Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/aa2478822e6a3bfe6ff4158d98b2dbb3a07aa765.roa
File:                     aa2478822e6a3bfe6ff4158d98b2dbb3a07aa765.roa (raw, json)
Hash identifier:          wdPwBHzgKiXNWA2LTNpXQFXdd02MxWI7TmVQct8ArlA=
Subject key identifier:   D0:FF:C9:4D:B0:3E:8C:EE:5C:2D:70:1F:98:43:73:78:83:87:46:C8
Certificate issuer:       /CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Certificate serial:       07BD0A
Authority key identifier: 56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/aa2478822e6a3bfe6ff4158d98b2dbb3a07aa765.roa
Signing time:             Fri 01 Mar 2024 13:54:08 +0000
ROA not before:           Fri 01 Mar 2024 13:54:08 +0000
ROA not after:            Sun 01 Mar 2026 13:54:08 +0000
asID:                     269836
IP address blocks:        45.176.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507146 (0x7bd0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
        Validity
            Not Before: Mar  1 13:54:08 2024 GMT
            Not After : Mar  1 13:54:08 2026 GMT
        Subject: CN=aa2478822e6a3bfe6ff4158d98b2dbb3a07aa765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:3c:1e:13:43:40:b1:8b:a6:fe:5e:3e:ad:
                    b7:61:16:fa:eb:35:51:8d:de:5e:fe:d3:35:57:56:
                    d4:68:0a:1d:e3:f0:e4:01:3d:bb:3c:30:b1:1a:3f:
                    c9:af:47:f3:78:dd:04:6b:14:30:36:eb:a8:81:d5:
                    35:50:8a:51:9b:bb:15:0c:0c:e0:ce:77:de:04:3c:
                    36:23:44:45:b9:f8:36:36:0f:b5:32:d0:15:26:89:
                    45:24:67:8a:25:51:99:f3:b5:d3:00:49:d7:54:83:
                    87:9f:be:c5:12:4f:1b:d7:d5:74:21:7f:0a:fc:69:
                    94:a2:7b:62:43:73:fd:56:ce:bb:6b:e3:f8:57:d9:
                    6f:97:f8:bd:63:21:4f:9d:7f:2b:22:86:26:a3:bc:
                    a4:67:79:06:17:19:ac:bb:29:24:49:44:c7:0f:81:
                    61:b4:d4:f2:da:70:8a:c9:c0:0b:b5:83:c2:6f:e9:
                    01:96:53:7a:53:c4:d3:6b:7e:f7:9f:cf:f1:d6:d7:
                    f6:3c:a2:fe:9f:4e:66:7b:f4:3c:e5:96:ff:94:6a:
                    1a:ba:79:07:c1:b7:cf:55:f4:03:5c:37:8b:36:c5:
                    71:72:13:c9:70:f9:3c:d1:ff:4b:1a:32:7a:88:38:
                    b2:b7:d1:9b:39:00:43:fd:70:4b:b4:a3:a0:ff:de:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:C9:4D:B0:3E:8C:EE:5C:2D:70:1F:98:43:73:78:83:87:46:C8
            X509v3 Authority Key Identifier:
                keyid:56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/aa2478822e6a3bfe6ff4158d98b2dbb3a07aa765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5e:cb:e5:b5:36:f5:b8:e8:e1:01:9a:3c:d6:14:bd:e0:a0:
         f4:b3:c4:33:03:18:6b:34:e6:b0:b1:c4:9f:7b:26:c0:a8:1e:
         fe:0f:5a:11:0c:a1:bd:e0:1a:b7:ef:91:d1:c7:ee:3a:e8:4a:
         85:e8:b6:1e:e8:b2:b6:d2:f4:63:5c:27:2a:fc:b2:c4:ed:03:
         8d:1e:ad:df:af:a8:11:17:a1:e7:71:97:f7:bb:21:1c:1a:23:
         d6:1a:d2:bb:91:50:df:b8:78:09:1f:0e:1c:0f:6b:66:fa:45:
         4d:81:5c:d8:7f:27:b0:e5:32:b2:0c:8a:87:2b:08:d6:8a:af:
         ee:ee:d0:43:89:ec:42:70:95:f0:ae:27:dc:b8:22:6b:5a:7f:
         f7:19:21:31:26:52:a0:05:81:4c:ce:d9:d2:88:12:d8:8f:24:
         ca:7b:8a:86:7b:da:d8:8e:ea:4d:19:e7:52:49:2a:fc:6b:c9:
         56:90:e6:3d:f4:d9:96:12:ed:e3:49:07:c0:fd:f2:de:a5:2c:
         59:34:a2:9a:7e:59:9a:9d:62:71:d7:1e:01:cf:12:dd:1d:ac:
         7e:44:ca:32:24:0a:c9:cb:93:37:f1:f2:6c:3e:27:a5:c0:81:
         5b:68:b0:e3:6a:02:40:91:13:48:6d:ed:ec:4e:75:d2:7a:52:
         44:8b:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org