Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa
File:                     1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa (raw, json)
Hash identifier:          mvbkrs167nGAk3iWXejgyonDwvynIY0VBWpQDMz5e78=
Subject key identifier:   98:A4:7E:CA:8C:E9:E6:9D:82:F4:55:26:4C:2F:1B:02:F1:FD:2A:99
Certificate issuer:       /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Certificate serial:       118168
Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa
Signing time:             Thu 09 Dec 2021 02:44:59 +0000
ROA not before:           Wed 08 Dec 2021 03:00:00 +0000
ROA not after:            Fri 08 Dec 2023 03:00:00 +0000
asID:                     267871
IP address blocks:        45.177.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147240 (0x118168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
        Validity
            Not Before: Dec  8 03:00:00 2021 GMT
            Not After : Dec  8 03:00:00 2023 GMT
        Subject: CN=1d53e0aa0783f63607c5c18d953d6094aaf4f061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:a0:b4:c1:72:76:62:f7:a4:a9:68:97:22:
                    be:2c:b8:a1:25:86:02:9b:b5:3c:8b:31:30:21:e0:
                    99:c9:b0:8f:24:3d:58:e0:a0:e7:d4:3d:a8:6e:7c:
                    c2:8f:b5:52:aa:c8:c4:5e:b7:30:2b:1b:48:10:4c:
                    f9:b5:29:df:e5:e1:ab:29:04:ce:42:26:e9:68:96:
                    9e:4c:48:3b:a9:9b:03:f9:03:04:2f:dc:55:00:4f:
                    a3:92:74:92:1a:6b:5f:b2:e0:97:0b:2a:a7:5b:4f:
                    85:19:85:de:90:96:e9:88:34:b0:dd:93:95:ce:94:
                    28:49:cd:47:2a:15:1d:62:08:d5:2f:af:8f:fc:dd:
                    90:ee:f0:da:58:5b:a2:b2:36:5f:5b:37:9d:28:42:
                    ab:bc:6e:07:4c:9d:e1:46:9f:dc:14:5a:db:32:ec:
                    54:d2:ec:3c:bf:8b:3f:4d:d7:af:5e:ce:35:b5:0a:
                    4c:76:99:6a:3d:0f:d3:f4:e5:f8:45:86:d3:55:44:
                    15:e1:e2:11:82:e3:a8:83:d7:e0:57:cb:02:cc:fc:
                    a1:f8:30:e1:34:d4:21:3b:73:bd:96:a8:72:63:aa:
                    f9:d9:50:ea:45:8e:29:4a:1c:d7:3d:91:19:93:03:
                    05:c6:c0:8a:c4:82:43:6d:32:ce:aa:db:cb:66:47:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:7E:CA:8C:E9:E6:9D:82:F4:55:26:4C:2F:1B:02:F1:FD:2A:99
            X509v3 Authority Key Identifier:
                keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/1d53e0aa0783f63607c5c18d953d6094aaf4f061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:21:26:93:02:1a:95:2f:c7:6f:d7:db:ac:90:84:b0:1e:e0:
         ed:d8:3e:12:50:ac:08:76:b4:72:61:70:d1:04:ff:1b:3c:15:
         6d:b8:7c:18:c5:1e:21:87:23:40:95:50:62:63:ac:a3:8d:9f:
         e2:91:bb:fd:8a:6a:20:c4:95:67:c0:6d:a7:1e:74:98:62:9b:
         ce:24:e6:db:b7:51:5f:74:8a:51:74:91:d8:7d:b3:06:4d:b1:
         d2:b0:18:4a:54:13:8b:66:18:cc:a6:7a:f5:1e:fb:45:32:47:
         52:48:27:04:9d:56:54:75:68:77:ec:d4:a2:05:20:10:71:c9:
         42:5f:0f:59:e4:54:e0:ea:08:b3:e4:16:74:76:5e:3d:67:ad:
         89:f3:70:0c:c1:b3:11:84:5c:c9:f7:ab:ae:86:ed:7b:78:11:
         44:d2:49:65:a1:0f:53:6b:25:2e:b1:55:3d:e2:30:8d:ff:c5:
         00:79:14:7d:e0:53:29:53:db:bb:42:dc:b7:8f:5c:94:ff:21:
         92:41:0d:22:1a:3f:e6:5b:fe:60:7c:36:4b:15:26:3d:22:09:
         7e:e9:0a:00:8a:43:10:a5:cc:44:fd:12:1b:29:8e:11:75:c1:
         8a:5a:21:68:5d:fc:25:c2:6e:66:c2:16:b8:fb:2c:6d:3d:6e:
         a3:fa:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org