Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87119d6e-fc53-4302-b52f-2b68bca2df53/2355b96e6e684fe0daa17ab9f9203b33d3634d70.roa
File:                     2355b96e6e684fe0daa17ab9f9203b33d3634d70.roa (raw, json)
Hash identifier:          fVJnVtc/9LjwNfVdCgvg7JIwsv9uTeqEKeTrN3uIEPU=
Subject key identifier:   02:A1:0E:FF:20:3F:21:73:81:98:2F:DD:45:47:AA:78:71:53:CC:AB
Certificate issuer:       /CN=7e3f464c4a67a1a11f216f44377a991d8ebaaa34
Certificate serial:       21C4B5
Authority key identifier: 91:ED:CA:75:6C:B2:8D:57:CB:C2:12:86:E7:58:86:9B:A3:A4:C5:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e3f464c4a67a1a11f216f44377a991d8ebaaa34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87119d6e-fc53-4302-b52f-2b68bca2df53/2355b96e6e684fe0daa17ab9f9203b33d3634d70.roa
Signing time:             Fri 21 Jul 2023 14:13:00 +0000
ROA not before:           Thu 20 Jul 2023 14:13:00 +0000
ROA not after:            Mon 21 Jul 2025 14:13:00 +0000
asID:                     264758
IP address blocks:        45.238.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213045 (0x21c4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3f464c4a67a1a11f216f44377a991d8ebaaa34
        Validity
            Not Before: Jul 20 14:13:00 2023 GMT
            Not After : Jul 21 14:13:00 2025 GMT
        Subject: CN=2355b96e6e684fe0daa17ab9f9203b33d3634d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:eb:c3:ed:e7:cd:e3:a3:74:01:60:9c:b6:
                    eb:da:c9:3e:1f:3e:0b:83:66:ad:8e:4e:6f:8a:91:
                    1b:2a:a0:5f:e9:68:71:61:6a:45:aa:cc:3f:51:64:
                    44:95:f1:00:d2:bd:7b:68:64:85:78:5f:e7:43:21:
                    48:29:0b:61:0d:32:df:a4:f3:4b:38:c2:7a:75:24:
                    5c:25:35:69:ed:3a:ea:00:1c:c0:50:a0:87:3b:54:
                    dc:ad:dd:6a:eb:c7:c9:55:90:99:80:91:b1:68:dc:
                    49:c5:cb:c1:f6:88:d9:41:9c:e5:d9:d4:a5:e9:df:
                    14:f2:65:d9:b7:a0:b5:49:78:dc:f9:3b:24:0e:a3:
                    37:02:97:fa:75:b4:5a:cd:49:e1:6a:84:71:ce:11:
                    d3:02:27:87:9a:e4:46:7b:32:51:01:fd:ee:2f:00:
                    ac:cb:97:d6:1c:ba:a2:83:42:12:81:56:6f:fb:a8:
                    6b:39:85:09:7a:bb:99:77:b8:1d:19:69:2f:10:ae:
                    41:5e:a2:0f:2d:a6:2e:2c:4c:b6:a1:1f:59:2c:5c:
                    ab:99:fa:65:8d:a0:fd:b0:96:dd:90:dc:a3:45:bc:
                    d8:b4:eb:e2:17:73:40:d5:ef:d8:1f:36:5a:20:bc:
                    b2:1b:7b:9f:52:64:7d:d1:64:6e:7a:eb:ad:01:05:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A1:0E:FF:20:3F:21:73:81:98:2F:DD:45:47:AA:78:71:53:CC:AB
            X509v3 Authority Key Identifier:
                keyid:91:ED:CA:75:6C:B2:8D:57:CB:C2:12:86:E7:58:86:9B:A3:A4:C5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e3f464c4a67a1a11f216f44377a991d8ebaaa34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87119d6e-fc53-4302-b52f-2b68bca2df53/2355b96e6e684fe0daa17ab9f9203b33d3634d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87119d6e-fc53-4302-b52f-2b68bca2df53/7e3f464c4a67a1a11f216f44377a991d8ebaaa34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:14:dd:27:bb:4e:e5:aa:ff:f4:e3:68:4d:87:27:a1:e1:
         23:33:e8:3d:b9:f1:e7:45:dd:a3:ee:a2:a3:3b:34:ce:ec:12:
         12:38:a1:4c:47:55:86:09:40:75:58:bf:07:aa:9e:73:6c:aa:
         7d:a0:31:20:39:f2:96:00:67:ed:d5:cd:75:59:2f:fc:1d:3e:
         bf:df:63:26:ed:b2:fd:c1:18:9f:ab:48:51:72:f1:ee:e5:81:
         98:cd:47:b9:7e:e5:cb:d8:f9:97:1f:14:46:bc:32:8d:d0:4c:
         3a:e3:44:d2:71:c8:7e:1f:7a:f1:af:26:c3:4e:ef:17:06:03:
         ef:5f:3b:ca:ba:cf:2e:78:f8:56:0e:8d:be:d3:0b:bf:75:03:
         ac:7a:15:1c:f9:d3:5a:9d:80:6e:25:2a:0f:c5:6f:52:2b:b0:
         6d:ff:8d:62:6c:de:c6:b3:ab:1f:eb:6a:ac:64:7a:7d:f7:70:
         0c:b7:7e:71:d2:ea:1f:71:18:2e:93:a9:0a:f4:0d:54:9b:7a:
         20:90:b7:76:c1:78:90:d6:08:4d:a3:bb:c9:fa:fd:87:73:ad:
         08:94:cc:ca:5c:d2:b8:2c:3e:74:8f:67:91:4c:70:d2:24:6c:
         38:0d:95:de:14:0b:96:08:2b:6d:3b:8b:92:2d:2e:25:fe:0f:
         2f:1c:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org