Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/359c6df758cfeb4d426886214a86f135e12b3acb.roa
File:                     359c6df758cfeb4d426886214a86f135e12b3acb.roa (raw, json)
Hash identifier:          tgMqLyeMrbasaxqxmKKqRxNiQY4s+z39/lU4Jar0Teg=
Subject key identifier:   59:C0:81:09:F9:3F:61:01:99:22:30:F8:C6:C7:5C:7F:0A:51:6C:85
Certificate issuer:       /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial:       0DB214
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/359c6df758cfeb4d426886214a86f135e12b3acb.roa
Signing time:             Wed 24 Mar 2021 14:38:48 +0000
ROA not before:           Wed 24 Mar 2021 14:38:45 +0000
ROA not after:            Tue 24 Mar 2026 14:38:45 +0000
asID:                     27947
IP address blocks:        45.71.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897556 (0xdb214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
        Validity
            Not Before: Mar 24 14:38:45 2021 GMT
            Not After : Mar 24 14:38:45 2026 GMT
        Subject: CN=359c6df758cfeb4d426886214a86f135e12b3acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:4d:b7:f9:26:ac:85:09:77:8f:c4:e4:70:
                    67:eb:d3:e1:39:79:e1:8c:5a:13:ab:31:fe:a8:38:
                    1a:e1:aa:37:fa:3a:1f:7c:05:27:32:4c:5b:46:c4:
                    91:50:60:37:57:5a:ee:3a:49:33:c0:89:d4:5b:59:
                    08:d8:5b:9c:d2:2e:e0:fa:4d:b0:9a:27:94:6c:ef:
                    55:8e:56:f2:0a:b7:df:64:a7:1f:a0:d2:0a:82:2a:
                    15:27:88:ca:f6:da:e2:c7:7a:6c:8c:38:49:9b:35:
                    6b:95:48:fb:9e:1b:aa:fe:d8:e0:b3:87:10:fb:da:
                    03:ec:c8:e1:84:97:84:c9:a9:b9:e6:ce:0b:29:15:
                    2f:ff:3a:4f:d2:10:7f:07:b9:f7:b6:58:1c:8c:60:
                    24:4d:5b:00:0a:6a:a0:57:9d:a5:e4:33:41:d0:77:
                    1c:c1:a1:c8:90:34:27:92:a3:0d:b5:cb:9f:74:79:
                    6a:6a:fe:6e:06:46:cf:3b:78:0f:53:7c:91:f2:32:
                    a3:be:34:c1:9a:91:dd:55:08:3f:cb:cd:50:f4:25:
                    de:fa:d6:3b:12:50:03:ef:a3:00:68:c9:42:77:99:
                    fd:b5:8b:8d:20:ab:35:7d:5a:51:5c:55:41:53:a9:
                    c4:67:dd:d0:df:f8:be:7c:1b:25:f0:a9:0e:b0:0a:
                    ea:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:81:09:F9:3F:61:01:99:22:30:F8:C6:C7:5C:7F:0A:51:6C:85
            X509v3 Authority Key Identifier:
                keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/359c6df758cfeb4d426886214a86f135e12b3acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:80:5b:1b:70:05:e5:75:27:d6:78:f3:3a:1b:55:8e:dc:
         cf:1c:ed:64:68:66:b3:57:65:6d:b7:93:06:33:61:9e:26:b3:
         06:f5:05:49:ec:72:4b:c1:87:d8:7f:9c:10:40:9b:9d:5c:46:
         15:b6:be:70:52:23:5f:cc:38:d7:6c:ca:5e:7f:11:cb:ac:2c:
         a6:a8:68:78:52:06:9c:65:5e:ef:d7:a9:b5:79:8b:6f:64:c0:
         7c:01:41:c3:93:b4:ab:f7:55:3c:21:05:9b:ab:f1:0e:3c:8e:
         57:6d:20:a7:00:30:e1:54:7f:dc:a0:6b:a0:99:7d:26:c7:6d:
         b0:3d:8d:81:8b:f2:1e:d5:44:67:bf:30:47:97:34:78:cc:4f:
         f6:ce:86:85:d0:50:de:48:67:a8:13:98:7d:26:56:cf:e0:5f:
         63:0a:f2:0a:7e:f7:ee:35:fa:35:3f:d4:09:30:93:ae:b1:e9:
         eb:26:6f:65:bb:2a:2c:a8:90:97:57:fd:9f:c6:ff:00:db:ec:
         46:7d:49:14:c4:e6:29:12:89:3b:4d:68:fb:e0:e0:74:1c:c9:
         0e:37:26:74:6b:d9:ca:c1:2f:15:2f:3e:0e:c4:d4:70:d9:9c:
         56:6b:58:16:30:c3:16:94:69:31:fd:52:79:ad:57:0b:87:a9:
         3d:8b:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org