Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/c861b227f3679a354c6ead8020a134dbb816270e.roa
File:                     c861b227f3679a354c6ead8020a134dbb816270e.roa (raw, json)
Hash identifier:          YFz1sS1jXpgnn/qhQWlPZVvymz5mOYYiQdb4/RJOXYg=
Subject key identifier:   29:29:D4:FF:18:C5:34:CF:C1:C0:07:61:33:89:9E:DA:5B:25:A1:46
Certificate issuer:       /CN=58d4d9b526509407bcd0b39b8d13b0c940d11a2e
Certificate serial:       14C9D9
Authority key identifier: 4E:61:CF:E0:E4:F7:03:42:5B:39:DD:7C:1C:1A:D6:75:06:29:8C:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/c861b227f3679a354c6ead8020a134dbb816270e.roa
Signing time:             Fri 29 Jul 2022 01:26:28 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269853
IP address blocks:        45.189.56.0/22 maxlen: 24
                          45.171.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362393 (0x14c9d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d4d9b526509407bcd0b39b8d13b0c940d11a2e
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c861b227f3679a354c6ead8020a134dbb816270e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:eb:65:28:9a:fa:25:90:3b:4d:06:c4:9c:
                    fd:fb:80:ce:c1:98:ad:d2:64:38:a5:23:74:d7:2a:
                    0b:3c:2f:9f:36:08:54:ee:88:85:f9:2b:f7:67:98:
                    c1:14:48:dd:66:73:48:f9:e1:7e:0d:d8:0c:e1:e9:
                    1d:1d:a0:44:6c:35:68:6e:3e:81:84:7c:1c:7b:6d:
                    80:68:9d:c9:85:1c:f4:b0:d7:29:55:ae:8a:30:5b:
                    d1:f1:51:67:28:1a:e3:fc:b4:75:60:5b:4e:28:cd:
                    8d:9c:33:fc:cd:42:be:59:e6:a5:95:4d:34:a4:b3:
                    81:8a:6c:c8:d3:9e:fc:8b:14:bf:a5:6b:6e:de:c9:
                    af:a0:d8:91:6b:a9:73:28:c1:62:ba:0f:cd:7e:b1:
                    5a:1a:56:3f:9d:c1:3b:17:c7:43:5e:57:33:89:42:
                    a2:26:1e:0e:3e:92:7f:71:bc:f4:f7:ec:25:44:85:
                    70:f1:72:9f:2b:70:05:85:5d:d7:c5:d4:17:24:1d:
                    f8:8d:5c:c6:d9:68:88:86:ba:3e:7b:4d:9d:6f:2e:
                    5f:23:a5:19:40:3b:38:44:6e:2d:25:95:0f:13:9a:
                    2a:c9:b8:95:91:4e:b4:78:b2:8c:c3:da:cc:8e:7f:
                    f4:c8:14:de:76:04:17:6d:16:90:d5:f5:c3:9c:52:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:D4:FF:18:C5:34:CF:C1:C0:07:61:33:89:9E:DA:5B:25:A1:46
            X509v3 Authority Key Identifier:
                keyid:4E:61:CF:E0:E4:F7:03:42:5B:39:DD:7C:1C:1A:D6:75:06:29:8C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/c861b227f3679a354c6ead8020a134dbb816270e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.120.0/23
                  45.189.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:9c:9c:80:3d:da:72:20:77:61:df:c8:8a:58:bb:e4:81:
         a4:98:cf:ee:3d:df:69:51:4d:b1:c2:67:3e:fa:04:0f:02:14:
         00:42:c6:b6:9b:a6:78:1f:4a:05:47:89:c9:d1:92:fd:85:b0:
         4a:e1:e4:7d:30:0c:ee:d4:28:7e:c8:b0:2e:bc:e6:0c:28:e9:
         1b:91:97:5a:d0:82:c0:6a:d0:07:25:ad:da:a3:c3:14:10:92:
         d2:d1:6c:32:2b:16:da:8a:10:74:dc:2c:ef:c5:5f:3c:a3:7b:
         fa:9b:82:8a:71:c4:1a:88:0a:10:d3:e3:45:6b:0a:13:1b:c3:
         4b:bd:c3:bf:82:41:44:b1:14:6c:71:ce:86:1b:58:49:ac:33:
         b7:df:a5:16:9e:34:07:ea:dd:a4:ab:e9:87:2e:45:4c:79:39:
         66:85:8d:d7:f7:3b:e1:b9:e8:57:85:53:9a:6d:a5:1f:ff:b3:
         7e:39:3d:d7:8b:a7:b3:a2:8a:7d:2e:c1:72:21:1c:0f:80:d4:
         61:e8:99:69:e3:a2:7e:3f:67:2b:24:62:99:ca:d2:d8:7d:06:
         d0:75:3d:d5:65:3c:59:9c:a7:a6:0a:91:03:e9:33:b5:41:8e:
         ea:d1:27:b1:a4:77:75:07:77:03:8d:80:db:07:f0:31:14:71:
         2e:c5:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org