Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/f47915c4748a6ef9ca49ce22b412c24ea0c473f6.roa
File:                     f47915c4748a6ef9ca49ce22b412c24ea0c473f6.roa (raw, json)
Hash identifier:          33m2Jdkjlsb59aLc0O9bQpPKakYDTNVsfr8PaubDNZ4=
Subject key identifier:   7D:CE:1A:10:25:54:21:0A:AB:75:70:8B:D4:7C:5A:07:0C:98:06:96
Certificate issuer:       /CN=6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf
Certificate serial:       222F5B
Authority key identifier: 47:55:C7:65:5D:72:76:16:EF:5F:7C:59:7F:0A:43:0A:37:2E:2B:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/f47915c4748a6ef9ca49ce22b412c24ea0c473f6.roa
Signing time:             Tue 11 Jul 2023 19:31:28 +0000
ROA not before:           Mon 10 Jul 2023 19:31:27 +0000
ROA not after:            Fri 11 Jul 2025 19:31:27 +0000
asID:                     20207
IP address blocks:        45.7.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240347 (0x222f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf
        Validity
            Not Before: Jul 10 19:31:27 2023 GMT
            Not After : Jul 11 19:31:27 2025 GMT
        Subject: CN=f47915c4748a6ef9ca49ce22b412c24ea0c473f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:91:0c:76:1b:b0:2f:47:87:53:3f:f5:11:
                    bb:02:eb:16:41:ad:c4:34:e1:c8:cb:46:87:5e:40:
                    4a:82:f2:a5:86:11:50:ae:e2:07:97:2f:81:94:a3:
                    5a:e7:98:c5:96:3a:53:a3:59:89:30:52:2a:e6:30:
                    da:1a:73:05:e2:70:5a:e1:40:e8:64:92:fe:10:19:
                    68:0b:55:49:68:cb:5b:9d:24:fd:a8:c3:6a:f2:b1:
                    91:d0:23:ea:88:46:8d:bb:b7:74:bd:fa:9d:d2:56:
                    c7:99:27:d7:cf:52:26:34:4a:30:f2:4c:b1:f9:aa:
                    30:07:e4:9e:84:3b:96:2f:1c:ab:2b:3d:96:13:97:
                    ec:7a:61:d4:76:bb:ae:29:3b:ff:e1:17:1e:5a:5c:
                    4a:89:c0:52:be:33:4c:8b:6e:f5:2f:c5:53:b4:c7:
                    8d:ab:3b:1b:b8:63:6f:fb:03:df:f8:35:70:c1:41:
                    51:54:0c:33:49:bf:5e:96:7e:34:93:ec:ff:e9:95:
                    35:f0:af:2d:0a:fe:cb:c0:71:1f:97:3a:2a:d2:c5:
                    3a:75:0e:2d:fa:84:0e:29:9f:d6:c9:f5:19:b6:6d:
                    94:c7:91:28:fd:f1:5e:e4:a9:11:f6:da:cb:a9:b4:
                    c3:cc:22:15:34:e8:83:c9:ea:e5:e3:3b:1f:25:19:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:1A:10:25:54:21:0A:AB:75:70:8B:D4:7C:5A:07:0C:98:06:96
            X509v3 Authority Key Identifier:
                keyid:47:55:C7:65:5D:72:76:16:EF:5F:7C:59:7F:0A:43:0A:37:2E:2B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/f47915c4748a6ef9ca49ce22b412c24ea0c473f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:2d:1f:30:3b:df:28:68:78:b9:0a:4c:e1:6e:14:dc:96:
         b7:07:83:1e:5c:eb:68:36:39:0b:47:e9:56:36:e1:71:63:77:
         25:35:b4:ab:ce:ce:1f:8e:6c:22:e6:27:9d:c3:53:00:90:e5:
         8c:5a:ba:7e:f8:21:8a:a8:2f:a6:cd:89:34:62:84:28:d7:0d:
         2a:69:d7:58:b8:e7:02:04:d5:ce:ef:63:c8:28:24:31:9c:bf:
         b1:f2:3d:37:46:f8:02:48:f3:60:77:21:c5:79:52:43:25:9e:
         e9:e6:d4:e9:ff:14:f8:22:ae:b5:e2:f4:6c:f0:e0:a4:a6:6a:
         b8:78:2c:ff:e7:10:a3:ec:77:39:51:e0:76:33:d7:5f:ff:35:
         1c:4c:a6:d1:31:64:fe:a6:ea:8c:c2:5c:ef:b9:2b:b4:97:f1:
         65:c2:6b:0f:d5:8f:56:11:46:87:2b:7b:9e:4e:b7:82:00:16:
         72:4c:f2:63:11:af:6b:ef:04:b0:1d:e3:42:d5:75:ae:71:4a:
         df:99:27:8f:7f:09:dd:bf:c7:6b:3b:34:85:7a:f5:7c:c0:bc:
         c5:f1:22:0d:ac:a5:a3:4c:ab:83:61:09:7c:12:ab:0d:7f:f3:
         11:5a:28:b9:7f:d1:3d:81:94:79:74:5d:e3:fe:85:07:a8:ad:
         7e:cb:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org