Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/95f75affc5719f7d06f3bc769bf6da9e1a452250.roa
File:                     95f75affc5719f7d06f3bc769bf6da9e1a452250.roa (raw, json)
Hash identifier:          wDx3TqoJcPDQOMor2WiiUhqCAEAcGnwN4IenScZ0FWA=
Subject key identifier:   5B:7A:A5:B8:BB:B5:75:6C:49:2D:1E:D7:48:C1:CF:D2:DD:E2:C1:23
Certificate issuer:       /CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Certificate serial:       0CD87D
Authority key identifier: 61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/95f75affc5719f7d06f3bc769bf6da9e1a452250.roa
Signing time:             Wed 24 Mar 2021 14:33:14 +0000
ROA not before:           Wed 24 Mar 2021 14:33:14 +0000
ROA not after:            Tue 24 Mar 2026 14:33:14 +0000
asID:                     266902
IP address blocks:        45.161.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841853 (0xcd87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
        Validity
            Not Before: Mar 24 14:33:14 2021 GMT
            Not After : Mar 24 14:33:14 2026 GMT
        Subject: CN=95f75affc5719f7d06f3bc769bf6da9e1a452250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:de:c1:89:6f:53:f4:31:d9:8f:c2:82:af:
                    86:62:5c:4e:d8:ec:75:5d:f3:03:94:be:da:42:bb:
                    f6:f2:6e:f1:0a:41:21:f3:2d:0a:47:72:2e:b5:9e:
                    63:e5:5f:d4:2f:78:7a:6c:90:33:4e:a8:dd:20:5b:
                    05:14:0e:22:23:49:8d:35:ff:10:d1:29:5f:45:12:
                    6f:f8:9f:f2:1c:25:9f:18:77:29:8c:2e:4a:ee:38:
                    72:ca:65:16:ed:6f:89:9c:47:0b:ff:13:d4:32:c7:
                    9b:ae:a3:54:d0:be:1a:87:5b:3c:41:ba:4a:ff:55:
                    e9:a0:32:ad:03:86:5a:7b:21:22:c7:fc:9c:ab:22:
                    7a:cc:46:ef:10:d3:70:3f:17:10:3f:a5:5a:7b:49:
                    fb:76:f7:76:4c:9b:86:a0:3e:14:3b:09:e8:77:63:
                    72:2c:d3:0d:eb:d8:7c:58:35:36:6f:5d:64:b3:b6:
                    d1:cd:71:38:09:dd:18:10:dd:90:33:a7:da:33:cb:
                    1a:c5:0c:70:fd:0f:54:48:dc:cd:d4:82:37:4f:23:
                    59:43:d0:8c:9b:7c:72:89:4b:1c:75:15:38:ef:ba:
                    60:7e:dc:98:ae:44:16:bb:55:8d:8a:20:40:12:89:
                    cd:e6:4b:d2:8f:cf:e5:b3:8a:8b:31:68:04:af:2b:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7A:A5:B8:BB:B5:75:6C:49:2D:1E:D7:48:C1:CF:D2:DD:E2:C1:23
            X509v3 Authority Key Identifier:
                keyid:61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/95f75affc5719f7d06f3bc769bf6da9e1a452250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a6:cd:9a:c2:74:ed:b0:65:0e:93:68:9d:f8:6b:7b:11:d0:
         f5:06:ff:f9:6c:6d:f3:8a:85:0c:43:65:4d:22:86:9b:44:81:
         96:7d:f3:c5:09:27:5b:86:a9:00:ec:76:a3:6e:64:39:85:5b:
         5c:2a:b3:2e:0d:d8:ed:cc:fa:40:ba:90:86:6a:92:b7:90:2e:
         fd:71:35:ef:0e:54:cc:22:df:87:c6:42:2b:3a:d4:69:d7:fa:
         22:59:07:48:b4:e4:bf:d0:5b:ac:87:25:27:c4:bd:ee:2f:10:
         79:39:2c:cf:31:af:fb:d9:70:0b:5e:bd:1c:b7:fe:d2:cc:c8:
         e3:26:d1:75:8c:82:bd:dc:8f:9f:55:ff:86:c9:8c:81:1c:c8:
         9c:ff:05:ff:22:a3:b3:82:b2:04:49:fb:49:12:bb:34:84:b7:
         d6:66:b8:41:b9:82:7a:cd:8c:7d:cb:db:fb:a7:18:a4:7c:df:
         07:99:41:69:8d:bb:3a:87:cd:33:ac:77:42:25:84:00:e3:45:
         90:a1:e3:38:cb:8b:da:b3:87:d4:af:24:0b:8a:e2:43:39:aa:
         24:1a:0b:29:bf:c0:ce:41:39:2b:97:f3:3e:85:13:26:b6:00:
         66:7f:de:8c:15:29:54:83:e0:36:d6:95:74:86:56:c2:f0:6e:
         96:01:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org