Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/15c016ed28f718e81ccfe9f8bff6cff8f22ef2d1.roa
File:                     15c016ed28f718e81ccfe9f8bff6cff8f22ef2d1.roa (raw, json)
Hash identifier:          QGKwJPkALJhcuYzsieKFMrVUECvAUys2ffvBainZnxs=
Subject key identifier:   D6:15:24:8A:1F:32:4E:96:7A:3F:76:2E:DF:CA:F5:F0:B2:E1:D3:50
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       2314EF
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/15c016ed28f718e81ccfe9f8bff6cff8f22ef2d1.roa
Signing time:             Tue 03 Oct 2023 05:03:59 +0000
ROA not before:           Mon 02 Oct 2023 05:03:59 +0000
ROA not after:            Fri 03 Oct 2025 06:03:59 +0000
asID:                     267811
IP address blocks:        45.169.140.0/24 maxlen: 24
                          45.169.141.0/24 maxlen: 24
                          45.169.142.0/24 maxlen: 24
                          45.169.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2299119 (0x2314ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Oct  2 05:03:59 2023 GMT
            Not After : Oct  3 06:03:59 2025 GMT
        Subject: CN=15c016ed28f718e81ccfe9f8bff6cff8f22ef2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:f6:f9:b7:00:dc:5c:6d:6b:67:5a:51:64:
                    82:38:31:24:89:ca:9f:a0:0b:5f:97:de:ae:46:d8:
                    08:26:27:7a:3a:dc:a1:60:54:aa:67:5d:3c:87:97:
                    10:24:a2:b8:7b:b9:8b:22:1e:4a:22:73:a9:30:e7:
                    11:cb:fa:e7:39:61:2a:b2:f9:f3:96:ce:d6:75:f2:
                    7c:a5:69:3d:16:24:d1:39:27:6f:76:a1:96:dc:a7:
                    48:33:34:b1:1d:f7:5a:79:02:0f:ab:70:ca:62:d4:
                    97:73:ea:f6:16:7a:34:16:8a:9a:fa:0e:80:17:9e:
                    1f:5b:2a:66:c3:2d:b6:25:75:2a:64:d4:fc:54:57:
                    ae:54:a7:ef:83:a1:af:ce:e6:db:ba:69:3d:32:f5:
                    09:2c:6a:27:b0:37:73:dd:08:e1:f3:47:e8:2b:ba:
                    a6:77:42:ee:42:af:a3:10:19:93:d3:7c:ac:3b:1a:
                    c9:5f:3c:4a:c2:76:19:3d:16:f6:9e:5f:f2:d6:43:
                    92:5c:e0:43:86:75:66:c2:05:56:08:d4:51:d4:7b:
                    ce:ae:56:b4:89:9f:30:8a:7c:b4:45:8c:8b:aa:84:
                    04:a4:61:3c:ec:b6:28:04:f4:07:fa:59:cb:41:a4:
                    23:1a:82:b3:4c:92:fa:5b:96:7f:c4:33:25:1b:79:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:24:8A:1F:32:4E:96:7A:3F:76:2E:DF:CA:F5:F0:B2:E1:D3:50
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/15c016ed28f718e81ccfe9f8bff6cff8f22ef2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:29:fa:1e:f8:19:4e:82:34:76:23:16:b8:d7:1a:40:95:
         e6:1a:d4:13:71:58:77:36:5f:99:5f:9b:59:8f:89:19:4f:34:
         41:c9:09:d7:0a:89:c0:6a:0c:57:19:4f:17:1b:56:87:54:d0:
         8a:12:80:01:04:3c:07:c1:0e:88:50:4c:1c:48:cb:ae:fe:a4:
         ad:58:74:ec:4f:4f:fe:7c:9c:d5:53:2e:f1:aa:34:46:03:4a:
         ee:e8:a9:c4:b7:96:32:6d:43:d2:69:02:3d:f9:ec:76:9e:4f:
         f7:b8:89:8e:d0:70:a6:f3:04:a9:10:19:a6:80:81:e2:e8:fb:
         3e:db:25:39:34:8b:a0:02:b6:20:5b:e4:44:a2:10:93:45:0d:
         a6:bf:d9:18:a6:3a:df:d5:e6:e3:68:74:0f:bc:2f:d9:d4:27:
         21:52:a6:52:00:ce:d2:ea:f0:73:9a:82:00:4b:a0:65:73:ba:
         cf:5e:8a:a1:db:27:9a:ee:c2:bf:21:32:43:32:2f:a8:8f:3c:
         97:a8:9e:91:2b:1a:41:f0:f6:fd:1c:2d:ab:51:88:81:66:17:
         b2:94:ba:25:fb:18:14:04:b7:ad:18:65:03:6f:b4:46:f7:ce:
         30:0d:02:3a:6b:50:9d:75:8e:99:34:bd:68:7e:b0:80:54:57:
         df:88:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org