Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91687398-a19a-4902-b571-3b645109dcb0/63f3c5f7136e93f140043bd17af18027073df3ad.roa
File:                     63f3c5f7136e93f140043bd17af18027073df3ad.roa (raw, json)
Hash identifier:          mQOjxEVdv3DU3l+y9iHevbMOOV5T1dVupGVYSy0MlCM=
Subject key identifier:   F5:CC:7C:32:B8:77:47:04:E7:47:16:6E:69:26:3D:FB:EF:68:C3:B2
Certificate issuer:       /CN=983c76974e3c3b2086b0a8f804bbdddef1de03bd
Certificate serial:       21E94D
Authority key identifier: 39:5B:CE:FC:92:05:ED:FD:B8:21:79:46:34:94:6D:BB:D4:84:78:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/983c76974e3c3b2086b0a8f804bbdddef1de03bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91687398-a19a-4902-b571-3b645109dcb0/63f3c5f7136e93f140043bd17af18027073df3ad.roa
Signing time:             Fri 04 Aug 2023 08:30:00 +0000
ROA not before:           Thu 03 Aug 2023 08:30:00 +0000
ROA not after:            Sat 02 Aug 2025 08:30:00 +0000
asID:                     266778
IP address blocks:        45.227.128.0/23 maxlen: 23
                          45.227.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222413 (0x21e94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983c76974e3c3b2086b0a8f804bbdddef1de03bd
        Validity
            Not Before: Aug  3 08:30:00 2023 GMT
            Not After : Aug  2 08:30:00 2025 GMT
        Subject: CN=63f3c5f7136e93f140043bd17af18027073df3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:10:8d:90:05:f6:db:29:65:32:b8:c5:41:
                    76:33:52:76:e4:9c:40:d7:c4:ba:b1:47:8a:03:23:
                    e3:7e:d4:55:00:24:c9:70:26:d0:34:28:39:9a:09:
                    fb:24:e2:a4:dc:75:21:9d:8d:e2:34:fa:76:73:27:
                    49:be:c3:f1:f1:8e:fd:6a:bd:ca:64:9b:77:61:2d:
                    0b:c3:ad:4f:c8:02:0d:c9:67:83:51:6b:9c:d1:3f:
                    bc:09:67:be:d6:98:26:72:6b:97:b4:af:c5:ba:bd:
                    4e:a6:12:6c:bc:8c:fc:5f:8e:5b:b9:8f:85:83:b2:
                    91:ca:bd:40:dd:88:21:01:95:17:1f:eb:68:e4:9b:
                    1e:a9:90:51:46:9f:98:97:11:71:3c:92:06:3b:c7:
                    d1:36:8c:40:19:50:65:ae:21:35:1d:c1:37:89:4e:
                    11:6d:09:82:1c:0b:e9:75:52:3e:b2:d8:73:9d:0a:
                    71:b3:61:1f:d3:db:48:39:84:41:00:92:d0:20:5b:
                    39:fa:4b:ba:e6:ce:49:ba:c7:cb:a8:ec:79:f2:a8:
                    75:a5:75:05:4c:1a:2c:31:b6:f7:df:c2:4f:26:33:
                    c5:07:a2:86:b0:cc:c6:bd:54:96:ed:19:37:2f:61:
                    43:6d:ca:f1:42:8a:12:ab:eb:3f:d4:a2:df:7c:67:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:7C:32:B8:77:47:04:E7:47:16:6E:69:26:3D:FB:EF:68:C3:B2
            X509v3 Authority Key Identifier:
                keyid:39:5B:CE:FC:92:05:ED:FD:B8:21:79:46:34:94:6D:BB:D4:84:78:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/983c76974e3c3b2086b0a8f804bbdddef1de03bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91687398-a19a-4902-b571-3b645109dcb0/63f3c5f7136e93f140043bd17af18027073df3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91687398-a19a-4902-b571-3b645109dcb0/983c76974e3c3b2086b0a8f804bbdddef1de03bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.128.0-45.227.130.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:03:ee:02:c0:b0:94:29:f3:72:b0:b7:53:1d:d7:60:0e:3e:
         b7:63:89:19:07:c4:92:fe:7b:4f:8d:41:db:50:a4:27:67:de:
         35:11:ed:7c:d4:86:20:12:6b:ec:ab:69:53:16:3e:79:00:88:
         5a:8e:61:fb:a3:35:f4:27:ae:98:2a:0a:62:13:e5:2f:b4:f9:
         48:1d:d3:13:b2:34:9b:23:fb:8f:8e:78:50:fb:56:a1:40:15:
         c5:c0:52:7c:70:57:44:2f:43:39:6e:e2:90:c8:07:9a:1e:20:
         2d:55:d7:ed:c6:61:c8:f7:17:c7:19:3c:eb:25:02:79:10:c9:
         00:aa:e1:9f:d7:00:23:2d:0b:00:0c:b4:e7:c1:f3:4c:a4:86:
         f4:59:9f:dc:5f:0e:99:9f:c1:b9:8c:19:24:a5:af:fc:c5:e9:
         b1:14:c8:61:30:68:bb:bd:51:53:bb:d3:02:19:49:5d:c1:8a:
         15:6b:cc:b2:0d:2c:db:8b:d1:b9:01:d5:d1:23:30:4d:2f:b6:
         2b:0e:d7:4a:45:5c:37:d9:9d:81:ba:67:7c:d6:94:ed:6d:2a:
         00:24:41:a2:41:bb:6f:61:e9:0c:bb:63:69:94:26:4c:93:67:
         f0:c0:39:e5:9b:e4:41:86:60:a7:e4:47:74:66:ed:6c:72:2c:
         f9:b5:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org