Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/49f9d2d27352e27ac1321e10ba1898b23a8ddec1.roa
File:                     49f9d2d27352e27ac1321e10ba1898b23a8ddec1.roa (raw, json)
Hash identifier:          PMEZL27dBtBLtEuWgBU7oADJa7GAieiaB45lVBuY+cQ=
Subject key identifier:   0C:0E:90:13:F3:8D:98:F8:FB:30:03:76:C1:9C:4E:3D:A5:93:18:A2
Certificate issuer:       /CN=9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a
Certificate serial:       269232
Authority key identifier: 37:05:6F:25:93:D5:B4:8C:14:A9:67:F1:B9:AA:CF:3F:94:1D:E7:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/49f9d2d27352e27ac1321e10ba1898b23a8ddec1.roa
Signing time:             Thu 25 Jan 2024 16:27:30 +0000
ROA not before:           Thu 25 Jan 2024 16:27:30 +0000
ROA not after:            Sun 25 Jan 2026 16:27:30 +0000
asID:                     265673
IP address blocks:        45.4.100.0/24 maxlen: 24
                          45.4.101.0/24 maxlen: 24
                          45.4.102.0/24 maxlen: 24
                          45.4.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2527794 (0x269232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a
        Validity
            Not Before: Jan 25 16:27:30 2024 GMT
            Not After : Jan 25 16:27:30 2026 GMT
        Subject: CN=49f9d2d27352e27ac1321e10ba1898b23a8ddec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:30:68:77:b4:11:14:4e:5f:c3:6f:a2:38:
                    26:fc:99:7e:14:45:5c:df:b9:1a:26:51:a7:b4:05:
                    1a:2e:3f:d4:ed:3c:df:21:7b:12:b9:1a:90:03:29:
                    74:3d:85:68:17:21:04:ee:6e:da:e6:f7:00:cf:7d:
                    3d:65:ea:6c:a3:8c:b5:8d:2a:e4:33:59:ef:5e:f9:
                    fb:5e:09:b3:21:f0:d7:2d:de:03:3a:1f:87:00:79:
                    07:5d:22:0a:a9:a1:e1:70:d3:72:30:2f:b4:06:8f:
                    df:93:c2:d5:36:3e:3f:ec:da:13:3d:fd:e6:71:43:
                    6c:95:ac:d5:7c:1c:48:1b:59:8a:3f:9d:71:20:70:
                    dc:f0:6a:9f:d3:39:ce:e9:7a:df:a8:98:50:5c:f4:
                    55:14:f2:83:e8:e3:7f:cb:2b:e4:35:10:9e:ab:2a:
                    04:12:b7:51:bf:24:9a:ba:87:15:02:e1:f9:32:4a:
                    ed:4c:fb:e5:d2:6c:6f:7f:8c:eb:e2:43:8a:ac:61:
                    76:e7:e4:a9:86:45:b0:57:70:49:8d:65:68:d4:ac:
                    67:49:4c:b6:1c:4b:48:7b:49:e6:40:1b:02:41:e1:
                    e5:de:41:45:7c:7f:90:d0:de:30:07:31:21:33:a2:
                    2d:d4:63:91:45:79:9b:b9:e6:92:63:83:d3:c3:de:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:90:13:F3:8D:98:F8:FB:30:03:76:C1:9C:4E:3D:A5:93:18:A2
            X509v3 Authority Key Identifier:
                keyid:37:05:6F:25:93:D5:B4:8C:14:A9:67:F1:B9:AA:CF:3F:94:1D:E7:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/49f9d2d27352e27ac1321e10ba1898b23a8ddec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:37:ff:d2:26:f9:7d:28:66:b1:aa:d7:85:73:4c:d4:d4:9f:
         fd:bb:ac:0f:68:52:e5:a7:35:22:15:14:f3:1e:1f:4b:be:22:
         2c:76:4f:f3:eb:c1:3a:d7:03:fa:44:b7:7c:1c:eb:0b:8c:e2:
         6d:03:b9:0c:b0:af:a9:30:8f:b0:5a:5a:08:f3:3a:8e:f4:e2:
         8a:7e:b1:9b:18:dd:27:36:c6:bb:9e:ed:b7:69:27:06:a8:11:
         fa:25:3c:03:82:17:f8:7e:75:e1:26:91:8a:3e:4c:03:9f:cc:
         15:01:7f:a2:e2:63:c6:c0:3c:b4:9b:7e:07:e4:1f:1c:5d:c0:
         99:0c:00:84:b5:b6:37:c6:d5:08:cb:27:3c:69:78:c8:cc:d1:
         af:01:03:5f:48:ca:47:fa:fc:30:b3:aa:a0:4b:48:08:af:d0:
         a0:4b:8d:e6:4e:4b:cb:fd:6d:70:f9:40:ac:19:6e:40:a1:ce:
         39:1e:4f:4c:4a:b6:8b:01:2e:d1:9a:ab:c5:4e:01:fe:ad:58:
         44:cf:52:72:09:05:57:1b:0a:57:88:dc:6e:c8:25:2c:14:a8:
         b7:85:ba:7f:e9:8d:21:81:75:21:9d:04:ca:28:b2:a5:86:15:
         cc:3a:fe:c5:76:36:99:f5:5a:64:8a:0f:40:30:e2:00:6a:28:
         82:fd:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org