Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/91f5ac463dc016fc9f04ce62eab4eda7517da18f.roa
File:                     91f5ac463dc016fc9f04ce62eab4eda7517da18f.roa (raw, json)
Hash identifier:          /x8s3n446CNjuv7KLb3qCO1n1VBW6gvKhrzRd/N8jVI=
Subject key identifier:   2C:0B:9A:41:9A:5E:6A:B8:39:26:2E:56:3A:62:D9:A0:8B:BF:8E:2C
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1FF2E3
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/91f5ac463dc016fc9f04ce62eab4eda7517da18f.roa
Signing time:             Sat 11 Mar 2023 00:12:25 +0000
ROA not before:           Thu 03 Nov 2022 23:25:28 +0000
ROA not after:            Thu 07 Nov 2024 23:25:28 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093795 (0x1ff2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Nov  3 23:25:28 2022 GMT
            Not After : Nov  7 23:25:28 2024 GMT
        Subject: CN=91f5ac463dc016fc9f04ce62eab4eda7517da18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:bc:b8:27:d5:53:f9:1d:ad:eb:a0:4b:20:
                    ed:fe:19:99:3d:c9:e3:14:ab:c6:b1:da:36:d5:19:
                    74:8c:ec:07:7a:a5:9f:cd:01:ea:ae:a2:94:af:df:
                    d1:36:d2:1a:f3:92:41:97:a8:7b:ef:39:0a:95:95:
                    28:61:aa:b8:68:9d:d6:e3:f5:64:92:4f:37:19:20:
                    0f:32:e5:ad:1b:b4:3d:4d:80:39:54:ac:ee:b4:5c:
                    54:ac:7c:98:69:b8:23:b4:63:5b:7c:21:7b:84:8b:
                    46:1b:86:0f:ba:a3:12:38:66:13:34:e1:3c:39:3f:
                    df:87:09:3b:09:3f:0b:a7:a1:72:76:77:ac:0d:c5:
                    f1:6f:ee:0d:bc:29:c3:69:d9:85:3b:18:70:45:ef:
                    58:05:b9:b5:5e:28:c3:71:8b:bd:61:1d:c4:b5:5e:
                    f8:b3:ca:2b:ad:c2:d3:51:ef:1f:a7:b7:2a:67:19:
                    53:c5:d2:95:73:f7:b7:b6:8a:a9:01:f1:df:5c:f3:
                    7f:64:6a:09:cc:7f:c2:b1:08:81:3e:80:1f:7c:67:
                    b4:ff:73:cc:fd:b8:e2:28:c1:88:30:27:42:7d:6f:
                    64:0c:e9:64:cd:7e:6b:82:0a:0f:b1:f1:a0:ab:c7:
                    f4:a2:03:5d:62:4c:a0:55:7a:43:3d:e6:65:29:2d:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:9A:41:9A:5E:6A:B8:39:26:2E:56:3A:62:D9:A0:8B:BF:8E:2C
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/91f5ac463dc016fc9f04ce62eab4eda7517da18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:79:80:41:cf:d4:20:e7:39:4b:5c:9d:8f:af:c0:68:52:76:
         25:00:28:eb:49:fa:72:f1:b1:f1:1d:c4:9b:b4:62:72:3a:d3:
         d9:7a:f1:cc:98:19:c3:8a:20:c4:e1:63:af:14:e4:ed:a7:c7:
         b9:46:16:1b:a3:67:cf:67:d1:16:da:96:c8:c7:02:6c:4f:eb:
         af:44:66:f3:c1:36:76:b3:6b:0c:1d:39:3a:a0:92:f9:ad:70:
         f2:4b:46:05:53:75:61:e4:64:da:61:f6:d7:05:aa:9b:0b:e5:
         4d:04:6c:d3:27:17:af:96:4c:e6:9c:2b:c4:62:71:21:1f:93:
         9f:e3:67:6a:ae:68:6c:90:df:ba:0f:61:a6:66:10:63:ec:a6:
         b3:c9:a2:cc:5e:a4:72:a9:f7:00:dd:7c:d4:c5:38:89:0e:d5:
         50:28:77:f1:6d:71:47:41:9a:18:6e:8d:ca:e6:e8:a0:3a:a7:
         eb:8c:e5:4b:df:96:2c:7c:61:4c:f7:cb:e5:c9:5d:a6:2f:e5:
         51:6a:50:ba:78:9e:38:6d:38:71:5f:b3:a5:51:cd:ae:ea:cd:
         e2:b6:9a:19:e5:ef:0b:97:4f:31:b8:d7:b4:5c:a5:45:3b:8e:
         e5:d0:45:e3:f8:bc:2e:4e:3a:19:4b:08:88:de:b3:20:33:84:
         d5:6a:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org