Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/7f059af76f2eb4fe805d8a12a25334e39be682b8.roa
File:                     7f059af76f2eb4fe805d8a12a25334e39be682b8.roa (raw, json)
Hash identifier:          fBVuCvvU+7xzeKK0Pop1dBNFv5OABudGXrDVYBbJEJg=
Subject key identifier:   1A:08:10:E0:BB:BC:AD:8A:41:E9:A9:3A:0C:30:48:FB:91:B5:45:7B
Certificate issuer:       /CN=a835ecfb849bdaf6e17afc5648e5c10499cc2864
Certificate serial:       1F5D87
Authority key identifier: D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/7f059af76f2eb4fe805d8a12a25334e39be682b8.roa
Signing time:             Sat 03 Jun 2023 15:28:14 +0000
ROA not before:           Fri 02 Jun 2023 15:28:14 +0000
ROA not after:            Tue 03 Jun 2025 15:28:14 +0000
asID:                     265816
IP address blocks:        45.178.8.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055559 (0x1f5d87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a835ecfb849bdaf6e17afc5648e5c10499cc2864
        Validity
            Not Before: Jun  2 15:28:14 2023 GMT
            Not After : Jun  3 15:28:14 2025 GMT
        Subject: CN=7f059af76f2eb4fe805d8a12a25334e39be682b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:f9:88:79:da:13:d8:e1:c7:43:45:11:f4:
                    52:01:3d:ec:8a:03:a1:9d:81:3c:29:fa:3e:90:a4:
                    58:cf:de:88:1a:2d:59:d7:62:ee:ec:1f:aa:93:5a:
                    ea:5c:e2:92:50:cc:59:7c:b3:61:a3:b3:70:e3:89:
                    8b:fa:cc:5d:fb:03:4c:46:0e:20:a0:cd:ee:e9:c6:
                    bf:58:4c:04:2d:68:8e:ae:99:ec:b6:9d:61:9a:a3:
                    b0:ce:d7:aa:15:fe:61:a6:d5:e8:bf:7b:54:e1:59:
                    c4:ea:cd:89:68:e4:76:75:1f:97:81:46:d4:08:09:
                    95:05:8c:19:da:28:89:f6:36:ce:91:b4:42:19:96:
                    91:f5:d9:14:47:0e:ed:f9:0c:d8:27:f4:1f:d7:1a:
                    0f:f4:84:3f:6b:3b:77:db:28:18:da:90:ba:f1:40:
                    c9:82:a4:19:ea:a0:41:bd:35:f4:1c:e1:4b:3a:0f:
                    45:4e:ad:e6:1c:78:b4:33:6f:43:77:87:08:10:a5:
                    41:f4:b1:7b:00:3f:f5:1a:20:5c:c8:c4:17:bd:53:
                    82:6c:59:38:5d:68:09:36:b3:24:d7:8b:01:ba:b5:
                    9f:cc:2b:5a:24:b6:03:02:89:16:12:c3:36:7b:9f:
                    89:6d:07:c2:04:ce:3b:c7:f8:79:2c:03:a0:dd:24:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:10:E0:BB:BC:AD:8A:41:E9:A9:3A:0C:30:48:FB:91:B5:45:7B
            X509v3 Authority Key Identifier:
                keyid:D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/7f059af76f2eb4fe805d8a12a25334e39be682b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/a835ecfb849bdaf6e17afc5648e5c10499cc2864.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:3c:0b:15:9f:46:22:77:ed:f0:17:ae:78:50:9c:cb:3c:
         a7:cb:44:ac:62:de:dc:16:fc:2a:dd:7d:50:c0:52:76:fb:78:
         a4:ac:34:41:d5:fb:0a:da:55:c8:0d:a9:4d:f7:84:bf:60:5b:
         32:4e:f9:d0:0a:3a:0e:dc:38:0c:ac:73:a5:18:10:60:29:7e:
         83:50:65:e8:d5:a1:b3:76:4e:09:98:48:a2:14:82:e3:45:74:
         48:4e:86:98:55:86:52:7f:ec:56:c0:1b:8c:41:8a:88:29:5c:
         c1:34:bc:24:a3:c7:d7:f5:c9:cd:4e:94:be:af:b5:e6:b4:8c:
         83:d4:88:76:82:a7:50:8b:16:c3:2e:d6:3d:75:4b:82:f9:ec:
         90:32:79:cd:aa:7c:ab:b9:70:82:80:fa:c2:02:06:4d:8e:08:
         bd:5c:7c:49:3d:18:c6:ef:ec:72:ff:b0:0b:fc:40:15:d5:a6:
         fb:66:74:e7:3f:46:25:b8:d3:23:ca:81:b4:52:c7:e7:a2:4d:
         a8:62:9b:a9:f6:ab:7a:15:62:77:ca:02:67:b8:c8:a9:04:b1:
         26:85:e3:39:f4:3e:97:8b:3f:72:6f:51:45:f9:7c:16:56:a7:
         9f:6d:59:69:da:70:d5:de:cf:62:3c:b3:e9:35:79:84:93:26:
         dc:33:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org