fbc0cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/b1cd7ab54730cd0e62101a5b7283e66e2addf6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/f49af8394a6a993c0d1ddee49822705b80fbc0cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:50:3b:6f:47:1a:e8:c4:35:8a:0b:e3:14:42:06:b6:fc:
         32:39:ba:4a:a3:f7:5d:dd:d6:5f:d0:4c:34:df:e2:5d:62:1a:
         21:c1:e5:8a:4d:d1:14:5b:bc:0f:ee:f9:c6:10:9a:59:78:4e:
         a9:20:33:6e:ba:99:53:35:ee:27:be:8d:ee:aa:9e:44:ba:40:
         57:db:a4:2b:c1:0a:cd:e4:65:99:c8:a3:1f:8d:59:6b:e5:36:
         ca:85:4a:7b:fe:d7:4a:e1:a4:fc:f6:f5:1e:bd:78:c7:53:93:
         6a:02:fb:b9:31:20:fc:15:b6:ae:26:90:ba:92:fd:1a:e4:ef:
         04:b8:0d:07:7a:62:7f:d4:13:e1:f2:b3:24:ea:b7:f9:55:70:
         ab:af:88:03:3a:ae:a8:35:97:d8:e5:40:c0:9d:c4:a2:79:d9:
         b7:3a:92:5c:4a:f5:34:c4:cd:8c:d5:78:8a:56:f3:5d:5a:b0:
         87:1c:ee:fc:8b:d5:1b:a5:97:ab:1d:af:e4:ee:a3:02:07:f3:
         08:09:a8:cb:7d:a6:13:f4:28:2f:80:0a:b8:a7:d2:67:32:d2:
         29:4b:b6:d7:71:59:3d:43:c7:c6:39:f5:8a:cc:f0:bb:1b:c4:
         e3:9a:74:a0:02:6a:de:be:70:c4:78:e2:af:48:77:c2:d8:86:
         d7:83:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org