Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/dde5360d124e0969b3cc28f2f1fac5c546e5d8e0.roa
File:                     dde5360d124e0969b3cc28f2f1fac5c546e5d8e0.roa (raw, json)
Hash identifier:          4/tcyARuAU0b1Kkb7jKkckopRPZ8GCriJ060D8ShdWU=
Subject key identifier:   B3:7B:38:95:96:4E:96:89:35:95:AF:CE:97:F1:37:86:53:E4:08:5C
Certificate issuer:       /CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
Certificate serial:       0D8B48
Authority key identifier: 48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/dde5360d124e0969b3cc28f2f1fac5c546e5d8e0.roa
Signing time:             Wed 24 Mar 2021 14:42:17 +0000
ROA not before:           Wed 24 Mar 2021 14:42:16 +0000
ROA not after:            Tue 24 Mar 2026 14:42:16 +0000
asID:                     262234
IP address blocks:        45.4.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887624 (0xd8b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
        Validity
            Not Before: Mar 24 14:42:16 2021 GMT
            Not After : Mar 24 14:42:16 2026 GMT
        Subject: CN=dde5360d124e0969b3cc28f2f1fac5c546e5d8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:9a:88:a9:bf:53:33:34:8a:f4:24:a5:bd:
                    9d:db:97:5e:90:29:f0:7b:b6:e9:88:48:8c:02:e2:
                    6a:34:fb:17:e5:47:ff:f4:25:6f:6f:fb:0e:e0:f2:
                    02:6b:92:83:4f:60:fe:1a:21:03:de:29:a1:df:e5:
                    9e:f7:ae:ed:c2:95:7b:57:bc:4f:fd:c9:6e:fd:4b:
                    22:ad:4f:c4:c7:ab:9c:39:99:33:41:78:9f:f1:82:
                    b1:8b:98:94:dc:45:40:23:d8:c4:6b:de:c5:c6:be:
                    09:01:88:c2:eb:32:66:4c:10:3d:c9:fa:cf:0a:34:
                    34:a8:37:1b:03:47:7c:db:20:b3:fd:62:d0:14:93:
                    27:22:27:10:b6:aa:02:e8:79:ed:f9:54:a2:b3:82:
                    2d:b0:e7:af:41:44:e6:d9:6b:71:cf:42:68:5d:3b:
                    e7:62:f7:00:83:fa:38:66:ed:2e:4d:bc:8a:1c:99:
                    1e:13:cf:7d:e6:4f:74:34:82:4b:c2:90:ef:65:3c:
                    7b:81:f4:af:39:dc:4d:a8:f2:42:ca:e8:c5:b5:bc:
                    85:df:ee:ec:32:a8:2e:55:32:b4:0d:cc:ff:ca:b8:
                    e9:e5:64:ac:38:23:6e:43:aa:b3:3b:b0:ec:33:b7:
                    e3:28:4a:4d:87:5a:c5:6b:5b:b7:e0:26:2a:e5:9c:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:38:95:96:4E:96:89:35:95:AF:CE:97:F1:37:86:53:E4:08:5C
            X509v3 Authority Key Identifier:
                keyid:48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/dde5360d124e0969b3cc28f2f1fac5c546e5d8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:dc:e7:45:8b:fb:53:fd:40:05:01:6c:68:77:94:4a:1e:f1:
         11:f9:9f:bd:7e:9a:b0:2f:15:b8:f4:58:a0:31:af:eb:fc:e6:
         51:da:5e:87:eb:1a:84:3d:1b:5f:9a:5e:f7:8f:0e:db:d4:c3:
         81:f7:39:70:43:7d:99:22:09:b7:1e:82:2b:91:a5:4e:dc:ff:
         b1:3b:8f:eb:22:39:0e:64:8a:ec:b0:22:bf:9a:c7:25:22:f9:
         16:1f:6f:c7:ae:a5:dd:84:73:4e:9a:e0:12:c0:88:6d:4c:89:
         81:af:6b:ce:9a:60:80:ed:8f:17:d0:7e:8d:19:5d:f5:17:76:
         9b:36:9c:12:e5:c7:84:34:10:df:4d:07:1e:d4:c7:73:26:84:
         1b:43:1c:2f:d4:f6:fe:49:de:a5:8f:9d:da:cb:e9:39:1d:2c:
         a9:ab:03:72:28:0a:2e:6e:f1:e9:9b:75:1a:a3:2b:3b:e3:0a:
         78:5e:b3:f1:8b:f5:ef:b7:60:d0:15:ff:23:2f:eb:c1:83:22:
         43:d2:43:61:f7:c4:3a:70:46:64:c5:c1:00:d6:2f:66:be:f5:
         d3:d9:87:89:77:50:08:41:ce:a5:f5:f8:00:c7:2c:82:50:67:
         60:f8:4b:39:bb:5e:36:9f:ba:b6:c7:a1:69:12:a4:8e:f7:57:
         0b:2f:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org