Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/0cb89b072560ca9a62a09960b1fa16bdadb5b5fe.roa
File:                     0cb89b072560ca9a62a09960b1fa16bdadb5b5fe.roa (raw, json)
Hash identifier:          SLHTvRKA//d5lHhqYBNS7dB/8sBLDbSKzZmElqTCwuc=
Subject key identifier:   B6:F8:DC:77:1F:37:04:2C:E3:55:42:E8:19:76:7C:A0:43:6D:F8:25
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       1FD6D6
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/0cb89b072560ca9a62a09960b1fa16bdadb5b5fe.roa
Signing time:             Sun 14 May 2023 15:57:21 +0000
ROA not before:           Sat 13 May 2023 15:57:21 +0000
ROA not after:            Wed 14 May 2025 15:57:21 +0000
asID:                     265621
IP address blocks:        45.176.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086614 (0x1fd6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: May 13 15:57:21 2023 GMT
            Not After : May 14 15:57:21 2025 GMT
        Subject: CN=0cb89b072560ca9a62a09960b1fa16bdadb5b5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:97:1b:5a:4e:f8:79:5d:5d:36:0c:25:cd:
                    29:18:64:be:2b:98:49:30:8f:6c:ba:2a:a6:0d:a7:
                    d1:f9:a5:8d:80:32:b8:bd:ea:10:7b:6a:63:db:f7:
                    e2:2e:5d:79:e6:a2:d6:76:c0:06:25:3e:10:80:41:
                    6c:40:2b:bf:fb:e3:cc:b5:d0:ed:e0:55:a5:3c:4a:
                    ba:28:d9:3f:f3:e1:c9:18:e3:e9:8b:60:15:54:83:
                    fb:07:df:3a:da:30:5a:4a:c5:ca:9c:2b:c8:f7:e7:
                    b5:35:01:4c:7d:2e:b7:d3:cd:5d:e1:b6:5f:e2:91:
                    e8:02:6b:a0:64:82:fb:fa:3c:47:b1:90:13:d9:7d:
                    5f:c2:51:7c:28:4a:46:91:fa:63:87:bc:c3:4f:f4:
                    77:9c:da:7c:aa:80:f1:56:e5:86:a2:09:21:ca:56:
                    5b:1c:71:f8:55:d7:cc:3d:17:0a:df:11:fe:0c:47:
                    af:70:1f:98:9d:e4:e4:15:52:ba:9d:01:78:69:5b:
                    81:4d:a6:2e:f6:97:d9:0c:ae:57:82:f4:82:45:a3:
                    cf:b6:43:2b:51:af:71:cb:d7:72:b6:cb:e7:31:e0:
                    9b:78:5f:44:d3:27:f8:dc:0c:a2:83:66:bd:08:bb:
                    bc:b5:4e:61:87:07:36:de:bf:6e:b4:41:e8:2c:cb:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F8:DC:77:1F:37:04:2C:E3:55:42:E8:19:76:7C:A0:43:6D:F8:25
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/0cb89b072560ca9a62a09960b1fa16bdadb5b5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:bb:28:e9:6f:50:fe:96:f0:56:93:19:58:63:7c:56:c6:
         c8:34:80:54:70:3e:d3:94:b4:49:40:06:88:61:23:0d:33:bd:
         68:5d:e4:6c:13:4b:d7:30:c3:21:59:98:9d:f3:33:c0:e5:d2:
         a9:7c:e3:eb:db:dc:3d:be:b2:4d:f0:52:cf:f5:df:bb:21:1c:
         c6:ba:df:c2:49:09:59:08:86:67:51:8c:3b:5a:3b:c3:64:bc:
         bf:72:c2:ab:80:51:9a:1c:76:5b:ed:38:a5:a8:fc:fe:dc:9c:
         48:91:27:21:22:22:95:e7:7c:23:25:7d:52:38:33:b0:99:18:
         99:dc:53:89:f2:55:59:78:b6:87:ba:82:89:57:66:87:6d:4b:
         83:41:47:50:07:08:95:d2:fd:3d:35:18:25:58:e9:ce:db:b1:
         43:8e:ad:84:5d:bf:de:66:1c:3e:c5:bb:1c:5a:e1:70:78:85:
         f8:7d:47:6a:49:b4:e7:0c:02:8a:13:63:62:b6:c1:6e:c0:ef:
         ab:bc:e8:7d:7f:70:da:c6:1d:50:b3:75:11:cb:b6:35:14:05:
         e9:af:06:1e:d6:16:dd:f8:53:bd:f9:2b:3e:02:41:81:b3:8e:
         9d:15:2b:29:43:fa:e7:ce:71:85:86:71:6d:38:6e:b5:23:7e:
         3d:f2:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org