Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/fc12f4317cc9c7e69aeeaea8093c0065feceb905.roa
File:                     fc12f4317cc9c7e69aeeaea8093c0065feceb905.roa (raw, json)
Hash identifier:          Axc46sNbb8TI6qI+TaNSZSajnleeYDbJCIsYAorkPkk=
Subject key identifier:   CB:F5:1A:0C:43:A2:64:0D:0B:D7:A2:A0:7D:C0:C1:84:BB:DB:3D:CF
Certificate issuer:       /CN=202def571210e84427e47726d44e38d4bcd2215c
Certificate serial:       1EB049
Authority key identifier: B6:DC:0F:63:FB:DA:F1:20:3F:B2:54:E0:03:D5:41:90:4C:B5:5A:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202def571210e84427e47726d44e38d4bcd2215c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/fc12f4317cc9c7e69aeeaea8093c0065feceb905.roa
Signing time:             Wed 01 Nov 2023 15:00:54 +0000
ROA not before:           Wed 01 Nov 2023 15:00:54 +0000
ROA not after:            Wed 01 Nov 2028 15:00:54 +0000
asID:                     269946
IP address blocks:        45.189.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011209 (0x1eb049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202def571210e84427e47726d44e38d4bcd2215c
        Validity
            Not Before: Nov  1 15:00:54 2023 GMT
            Not After : Nov  1 15:00:54 2028 GMT
        Subject: CN=fc12f4317cc9c7e69aeeaea8093c0065feceb905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:f9:63:0e:9d:89:aa:c7:80:9a:3e:20:df:
                    56:b2:9d:79:4b:ca:9c:76:a3:d2:6b:b0:c7:f2:c8:
                    fd:94:3a:dc:ca:0b:43:fe:da:31:d4:14:46:d7:be:
                    e2:74:7a:ff:07:04:9f:33:9d:92:17:b9:de:fc:a6:
                    c1:b2:98:c6:ca:94:f6:e9:bf:70:d5:ae:b7:08:00:
                    30:32:44:51:9b:46:c6:90:22:2d:3c:ed:3c:f7:a9:
                    64:98:57:bb:96:ac:60:5d:36:8a:b1:29:7a:6f:da:
                    22:6f:41:85:4b:32:33:54:5e:ce:f5:42:8a:c9:2e:
                    60:7d:86:66:46:35:85:f8:02:71:6c:0e:20:25:a7:
                    92:ac:2c:8c:99:24:bf:87:fc:6b:67:52:37:19:f9:
                    22:8a:9f:ea:ea:0c:1d:4c:d4:d2:e1:c5:42:c8:6c:
                    82:b6:1c:76:ea:2c:ca:ca:c1:0e:e4:81:2a:5b:ee:
                    d9:87:26:47:75:98:f5:9c:32:e8:41:72:80:12:cc:
                    df:d2:e4:af:79:eb:27:ea:ce:0b:38:e8:11:12:03:
                    09:4d:0c:65:c8:5d:ec:a3:27:5f:6d:7e:fa:4c:88:
                    9e:15:85:3f:06:86:80:01:cb:bb:c7:20:83:2a:39:
                    8e:aa:00:ff:8d:3e:9a:9f:ec:21:03:81:07:c8:88:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:1A:0C:43:A2:64:0D:0B:D7:A2:A0:7D:C0:C1:84:BB:DB:3D:CF
            X509v3 Authority Key Identifier:
                keyid:B6:DC:0F:63:FB:DA:F1:20:3F:B2:54:E0:03:D5:41:90:4C:B5:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202def571210e84427e47726d44e38d4bcd2215c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/fc12f4317cc9c7e69aeeaea8093c0065feceb905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83067ae7-f3f1-45a1-be1f-e5f933dd620c/202def571210e84427e47726d44e38d4bcd2215c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:32:61:84:a2:1f:6a:fc:b0:06:5d:b3:b8:82:3c:17:a1:bf:
         45:04:9f:58:a8:d1:97:9d:09:2e:fa:01:76:c4:30:f7:f5:90:
         07:f5:d0:18:d4:9e:4a:45:d8:30:39:06:65:09:30:dd:a8:05:
         2c:f5:11:44:60:6f:78:a8:bf:b7:fa:b0:d8:70:26:be:f3:4c:
         62:c1:88:4e:69:4e:c5:00:f8:77:de:df:90:2c:b8:4f:f3:f7:
         f2:ac:10:41:0b:ee:f6:cb:f3:dc:20:4a:c1:03:a2:95:b4:74:
         b4:b7:0a:8a:b5:ca:88:1b:a5:73:94:36:3e:4b:de:44:5a:f3:
         7e:72:1b:20:56:f4:c8:aa:90:00:11:c7:b9:cb:3d:3a:25:d7:
         6c:39:68:e8:e0:8b:a8:20:04:6f:36:1e:4b:e0:b6:aa:09:53:
         fb:71:c2:fd:8d:3d:9f:71:5a:50:be:3a:e5:b2:b8:50:a8:88:
         d9:cc:e9:4d:1d:76:ea:d0:94:88:91:c8:d4:87:23:9d:05:b9:
         a7:24:b6:b3:bc:05:a9:66:54:97:e8:4a:51:f9:7e:30:22:bb:
         62:f3:86:07:0b:bc:43:93:bc:ae:70:85:1a:98:b6:cc:1f:c1:
         73:1f:fe:20:c5:45:2d:92:94:03:c7:f1:39:36:64:62:d8:34:
         bc:4e:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org