Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/2fa706becbdad0754b48df60ef9544490f3bfbdf.roa
File:                     2fa706becbdad0754b48df60ef9544490f3bfbdf.roa (raw, json)
Hash identifier:          n7nbz8Bt7S1oscfR8BvGpr4J/Jj1pLu3KG3P/574n0Q=
Subject key identifier:   94:13:26:AD:9E:2B:28:7A:27:CC:38:9C:A6:01:F9:6E:CD:E9:FB:9E
Certificate issuer:       /CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
Certificate serial:       2509E8
Authority key identifier: E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/2fa706becbdad0754b48df60ef9544490f3bfbdf.roa
Signing time:             Tue 23 Jan 2024 15:31:43 +0000
ROA not before:           Tue 23 Jan 2024 15:31:42 +0000
ROA not after:            Tue 23 Jan 2029 15:31:42 +0000
asID:                     266784
IP address blocks:        45.179.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427368 (0x2509e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
        Validity
            Not Before: Jan 23 15:31:42 2024 GMT
            Not After : Jan 23 15:31:42 2029 GMT
        Subject: CN=2fa706becbdad0754b48df60ef9544490f3bfbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:2a:8c:40:27:56:51:af:36:8c:59:ce:1d:
                    5f:22:fb:16:88:31:5a:90:93:ab:51:9f:a3:09:c1:
                    08:c5:92:5f:4c:2f:89:7c:05:d9:58:9a:52:5f:62:
                    1b:41:ca:ae:1f:d5:4e:ec:f6:69:8a:f0:90:c0:bc:
                    fa:cf:21:00:b9:e7:3f:50:10:e1:12:0c:6b:e1:04:
                    94:72:e5:74:7e:a2:f5:77:3b:b6:53:0e:a0:51:49:
                    21:b1:45:a4:97:2b:28:39:d0:dd:64:d9:8e:06:b0:
                    fb:fe:e6:29:07:c1:0f:45:64:25:b2:de:12:70:30:
                    36:48:30:66:7d:75:70:ce:6c:24:2a:57:0f:3e:f2:
                    ad:1c:70:7a:6f:75:db:e8:c3:ec:74:8c:81:63:af:
                    f3:64:94:2e:2e:6b:b8:5d:67:4b:9e:21:2c:02:3a:
                    7b:52:e6:c1:e5:78:50:6f:f3:12:be:57:2e:a0:80:
                    8d:cb:f2:8d:b2:c1:ee:e0:91:64:c0:84:6d:11:fb:
                    93:69:da:e2:ac:c0:6e:28:cd:93:1f:d5:3a:c9:b9:
                    80:15:d6:dc:34:08:77:e8:d4:01:63:05:2e:12:88:
                    d0:87:73:74:fd:9a:db:0b:fe:9b:7e:46:d9:db:2a:
                    ab:02:47:b6:4a:a7:f6:50:74:dc:90:14:55:22:0a:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:13:26:AD:9E:2B:28:7A:27:CC:38:9C:A6:01:F9:6E:CD:E9:FB:9E
            X509v3 Authority Key Identifier:
                keyid:E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/2fa706becbdad0754b48df60ef9544490f3bfbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/90ef0bf45eb95f428a97e23652586ee37cd91ffc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:58:40:ac:11:6a:ba:14:e9:b0:a5:60:40:96:80:09:24:38:
         c8:b1:e0:8d:83:60:05:b8:7f:05:3b:98:bb:de:2e:1e:38:db:
         3d:64:fe:8e:a2:64:35:c8:79:c0:89:eb:ac:08:42:92:5e:bb:
         1e:9c:bd:ea:3b:f7:27:3a:ae:83:8a:4e:72:0e:18:50:90:45:
         2c:ca:92:e7:2f:b7:ca:9f:d8:ab:38:24:a6:93:4b:d2:48:a0:
         aa:cc:ae:0c:d7:30:d4:c2:56:3c:d2:4f:7d:03:9c:57:8e:cb:
         af:ce:9f:84:18:29:90:08:9a:2c:1f:ef:70:76:77:50:94:55:
         f8:09:82:14:76:81:76:e5:2e:d6:0e:9b:f7:7c:11:09:a2:8f:
         f8:fe:f5:c7:6f:6a:c1:8a:ab:9f:01:71:ea:7a:36:80:d5:34:
         2f:79:ec:91:62:4b:7b:5e:a7:87:b0:f3:37:a5:be:2e:a3:58:
         7d:dd:45:f4:39:26:dc:e0:9f:33:57:d5:b2:a0:66:35:a5:7d:
         6a:7b:8e:f6:87:b2:8b:00:c4:7c:1a:33:37:52:3f:f2:7f:e3:
         48:f6:c5:66:dd:c3:52:1e:19:58:ea:95:b0:e8:4c:e6:bc:1d:
         46:33:b0:ae:01:58:46:9e:5e:4b:8a:1e:cb:41:11:f0:7c:22:
         e0:01:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org