Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/1589da948039869457afd58be33afaca31a8746e.roa
File:                     1589da948039869457afd58be33afaca31a8746e.roa (raw, json)
Hash identifier:          CAsXWOVa8E6LKGW8pfnXNOSsJnLi8C5edvFwbsimMxU=
Subject key identifier:   D5:F0:9B:44:70:FA:85:BB:A7:24:24:08:1B:54:76:A3:1E:09:01:33
Certificate issuer:       /CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
Certificate serial:       1EF1
Authority key identifier: EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/1589da948039869457afd58be33afaca31a8746e.roa
Signing time:             Wed 25 May 2022 18:44:43 +0000
ROA not before:           Wed 25 May 2022 03:00:00 +0000
ROA not after:            Sat 25 May 2024 03:00:00 +0000
asID:                     272136
IP address blocks:        45.68.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7921 (0x1ef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
        Validity
            Not Before: May 25 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2024 GMT
        Subject: CN=1589da948039869457afd58be33afaca31a8746e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:08:4d:ae:bf:fa:a9:10:c0:3a:d1:91:f4:
                    5d:d6:c2:f2:be:01:34:f3:49:cb:49:ef:6b:b0:30:
                    b3:06:10:32:40:65:9a:d7:9a:ab:4f:96:4b:49:b6:
                    40:72:3d:09:70:10:92:06:8a:0e:50:bc:61:5b:ed:
                    89:cf:ba:18:ad:12:9a:17:b9:ea:fb:1a:d4:a3:f8:
                    6e:bc:89:e9:98:5f:13:31:5a:50:7b:c4:05:42:d0:
                    d8:3d:27:3a:96:c1:b6:1a:88:72:da:00:2f:83:61:
                    0c:e9:e7:54:c5:35:da:c7:21:77:1f:22:42:80:b0:
                    46:eb:38:c2:c2:4c:74:e6:38:a7:37:6e:e2:9d:64:
                    ec:23:5a:0a:69:c4:d1:1a:d5:9a:05:aa:8d:cd:c8:
                    30:37:f1:53:f6:79:fd:78:dd:c8:23:fc:48:a0:fd:
                    cb:25:d7:73:0f:d5:94:57:e4:e6:54:c9:95:93:b5:
                    97:00:7c:81:e2:87:91:b4:fe:cf:9a:1a:90:e3:40:
                    71:54:60:3c:65:48:4d:e4:e0:d0:8b:0a:a9:91:ed:
                    c9:0f:f3:20:1a:24:10:0b:36:06:06:42:d7:a0:43:
                    29:1d:52:86:73:f9:11:03:e7:6a:fe:03:4b:0c:cf:
                    ae:d0:93:10:c6:27:34:7a:8a:6d:30:41:b7:3e:f1:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F0:9B:44:70:FA:85:BB:A7:24:24:08:1B:54:76:A3:1E:09:01:33
            X509v3 Authority Key Identifier:
                keyid:EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/1589da948039869457afd58be33afaca31a8746e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5b:9e:be:2d:71:45:86:e1:64:ca:33:a1:3b:d1:05:b3:84:
         1e:2a:63:0f:7e:52:d7:26:55:30:d9:fd:dd:f5:7e:1c:44:f2:
         34:76:7e:a1:a9:12:21:79:f1:b1:a5:6f:3e:79:5c:80:64:d9:
         4c:8a:0e:e3:55:03:10:84:9a:3d:f6:43:d6:f8:89:01:05:73:
         8f:d4:ec:e8:fa:bc:1e:95:65:ed:e0:b4:04:b3:e6:8a:0f:03:
         e4:e2:66:ff:81:a6:52:73:df:b6:d9:50:22:43:4f:0c:1b:47:
         33:4c:14:54:32:9e:8b:b0:d9:0b:cb:ab:6b:cd:8f:f3:d5:d2:
         37:1e:85:00:a9:21:c4:92:77:58:f4:44:75:77:5b:b5:85:be:
         a2:ad:30:b2:8a:72:1c:de:e8:a3:a0:a8:a1:a4:bc:a4:57:7d:
         10:12:eb:23:5a:00:76:33:44:95:de:04:92:24:78:19:7a:a2:
         f4:37:bb:b3:b0:38:e1:df:4e:4d:0e:be:ba:7a:d4:c1:d0:ae:
         52:26:ae:cf:ee:02:23:b8:9b:3e:ad:d2:7a:6b:da:bb:f5:af:
         cb:0c:e7:45:79:b1:a2:0d:ee:0b:54:f2:f6:b6:a3:11:36:fa:
         11:7c:c2:20:52:63:72:3a:aa:ea:0c:9e:29:a1:e7:12:20:43:
         53:c3:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org