Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/441f8affd52059fae273df98233280b317cf75f4.roa
File:                     441f8affd52059fae273df98233280b317cf75f4.roa (raw, json)
Hash identifier:          1841ypCAcaT8nrDWwEUsh/dM7AqfzJ3WBxjMazElYTc=
Subject key identifier:   E1:66:9B:77:61:1E:0E:93:BC:19:B0:F2:3D:22:29:EB:E2:8B:BF:D1
Certificate issuer:       /CN=7ae44ff2c4dee84dd852b661cd60c3080d1539db
Certificate serial:       068D
Authority key identifier: 41:C3:84:25:B0:1D:DD:0B:AD:8C:6B:8E:99:9B:53:1E:27:42:68:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ae44ff2c4dee84dd852b661cd60c3080d1539db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/441f8affd52059fae273df98233280b317cf75f4.roa
Signing time:             Fri 05 May 2023 17:09:39 +0000
ROA not before:           Thu 04 May 2023 17:09:39 +0000
ROA not after:            Mon 05 May 2025 17:09:39 +0000
asID:                     266704
IP address blocks:        45.229.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae44ff2c4dee84dd852b661cd60c3080d1539db
        Validity
            Not Before: May  4 17:09:39 2023 GMT
            Not After : May  5 17:09:39 2025 GMT
        Subject: CN=441f8affd52059fae273df98233280b317cf75f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:5f:53:a9:33:92:83:cf:a4:07:34:83:c6:
                    a5:f2:5b:ef:e7:c2:76:9b:1f:4f:89:3b:e0:42:9c:
                    8e:55:fd:9f:5d:6a:84:dd:9f:00:b8:54:50:1c:1f:
                    39:93:7a:67:35:9b:76:14:83:b3:29:dd:98:88:15:
                    75:cf:1a:ee:a3:96:1f:1c:c4:8e:b1:48:a8:ee:1d:
                    55:cb:6a:86:12:5b:9d:7d:04:2f:c6:61:27:73:92:
                    9b:e7:09:a3:fa:86:f0:90:80:34:71:31:25:6d:e8:
                    d5:f8:39:d7:5b:67:85:7b:60:c1:96:8b:a3:02:ba:
                    20:d6:19:8b:ae:c1:63:4f:12:c2:27:2d:89:a7:07:
                    37:c4:a5:f1:11:bf:35:ec:3c:91:f9:48:be:92:8a:
                    a4:3a:80:d6:68:8d:6b:89:9e:57:9c:22:36:38:57:
                    0c:6c:09:3a:eb:5f:e1:a7:39:e9:01:16:38:e6:3a:
                    f5:d7:92:62:88:38:fe:63:88:f2:46:96:1f:78:9a:
                    16:a1:ee:1c:53:3a:03:b0:41:74:e5:d4:e6:1f:bc:
                    cd:32:fc:90:94:3b:70:89:38:fe:36:16:dd:43:c8:
                    db:89:3f:ea:a9:88:62:ed:e6:09:e4:95:bf:7f:b5:
                    66:7f:ba:95:b7:1e:01:5b:3b:00:91:e7:63:e3:10:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:66:9B:77:61:1E:0E:93:BC:19:B0:F2:3D:22:29:EB:E2:8B:BF:D1
            X509v3 Authority Key Identifier:
                keyid:41:C3:84:25:B0:1D:DD:0B:AD:8C:6B:8E:99:9B:53:1E:27:42:68:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ae44ff2c4dee84dd852b661cd60c3080d1539db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/441f8affd52059fae273df98233280b317cf75f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/7ae44ff2c4dee84dd852b661cd60c3080d1539db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:90:35:ea:73:82:9c:c9:77:13:35:98:7d:a1:a4:67:56:15:
         e0:7b:0e:ee:3b:9c:41:07:38:d9:b9:ae:61:17:72:70:70:70:
         d6:b5:ad:4b:0d:3a:10:20:63:8d:ca:8c:65:25:ba:af:4d:17:
         c9:d6:52:8d:ee:83:26:72:b3:12:e5:2b:44:7c:08:80:97:17:
         ea:a2:b8:8d:df:1d:8d:b5:8d:d1:08:a8:d3:3d:ea:2d:48:35:
         ad:26:40:e1:ca:47:d4:7d:38:26:1d:b7:59:d9:1c:da:aa:f5:
         70:9c:14:21:55:21:7f:d1:6d:99:39:2b:fc:1c:ee:ee:96:84:
         79:6f:60:74:a1:8b:98:86:1b:35:f0:0c:43:6a:e6:b6:bb:48:
         2e:36:4b:57:ff:cc:fd:b6:9a:a0:83:ab:f8:6a:62:9b:57:f4:
         0c:52:74:f8:8c:fe:1b:9d:14:2a:94:f8:2c:86:d1:f9:37:24:
         3d:cd:c0:ea:93:1b:02:b3:7d:8f:08:17:44:5c:46:9b:37:1c:
         1f:5d:b9:39:12:6c:e9:6d:00:58:f7:7d:03:c8:02:2f:a2:4b:
         4a:42:ec:99:c9:ae:de:98:f3:66:0a:ef:ed:4e:0c:b1:70:05:
         82:cd:81:6f:33:65:b0:85:5e:57:26:3d:1b:0e:22:bb:20:02:
         66:42:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org