Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/2cec71a0723a53a527739219772a923140ce3986.roa
File:                     2cec71a0723a53a527739219772a923140ce3986.roa (raw, json)
Hash identifier:          pW+i2HqSvcROsp0w9yst83Bwub4g3CegXIhz21SHHTE=
Subject key identifier:   97:CB:1D:88:C5:E4:E4:4C:5E:77:75:DF:BB:A1:69:F7:D8:D1:41:20
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       14B6E5
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/2cec71a0723a53a527739219772a923140ce3986.roa
Signing time:             Fri 02 Feb 2024 03:21:35 +0000
ROA not before:           Fri 02 Feb 2024 03:21:33 +0000
ROA not after:            Mon 02 Feb 2026 03:21:33 +0000
asID:                     26506
IP address blocks:        45.227.89.0/24 maxlen: 24
                          2801:114:7::/48 maxlen: 48
                          2801:114:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357541 (0x14b6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Feb  2 03:21:33 2024 GMT
            Not After : Feb  2 03:21:33 2026 GMT
        Subject: CN=2cec71a0723a53a527739219772a923140ce3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:42:06:48:8b:7b:ec:ff:d3:9a:b0:53:33:
                    1d:99:1a:46:e4:a3:ba:0b:d9:af:5a:0b:c2:9b:73:
                    55:4d:51:bd:4e:be:f5:23:09:d5:4c:30:a1:77:01:
                    f0:8e:32:54:f4:a2:dd:b6:ee:3d:e5:1e:e2:38:55:
                    44:28:af:7b:08:e9:89:f9:ac:28:79:c1:5f:a0:c2:
                    6d:c6:c2:4d:3e:f6:3a:35:da:b0:e8:5b:a7:a6:4c:
                    26:1a:6a:9f:c4:ab:26:82:4a:60:53:96:fa:cf:38:
                    98:d9:a6:93:12:f5:ee:c2:fe:da:d4:02:d3:27:c2:
                    5b:37:87:64:76:0d:05:c7:d1:8b:22:46:5d:2a:ee:
                    85:72:49:08:ea:a5:09:39:2f:4a:20:02:f3:b1:c3:
                    a7:7b:0b:9a:03:54:6d:4b:bc:63:a2:06:c8:1a:f1:
                    a1:26:76:81:bc:ff:9c:a6:62:5b:4c:59:3f:5a:1d:
                    22:24:87:ba:be:20:c7:78:18:a5:97:13:eb:c2:54:
                    f7:a9:37:1f:1d:20:ab:22:0d:ac:14:3d:51:1b:3d:
                    52:06:04:48:2c:53:4d:e9:34:f9:bd:6a:66:a9:71:
                    73:4e:4a:92:4e:bd:f0:d2:52:77:c5:16:ae:fc:9a:
                    de:b2:74:8a:11:d0:02:05:87:e2:95:70:ed:99:f3:
                    bb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CB:1D:88:C5:E4:E4:4C:5E:77:75:DF:BB:A1:69:F7:D8:D1:41:20
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/2cec71a0723a53a527739219772a923140ce3986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.89.0/24
                IPv6:
                  2801:114:7::-2801:114:8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:1d:78:60:e3:b3:ae:32:75:2e:c5:78:1e:82:66:47:ac:
         b2:c1:9d:31:f3:ed:65:d1:20:d2:4d:34:ad:8c:a7:88:79:06:
         4f:eb:52:25:e6:f5:2f:3e:42:eb:08:b3:bf:ea:bd:04:cb:0f:
         44:c2:7e:2b:12:58:14:7f:f8:de:84:e9:a6:a1:e5:43:80:8a:
         2f:d6:14:a7:db:d5:eb:6b:fd:73:38:23:2c:9e:13:8f:d5:fc:
         ca:43:9f:19:8b:2e:53:8f:e1:df:bd:24:aa:42:b2:f4:f1:9a:
         2d:23:03:7a:ba:bb:34:66:0a:9c:1e:1c:00:79:1d:e0:a1:e4:
         6e:30:48:58:fe:ad:90:c7:84:ba:39:ae:13:c3:00:e7:1c:6a:
         c2:43:e9:83:01:10:7f:89:86:8e:e6:2a:6c:92:93:30:cf:59:
         4f:54:f0:9d:86:f2:02:2c:32:ce:66:8d:48:c8:6c:ad:68:c6:
         8c:c4:5d:0d:a5:a8:69:54:e1:89:bd:ca:af:3e:91:c1:b0:de:
         e5:fb:2a:2c:73:fc:64:2a:d6:fc:c3:15:63:a3:18:c8:46:fc:
         3a:7f:3d:30:d8:5d:57:20:da:6a:6c:87:34:60:98:bc:03:cb:
         03:d7:69:7b:59:33:18:03:d4:08:38:36:a0:e3:2e:b8:9a:fb:
         bb:68:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org