Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79cec69b-13a1-4b91-81b3-e44a9895346e/c8b2acf4570d8839e08e0d362fc5bfa46a80f811.roa
File:                     c8b2acf4570d8839e08e0d362fc5bfa46a80f811.roa (raw, json)
Hash identifier:          PWVyDQZE02O2w7mvHAShnoS9biWHLs16o/oJdDycEiQ=
Subject key identifier:   F9:DA:FD:BE:E4:60:75:09:B9:27:71:86:27:E2:96:86:69:8B:45:33
Certificate issuer:       /CN=6aa8366626aff31c5ec2d9fc69571331bd154d02
Certificate serial:       029967
Authority key identifier: 3A:BC:FB:3A:3E:FC:90:E3:82:7E:57:2C:D1:E9:57:7D:CB:FB:8F:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6aa8366626aff31c5ec2d9fc69571331bd154d02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79cec69b-13a1-4b91-81b3-e44a9895346e/c8b2acf4570d8839e08e0d362fc5bfa46a80f811.roa
Signing time:             Thu 05 Oct 2023 14:39:33 +0000
ROA not before:           Wed 04 Oct 2023 14:39:33 +0000
ROA not after:            Sun 05 Oct 2025 14:39:33 +0000
asID:                     265756
IP address blocks:        45.4.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170343 (0x29967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8366626aff31c5ec2d9fc69571331bd154d02
        Validity
            Not Before: Oct  4 14:39:33 2023 GMT
            Not After : Oct  5 14:39:33 2025 GMT
        Subject: CN=c8b2acf4570d8839e08e0d362fc5bfa46a80f811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:7a:85:eb:89:d9:2a:ab:49:f6:f7:e8:17:
                    b0:23:bc:03:ce:9e:a8:4c:7f:21:fb:b0:12:c5:ac:
                    0b:51:81:4a:c4:21:2d:ae:23:3f:4c:88:5a:ca:25:
                    7c:74:59:f6:1d:4f:3e:da:f3:37:4e:f6:d8:8e:2a:
                    45:33:82:c9:69:65:34:90:20:bf:c6:df:84:58:7a:
                    b8:f6:90:e2:04:fc:8d:e0:96:4a:72:20:0c:39:cb:
                    9e:b1:25:d1:50:23:08:6f:56:c9:79:55:f4:38:07:
                    ed:43:53:d9:3f:79:0c:c2:33:d8:70:cc:e6:8f:3e:
                    09:cf:a6:fd:7b:ae:fa:46:93:22:76:73:cc:7b:99:
                    fe:ff:29:0e:89:ba:83:e2:94:7c:54:33:81:49:d1:
                    1a:48:d5:8e:76:bc:53:75:b8:30:da:63:6e:f9:02:
                    06:c9:51:1b:31:91:59:c1:c2:9f:22:37:b3:88:25:
                    d0:fc:99:64:05:00:ef:61:f6:a9:09:e6:ea:fa:76:
                    70:4a:0c:e7:52:70:c2:46:5d:bc:c1:7a:2e:5c:a2:
                    c6:0f:45:fa:d0:40:75:b0:7d:b9:10:16:90:bc:9d:
                    48:36:c8:fe:1e:a0:a5:82:b8:c0:fc:2d:66:bb:df:
                    c3:3f:fd:df:60:66:37:5e:03:80:15:42:a5:35:56:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:FD:BE:E4:60:75:09:B9:27:71:86:27:E2:96:86:69:8B:45:33
            X509v3 Authority Key Identifier:
                keyid:3A:BC:FB:3A:3E:FC:90:E3:82:7E:57:2C:D1:E9:57:7D:CB:FB:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6aa8366626aff31c5ec2d9fc69571331bd154d02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79cec69b-13a1-4b91-81b3-e44a9895346e/c8b2acf4570d8839e08e0d362fc5bfa46a80f811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79cec69b-13a1-4b91-81b3-e44a9895346e/6aa8366626aff31c5ec2d9fc69571331bd154d02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:1e:0c:57:e1:a4:61:9c:da:79:4d:e2:a0:65:3f:c3:89:
         c6:88:d4:41:fb:1d:97:dc:21:c5:4c:00:84:32:1e:df:8d:14:
         28:9e:a5:ff:1a:57:f3:de:38:8a:9d:a9:34:24:ba:fe:29:1a:
         e2:58:8e:84:de:1b:68:0c:dc:c4:cd:7b:a7:07:15:a4:2e:14:
         f0:48:79:4b:6e:09:d7:e6:ec:f7:5e:df:3d:d5:a6:0f:67:0f:
         7f:64:c9:c4:3c:07:80:3c:1d:52:ed:32:df:d7:04:fc:19:b1:
         4d:9c:93:8f:3f:75:0f:9c:2f:c7:94:45:54:74:e6:e4:49:5f:
         86:44:09:47:43:a8:8f:c3:03:51:36:56:e0:5b:b6:f5:a2:21:
         e8:3a:78:c3:6a:d0:39:1f:2d:3a:e8:bc:89:57:67:6c:18:9e:
         c0:2c:c3:41:91:bb:14:8d:38:4c:80:7f:e5:c1:d1:be:9a:4a:
         49:d3:98:ac:e3:28:bf:8f:d3:9d:1e:e8:1c:7f:62:76:44:6c:
         47:c3:d2:ad:52:f6:73:ba:06:5c:cf:53:1c:32:1d:29:ed:94:
         77:b6:4a:38:26:2a:4e:5d:68:e5:6c:38:e9:12:20:04:7a:5a:
         f4:5a:b8:63:93:46:74:c3:ef:08:15:cb:d1:0c:05:80:d7:cc:
         10:c7:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org