Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/9a11f2cb4aedba20a7f1a94b32c4bc60802412dc.roa
File:                     9a11f2cb4aedba20a7f1a94b32c4bc60802412dc.roa (raw, json)
Hash identifier:          W+1VJkwvnrsxHV3Wg9AaDXVIv/vPZOgrKBn5Bbgd/ms=
Subject key identifier:   F0:FF:6E:A7:2F:31:AB:9A:BD:4F:32:2A:36:28:E2:88:1A:C9:41:AB
Certificate issuer:       /CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
Certificate serial:       0453
Authority key identifier: F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/9a11f2cb4aedba20a7f1a94b32c4bc60802412dc.roa
Signing time:             Wed 08 Mar 2023 13:26:52 +0000
ROA not before:           Tue 07 Mar 2023 13:24:52 +0000
ROA not after:            Sat 08 Mar 2025 13:24:52 +0000
asID:                     269746
IP address blocks:        45.181.204.0/24 maxlen: 24
                          45.181.205.0/24 maxlen: 24
                          45.182.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
        Validity
            Not Before: Mar  7 13:24:52 2023 GMT
            Not After : Mar  8 13:24:52 2025 GMT
        Subject: CN=9a11f2cb4aedba20a7f1a94b32c4bc60802412dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:94:1d:2e:21:5d:0b:1f:7e:84:ac:3e:ce:
                    43:5b:66:79:50:3e:1a:03:d6:5a:e9:f2:ca:13:fc:
                    e7:26:45:07:c6:3f:9e:4c:d2:e5:6b:1f:fa:ee:d9:
                    19:ee:6a:8a:3d:20:3b:93:f0:99:66:a7:c9:ab:41:
                    6f:fb:61:6c:61:49:68:ab:c0:43:a4:4b:a0:fe:68:
                    cc:0c:85:eb:35:40:28:ba:4e:4a:be:6c:e8:30:1d:
                    70:a1:84:23:6a:36:20:93:f6:da:5a:3f:6e:ac:64:
                    4e:d3:68:9b:d9:8e:55:54:8c:c8:5f:fc:ed:c8:b5:
                    cd:1d:e0:22:57:c7:07:89:80:3b:b9:ef:ff:9c:ed:
                    7e:33:55:61:3d:8e:fb:6d:fb:d1:7c:64:56:d8:6b:
                    39:22:e8:79:c1:45:d1:43:88:83:2d:eb:0e:92:6a:
                    54:3f:b3:44:bc:b3:e2:a3:6b:3b:4e:cc:7d:a1:25:
                    81:62:bb:e3:89:78:cf:f4:89:61:23:b6:36:04:fc:
                    e4:0d:29:1d:56:05:e2:99:4f:46:b2:50:cf:27:10:
                    71:87:e9:fd:db:f1:44:97:50:26:0d:2b:4b:87:7d:
                    c6:7e:34:e5:fb:04:3a:50:5a:43:7b:db:44:1e:c0:
                    d2:9b:fa:f7:57:ed:89:1d:fa:51:a4:25:43:76:80:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FF:6E:A7:2F:31:AB:9A:BD:4F:32:2A:36:28:E2:88:1A:C9:41:AB
            X509v3 Authority Key Identifier:
                keyid:F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/9a11f2cb4aedba20a7f1a94b32c4bc60802412dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23
                  45.182.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:49:52:7f:84:64:ac:1a:f1:ff:02:fd:70:b8:a8:84:70:43:
         43:f0:4b:c0:a2:67:56:a7:20:f3:21:1f:91:34:5f:6c:7e:bf:
         81:e5:b6:d1:c0:8e:83:f3:d2:94:a3:7e:39:a6:2e:10:1f:27:
         d2:c8:9d:e9:e2:ac:e7:45:8a:93:8b:9c:e7:67:10:d1:7c:44:
         f4:4a:c6:91:24:45:86:9a:c1:78:64:02:4d:c6:ee:ce:de:5b:
         ce:98:8e:f0:ae:27:68:bf:49:d4:38:9d:a5:88:6f:30:f0:e2:
         a3:7c:61:f9:ba:82:c7:17:19:68:8e:7a:0d:64:c6:73:1b:59:
         45:b1:1c:3d:bb:8b:8f:99:20:1d:62:a9:68:95:84:4e:10:47:
         9c:96:22:53:2c:db:47:5e:e5:1b:04:94:66:2b:b8:a1:f7:e4:
         b9:e2:1e:98:21:43:4b:6a:35:11:3c:06:7b:d6:1b:d6:d7:97:
         c4:0a:aa:98:d9:8d:31:74:06:27:1f:0d:9c:b0:52:2d:37:c7:
         7d:7b:99:38:21:2b:b5:5e:c9:19:4a:03:8c:f4:34:2a:20:95:
         8f:e6:b9:e6:b7:1c:38:1b:85:ae:29:9a:59:34:53:af:45:c2:
         a2:7a:48:27:8e:96:39:e3:a2:6d:5e:5b:23:96:a3:42:60:be:
         b7:d3:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org