Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/54f1e1dda8656cd4332b7cad8809acf405a5ac34.roa
File:                     54f1e1dda8656cd4332b7cad8809acf405a5ac34.roa (raw, json)
Hash identifier:          Y+Us5skLtBeXYjHBinnS7GnekzrvWqoZATRGtwhihck=
Subject key identifier:   EB:C5:11:C1:18:0C:F6:30:CC:31:ED:32:A2:33:57:D6:30:A7:55:31
Certificate issuer:       /CN=72abba6b7cd25cc52bbab3345005452793c3070a
Certificate serial:       16A87D
Authority key identifier: DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/54f1e1dda8656cd4332b7cad8809acf405a5ac34.roa
Signing time:             Tue 23 Jan 2024 07:30:13 +0000
ROA not before:           Tue 23 Jan 2024 07:30:13 +0000
ROA not after:            Thu 22 Jan 2026 07:30:13 +0000
asID:                     271938
IP address blocks:        45.5.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484925 (0x16a87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72abba6b7cd25cc52bbab3345005452793c3070a
        Validity
            Not Before: Jan 23 07:30:13 2024 GMT
            Not After : Jan 22 07:30:13 2026 GMT
        Subject: CN=54f1e1dda8656cd4332b7cad8809acf405a5ac34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:95:65:12:65:be:9b:0e:43:93:41:cd:61:
                    88:06:0a:8f:53:ad:6a:c8:27:dd:a7:d9:53:e2:f1:
                    66:93:7a:08:13:2f:22:60:f0:47:ab:37:42:33:98:
                    6c:a9:90:aa:de:83:6c:8b:75:4b:6c:b4:04:64:c4:
                    2a:f1:10:26:15:e8:fa:5a:eb:39:f6:d8:c8:f2:70:
                    a3:93:29:8e:8a:0a:fa:5a:88:26:64:62:90:38:fe:
                    b7:41:5d:2e:a1:37:49:64:7c:d3:fb:71:80:7d:17:
                    a6:da:e3:b3:30:e8:6a:17:c1:ec:23:32:f8:5c:a0:
                    69:dd:a0:60:a2:c0:30:45:a9:04:8c:91:1f:b5:c5:
                    e5:39:2e:c3:ab:91:7f:c0:28:66:5d:27:f5:d5:5d:
                    d4:b5:85:ac:4c:a1:5b:6c:95:a3:62:9f:e7:a7:0e:
                    20:75:8a:4c:47:cc:23:d2:71:00:17:b9:8e:be:11:
                    50:68:52:d5:36:14:94:f8:dc:49:90:03:b9:11:90:
                    cb:28:5c:cc:fd:fb:a0:32:55:26:f3:66:d3:2b:55:
                    4f:d3:77:44:89:8a:a5:5d:be:eb:b2:0d:54:2a:b7:
                    f0:13:cf:09:7d:87:7c:08:28:a9:b7:a7:94:73:e9:
                    e1:e1:ce:f1:e2:6b:86:0a:ad:35:88:d9:a6:c6:be:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C5:11:C1:18:0C:F6:30:CC:31:ED:32:A2:33:57:D6:30:A7:55:31
            X509v3 Authority Key Identifier:
                keyid:DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/54f1e1dda8656cd4332b7cad8809acf405a5ac34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:07:1c:ee:fc:f3:2d:dc:92:ff:0b:53:b8:df:c2:c0:71:
         60:b0:e9:1d:f5:b3:be:d4:c6:15:24:9f:a8:4b:47:e0:39:70:
         4a:b6:17:bf:a7:7e:3f:68:27:f7:d4:11:50:00:3d:a4:d6:97:
         cc:32:2b:4c:05:12:f3:f2:35:89:8b:df:35:dc:91:e8:85:7d:
         01:d1:24:ee:6f:fd:f7:a4:14:33:b6:8d:f9:f6:04:4d:68:0e:
         fc:09:85:d2:8b:51:5d:c9:18:11:0e:f0:53:da:69:ab:3e:b7:
         b4:02:a0:7d:d3:df:2a:93:43:2d:8c:81:6d:1a:3b:e7:75:ef:
         bb:d6:af:a3:c8:d1:2c:29:ec:68:60:dd:77:28:0b:14:d7:68:
         76:b2:73:8b:45:25:47:a4:20:83:cf:5c:00:77:84:f2:bb:42:
         ce:ec:94:75:de:eb:b6:14:6c:7b:43:da:3a:0f:dc:af:64:23:
         b8:85:c6:98:7f:d5:3c:f5:79:e3:cf:1b:3b:f6:08:04:07:17:
         4e:fc:76:de:57:54:b5:cd:01:8d:97:a1:57:36:e4:b7:cf:e9:
         d5:4b:98:3f:d7:d1:62:47:88:39:27:17:56:67:55:3f:4d:b8:
         65:60:28:48:99:9d:c8:c4:14:d3:00:c1:ad:f2:57:03:8b:d4:
         5e:16:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org