Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b47fc06-5bc9-474e-83d4-d5ef2c410626/a23354a1558661864f6df5187e9e97f3fefaf8ff.roa
File:                     a23354a1558661864f6df5187e9e97f3fefaf8ff.roa (raw, json)
Hash identifier:          5JlporTmp/R8jCNuCHsb8T8V/jERpcNgLIO8xLckg1Q=
Subject key identifier:   07:3D:B1:8F:BD:C8:00:18:33:79:7E:1F:E0:FB:98:26:BE:98:4D:D9
Certificate issuer:       /CN=e058abae199bac9b4ce90c3613ee6aff97216c21
Certificate serial:       1B2F3C
Authority key identifier: 27:C1:1E:37:DB:3C:B1:2D:CB:BD:35:BE:5A:CE:76:3B:2E:19:3D:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e058abae199bac9b4ce90c3613ee6aff97216c21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b47fc06-5bc9-474e-83d4-d5ef2c410626/a23354a1558661864f6df5187e9e97f3fefaf8ff.roa
Signing time:             Mon 08 May 2023 17:09:11 +0000
ROA not before:           Sun 07 May 2023 17:09:10 +0000
ROA not after:            Thu 08 May 2025 17:09:10 +0000
asID:                     269830
IP address blocks:        45.188.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781564 (0x1b2f3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e058abae199bac9b4ce90c3613ee6aff97216c21
        Validity
            Not Before: May  7 17:09:10 2023 GMT
            Not After : May  8 17:09:10 2025 GMT
        Subject: CN=a23354a1558661864f6df5187e9e97f3fefaf8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:28:90:00:37:63:3c:d0:b3:94:77:21:ac:
                    61:d0:97:b4:41:2a:f2:be:ad:f9:79:d0:33:0b:e9:
                    09:a8:34:25:ef:16:e7:1d:0e:e4:4a:32:e7:38:d4:
                    48:cc:ba:7c:83:09:aa:24:10:ab:73:17:61:d7:db:
                    d7:f7:96:17:d7:5f:2c:59:85:d4:09:2d:a8:43:48:
                    07:19:31:36:bc:cb:c8:27:bd:08:d4:2a:bb:d5:34:
                    a4:22:fd:9d:a9:ce:8e:fd:54:97:77:75:45:d1:ba:
                    ad:97:7d:59:78:40:3b:cb:14:f5:3c:b6:c0:3b:ba:
                    0d:b1:cb:c5:81:17:e6:47:32:97:4a:88:ff:61:30:
                    c5:8c:30:5a:a8:97:54:0d:73:eb:28:2d:68:01:38:
                    65:a3:f7:2c:21:06:22:d0:ff:50:ab:13:d0:65:3a:
                    c1:19:3d:56:25:a0:f9:18:a8:ea:40:cf:51:38:94:
                    ee:d4:90:79:69:2d:49:f8:fa:e6:65:a2:4d:af:2d:
                    b1:b2:f2:46:07:62:05:bb:82:e3:a4:66:24:b8:f6:
                    f2:e4:3b:bb:60:92:3d:44:07:73:cf:f0:bf:a3:85:
                    5d:eb:dd:6e:f8:97:79:6f:0c:9b:32:6d:8c:19:f5:
                    75:7e:5f:9f:17:dc:e2:9a:14:74:f2:00:ab:56:d4:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3D:B1:8F:BD:C8:00:18:33:79:7E:1F:E0:FB:98:26:BE:98:4D:D9
            X509v3 Authority Key Identifier:
                keyid:27:C1:1E:37:DB:3C:B1:2D:CB:BD:35:BE:5A:CE:76:3B:2E:19:3D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e058abae199bac9b4ce90c3613ee6aff97216c21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b47fc06-5bc9-474e-83d4-d5ef2c410626/a23354a1558661864f6df5187e9e97f3fefaf8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b47fc06-5bc9-474e-83d4-d5ef2c410626/e058abae199bac9b4ce90c3613ee6aff97216c21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:72:4f:12:56:9d:41:ce:b2:e7:87:82:47:bf:13:22:aa:f1:
         6c:1a:66:7a:9a:50:1e:68:c5:88:8d:0b:5b:53:fa:a1:a1:80:
         04:13:f3:c5:60:2c:c5:7a:f0:b2:36:5b:7d:81:90:74:f4:75:
         69:cf:80:1b:45:3c:a0:74:6f:0b:c1:50:2c:db:56:5c:14:df:
         b2:5d:aa:44:f5:5e:9e:af:5a:37:2c:3f:58:96:a0:f2:ba:6a:
         b6:5d:a8:17:c4:3f:b5:67:1c:cd:4e:6e:5a:1a:76:32:cd:5c:
         a7:27:1c:4b:a0:c2:cc:dc:3b:67:3a:5a:5e:db:53:30:df:24:
         66:cc:a8:32:e8:8b:6f:b2:5d:e4:2f:aa:e3:49:13:87:8e:09:
         75:ae:20:eb:ea:78:41:e0:ae:7c:f5:08:42:9f:c3:c5:58:b8:
         af:11:9b:ce:a8:f7:6c:c5:c6:9c:03:78:d7:9a:db:52:ab:d6:
         82:1b:f8:22:4e:ad:04:41:12:68:92:1d:8c:2e:33:f4:90:9c:
         e7:17:f1:eb:19:53:93:e2:93:8e:9e:cf:a1:6d:e3:46:65:5e:
         d1:dd:15:6a:28:52:7d:2c:1c:24:e1:6f:71:cd:ae:7b:60:a6:
         55:2e:d0:68:ad:b8:41:14:65:e0:bc:0b:3c:2c:11:85:27:63:
         4d:31:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org