Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/9c8a0108246b361660342da8f3e4d7fa6274e129.roa
File:                     9c8a0108246b361660342da8f3e4d7fa6274e129.roa (raw, json)
Hash identifier:          TBr95JoZxX8MyAbZX0p4/G6DHD8V/W26hWEMYmfxncY=
Subject key identifier:   16:DA:3D:49:3D:0E:2F:17:8F:C4:52:36:0F:96:BD:AD:3F:99:6F:C3
Certificate issuer:       /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial:       21DA76
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/9c8a0108246b361660342da8f3e4d7fa6274e129.roa
Signing time:             Mon 14 Aug 2023 07:01:12 +0000
ROA not before:           Sun 13 Aug 2023 07:01:12 +0000
ROA not after:            Thu 14 Aug 2025 07:01:12 +0000
asID:                     197991
IP address blocks:        45.170.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218614 (0x21da76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Validity
            Not Before: Aug 13 07:01:12 2023 GMT
            Not After : Aug 14 07:01:12 2025 GMT
        Subject: CN=9c8a0108246b361660342da8f3e4d7fa6274e129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:94:2b:99:c6:1a:ef:74:58:fa:14:47:29:
                    b2:39:8c:32:76:8e:3a:e7:eb:a8:96:1c:57:0c:e0:
                    7f:d7:fa:f8:8f:a9:bd:47:17:58:1e:c3:ba:c8:d1:
                    0b:8b:1e:ef:ad:82:09:5c:19:6d:33:f8:8d:79:b9:
                    7f:7c:41:50:68:05:13:53:d3:aa:1b:44:12:6e:a7:
                    f1:62:6e:58:b6:5a:76:2a:d7:dd:8d:98:11:2e:3d:
                    c2:f3:58:6a:52:d2:b6:f1:7c:e6:99:d7:af:a2:5c:
                    07:07:40:d2:1d:fc:e0:b5:e5:57:29:a9:af:e4:64:
                    28:fd:25:7d:65:51:58:ea:6f:ec:32:29:82:d4:65:
                    36:2b:49:42:07:87:0d:44:67:2f:38:f3:84:34:48:
                    44:75:f1:d6:ac:15:6d:a9:39:f5:c1:45:45:37:b6:
                    e6:b5:54:da:a8:81:c9:41:dd:ca:e6:37:49:5b:87:
                    e0:ca:5e:e8:3f:07:ac:86:ff:57:ff:8a:65:4d:24:
                    8a:ba:52:1c:b1:46:c8:bf:9b:79:d1:06:8b:98:af:
                    af:34:69:f3:52:c8:1d:d0:3f:b2:3d:9f:f2:18:3a:
                    db:01:f9:9b:03:b7:15:2e:22:d0:f9:c8:ac:a9:e7:
                    4f:0b:7b:d9:75:94:08:d8:dc:4a:2b:b8:ca:7e:80:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:3D:49:3D:0E:2F:17:8F:C4:52:36:0F:96:BD:AD:3F:99:6F:C3
            X509v3 Authority Key Identifier:
                keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/9c8a0108246b361660342da8f3e4d7fa6274e129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:eb:61:80:77:ae:95:ef:0a:a6:75:2c:e7:7c:53:a8:96:38:
         a2:6a:38:71:96:a1:11:63:f8:c1:b7:4d:3a:89:87:c9:fa:b7:
         3d:e9:f3:7f:9b:0d:da:b6:d2:dc:5a:10:f4:c0:eb:84:65:e3:
         3b:ee:53:0d:6c:d6:a2:ee:b0:af:f5:58:6c:9c:e2:c9:36:2e:
         3d:f4:01:3f:79:2c:c4:29:ca:17:36:f8:4b:b1:81:63:1d:b0:
         68:a6:e2:93:55:a4:74:35:9e:0c:b0:23:7d:ff:a3:e3:ad:98:
         1c:5c:0f:c9:93:e3:f7:49:d7:12:f9:74:3b:a3:50:db:b3:b7:
         f6:11:c4:4b:49:4e:56:54:35:da:da:cf:9e:07:cb:4f:0a:7c:
         33:21:05:c5:8b:31:c0:fd:b3:01:4d:80:95:c1:1a:4f:f5:87:
         dc:eb:cb:e4:b8:74:24:7a:5c:78:49:f7:ed:dc:a8:50:b1:1b:
         04:15:32:c0:b7:9e:55:b0:a5:3c:68:91:9a:04:11:85:df:1d:
         54:2d:62:e8:b0:45:49:7c:96:55:ef:6d:60:5e:e5:43:e7:10:
         3b:95:46:71:eb:c0:00:10:60:65:d3:3b:a8:fa:39:59:f6:a8:
         3f:b7:ad:1a:c8:2d:8b:02:6f:7c:5f:64:d9:1a:1b:49:61:85:
         23:e4:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org