Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/6bd95796605c85dceff125f292f0faa15a138d26.roa
File:                     6bd95796605c85dceff125f292f0faa15a138d26.roa (raw, json)
Hash identifier:          brBFqK29Gd//hiSuRpkpbATapv1aiXePFbFG02Pr/sI=
Subject key identifier:   EA:D4:03:55:BF:42:9A:76:85:BE:82:7C:74:AB:9B:09:F4:5D:CA:BB
Certificate issuer:       /CN=0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed
Certificate serial:       132C46
Authority key identifier: 01:87:AE:64:3C:48:2C:85:C9:B9:6B:91:65:30:78:4C:C1:08:63:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/6bd95796605c85dceff125f292f0faa15a138d26.roa
Signing time:             Tue 11 Jan 2022 17:06:14 +0000
ROA not before:           Fri 07 Jan 2022 03:00:00 +0000
ROA not after:            Thu 07 Jan 2027 03:00:00 +0000
asID:                     265874
IP address blocks:        45.226.172.0/23 maxlen: 24
                          45.226.172.0/24 maxlen: 24
                          45.226.173.0/24 maxlen: 24
                          2803:c620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256518 (0x132c46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed
        Validity
            Not Before: Jan  7 03:00:00 2022 GMT
            Not After : Jan  7 03:00:00 2027 GMT
        Subject: CN=6bd95796605c85dceff125f292f0faa15a138d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:20:47:e2:79:fc:a6:a6:98:9d:6b:c2:47:
                    b9:a2:2f:a4:eb:59:fe:54:1f:18:46:07:37:80:29:
                    bb:7c:f1:79:db:5d:b2:cc:a3:35:90:83:22:6a:8e:
                    ce:c1:b0:63:f9:0f:72:a1:02:6e:16:d1:ac:ab:6f:
                    66:cc:e0:83:0b:3a:c5:bf:a0:63:30:c7:47:10:74:
                    79:cf:e0:b4:6e:ae:8d:8f:c4:34:14:3b:74:27:e6:
                    c4:18:71:3b:7b:31:33:38:61:c9:c9:e8:56:12:77:
                    f3:02:4b:8b:89:09:22:8b:ee:43:46:de:39:9a:cf:
                    3b:c1:e1:f3:ca:e0:69:3d:fc:7b:61:64:9d:58:4d:
                    68:6b:6b:f7:10:de:33:91:1a:24:ba:ea:af:a5:6b:
                    7f:4b:9d:6e:b8:6c:37:d0:2e:c6:03:9c:a5:ba:06:
                    7d:66:93:a1:4f:12:8f:af:ac:eb:1c:28:5d:f3:68:
                    25:57:1e:e1:43:94:f0:09:09:71:6e:1a:09:1f:51:
                    41:fc:ab:6b:59:ef:50:c2:df:5d:cd:46:7f:6a:03:
                    2f:21:cb:ae:61:82:a8:17:9e:52:bc:d3:9b:91:a3:
                    c9:0f:dd:ba:09:b6:f1:c2:fc:1a:2e:ff:d8:f0:3a:
                    10:ec:4f:3c:9c:f5:27:66:03:77:05:a0:74:0b:d2:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:03:55:BF:42:9A:76:85:BE:82:7C:74:AB:9B:09:F4:5D:CA:BB
            X509v3 Authority Key Identifier:
                keyid:01:87:AE:64:3C:48:2C:85:C9:B9:6B:91:65:30:78:4C:C1:08:63:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/6bd95796605c85dceff125f292f0faa15a138d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/620d490f-5438-422a-94c4-5e366931d325/0c8dc9c7b56a3910b29571a9d05048fb64b1d6ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.172.0/23
                IPv6:
                  2803:c620::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:99:bf:1b:6d:c9:86:7b:b6:65:25:b7:39:01:fa:30:c1:20:
         1d:8e:45:43:d7:3e:d6:41:1c:54:c9:74:50:35:05:44:75:3f:
         c1:18:ab:05:94:c6:0e:39:27:a8:58:47:a5:f6:04:38:ed:b7:
         9e:75:f6:98:29:e5:39:76:86:88:ed:fe:7e:c7:61:dc:f8:48:
         8d:57:f2:2d:0d:49:2b:b1:31:56:1e:67:64:3f:bb:26:f8:e5:
         14:ec:4f:c8:f7:2d:07:05:20:50:19:73:c3:9c:92:69:90:26:
         55:a4:5e:dc:4c:70:52:6f:4c:2b:0e:5b:88:8a:ca:09:86:f5:
         a8:a2:a7:15:5c:22:82:fa:5e:01:5a:ec:63:4c:3e:fe:e0:26:
         4f:02:c6:80:21:54:bb:83:d6:04:71:a5:fe:48:05:68:32:b6:
         7b:08:a0:cd:7c:50:22:df:87:ca:3e:4b:f5:8f:6f:1d:2d:04:
         9d:df:f5:d1:52:dd:80:1b:32:46:a2:df:0d:c3:7e:6a:ac:5d:
         ef:7b:0c:fb:af:2e:0f:1f:b5:03:b5:45:5e:96:58:cd:5e:51:
         ac:58:0c:f7:b5:07:b5:49:2d:3f:17:64:06:eb:4b:3b:ab:b6:
         7d:64:a1:bb:92:fd:ee:7d:0d:a3:8c:95:ef:0c:c9:fc:ab:58:
         9d:cb:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org