Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/175bf60765783807e54da14aa73a0e82077bd5f0.roa
File:                     175bf60765783807e54da14aa73a0e82077bd5f0.roa (raw, json)
Hash identifier:          6tY+7GQezoGtx5LB3s0MBxeKTeXqEUR3nZOB3zNJmlw=
Subject key identifier:   A4:16:C0:59:47:BB:32:86:99:42:37:02:10:C3:A8:7E:40:DA:2C:83
Certificate issuer:       /CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
Certificate serial:       1AE9F2
Authority key identifier: 7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/175bf60765783807e54da14aa73a0e82077bd5f0.roa
Signing time:             Fri 16 Feb 2024 07:30:00 +0000
ROA not before:           Fri 16 Feb 2024 07:30:00 +0000
ROA not after:            Sun 15 Feb 2026 07:30:00 +0000
asID:                     271843
IP address blocks:        45.162.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763826 (0x1ae9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
        Validity
            Not Before: Feb 16 07:30:00 2024 GMT
            Not After : Feb 15 07:30:00 2026 GMT
        Subject: CN=175bf60765783807e54da14aa73a0e82077bd5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:04:a1:bb:1f:5a:cf:34:cd:de:20:08:33:
                    1c:c8:61:a1:3f:b7:18:fa:58:00:bf:50:56:ae:02:
                    1c:d7:bd:3b:cf:3f:e8:c3:b2:b2:5c:2d:5a:7e:0f:
                    68:1a:9b:c0:1b:99:61:bb:26:a7:45:e1:60:31:52:
                    3c:d0:90:b1:1a:80:b5:79:84:02:91:2d:89:49:14:
                    de:0f:81:43:4a:40:a0:ea:86:a7:17:ee:69:af:4d:
                    a9:3e:66:ca:a5:10:59:10:62:a7:89:43:e5:87:f9:
                    10:48:9d:a4:a1:ee:6e:f8:23:f6:5f:9b:5b:a5:a7:
                    95:b1:ef:e2:10:36:ce:31:47:aa:ed:fd:98:4e:1d:
                    1d:5b:8a:aa:86:84:54:46:c8:7f:8a:97:9c:f5:b6:
                    f2:11:85:42:1a:64:e4:2c:35:ad:81:47:7a:45:c3:
                    db:47:09:6c:de:1d:7d:b8:fa:ea:4d:ba:b9:56:b7:
                    f1:8e:c3:70:2d:68:fd:86:79:20:a5:0a:5d:a3:02:
                    c8:4a:02:6a:77:5e:ef:90:19:df:fd:7e:a6:61:31:
                    e5:8d:fc:2f:98:19:22:05:d8:4b:43:ca:2c:bd:a0:
                    2e:50:71:5e:5f:81:5a:c4:7b:4e:15:63:3c:74:98:
                    b1:03:1c:4a:a2:b6:65:f3:83:0a:59:96:95:82:58:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:C0:59:47:BB:32:86:99:42:37:02:10:C3:A8:7E:40:DA:2C:83
            X509v3 Authority Key Identifier:
                keyid:7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/175bf60765783807e54da14aa73a0e82077bd5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:6a:f8:ed:30:96:d8:e2:4d:42:c1:3f:41:e5:6b:54:54:8c:
         af:09:7a:13:9a:cf:b6:5f:e7:53:a6:7f:06:8e:b0:82:ab:e9:
         5d:2f:20:c1:11:29:93:6d:b0:49:64:a2:3f:18:e0:f2:d1:14:
         18:4b:0c:41:03:4b:d8:72:d0:4f:0f:65:d9:10:ce:34:2a:7c:
         1b:5e:14:0a:af:f1:45:5b:0c:fa:05:3e:8a:3e:14:c3:33:f6:
         74:8f:58:00:b7:4d:74:36:02:d2:61:2d:84:62:4b:d4:23:b4:
         b1:ce:c8:d1:56:f1:8f:de:20:aa:20:60:ea:7c:16:02:a0:1f:
         77:ed:09:c2:60:b8:dc:bc:cb:66:ea:88:ce:dd:26:35:d7:bf:
         e5:64:6f:85:16:8f:eb:01:99:0c:34:6d:30:a6:fb:fb:99:ba:
         8b:5c:ba:61:ee:e5:13:26:ed:15:62:84:fa:07:f7:02:aa:40:
         b2:37:83:4c:9d:e2:f7:30:7f:b9:bb:e3:e3:bc:de:7d:c9:fa:
         9a:b8:4d:07:98:42:20:fa:0f:c4:8d:d9:48:81:6c:a8:2d:51:
         4f:90:ef:8e:21:76:b8:82:04:90:d3:e7:a2:28:80:71:b5:99:
         ad:d4:7b:80:81:f6:a5:77:1f:98:d9:61:d6:42:b2:2c:d7:0c:
         45:ed:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org