Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/eaea59695d03ad9ab2605933befa161ba6b456bf.roa
File:                     eaea59695d03ad9ab2605933befa161ba6b456bf.roa (raw, json)
Hash identifier:          IedBRl18af7DSPbOmq3FvfPzF9wHdvYSP88j2aVa71Y=
Subject key identifier:   CE:C0:3B:10:AF:4B:CE:4B:E6:4F:EB:79:19:F3:30:71:72:38:C0:76
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       249E56
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/eaea59695d03ad9ab2605933befa161ba6b456bf.roa
Signing time:             Sun 12 Nov 2023 14:22:32 +0000
ROA not before:           Sun 12 Nov 2023 14:22:31 +0000
ROA not after:            Wed 12 Nov 2025 14:22:31 +0000
asID:                     266717
IP address blocks:        45.231.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399830 (0x249e56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Nov 12 14:22:31 2023 GMT
            Not After : Nov 12 14:22:31 2025 GMT
        Subject: CN=eaea59695d03ad9ab2605933befa161ba6b456bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:5c:a8:55:92:e6:ad:a0:b1:00:06:b5:0a:
                    dc:24:c8:eb:a9:a7:79:e2:32:1d:f8:6b:df:2e:b7:
                    55:84:28:ef:12:d1:6a:5f:a9:cc:75:f5:42:81:c1:
                    0e:52:4a:19:76:68:5f:23:b3:4e:6b:62:d6:33:79:
                    e4:c4:c1:ee:2f:3a:55:ca:17:65:b9:1e:45:bb:6e:
                    3d:fc:55:63:7e:89:f0:93:9a:b8:a3:f6:27:a4:8f:
                    67:a0:85:c1:f3:cb:89:a9:4e:31:53:51:8d:20:fa:
                    90:4b:a4:af:6e:00:15:68:8d:94:8c:0a:be:73:f1:
                    54:08:9b:72:96:ca:b0:69:36:e2:a7:35:e9:ce:3b:
                    98:ea:4b:9a:23:1a:1e:bf:54:2e:3f:89:42:1e:97:
                    d7:79:d4:b1:17:6e:20:04:03:9e:b5:12:eb:31:2b:
                    24:2c:51:50:e9:dc:f8:89:97:7a:2b:1c:0c:b2:fb:
                    5a:01:33:a1:cd:96:5d:75:21:02:df:99:71:e6:2d:
                    a9:9c:de:d0:a4:a2:68:33:7c:e5:32:87:d0:50:61:
                    57:c3:43:6d:97:85:7f:6b:e6:80:6b:53:cb:b0:fc:
                    c9:b3:a1:35:3b:3f:d6:cc:d8:4b:81:91:83:ab:c2:
                    2f:ab:b6:cb:c7:d2:ee:60:fc:c1:b0:cc:c3:bc:f4:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:3B:10:AF:4B:CE:4B:E6:4F:EB:79:19:F3:30:71:72:38:C0:76
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/eaea59695d03ad9ab2605933befa161ba6b456bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:49:14:89:42:43:93:66:46:9e:a4:6f:4b:a5:21:dd:d2:fd:
         d2:ce:a6:cc:05:ed:ad:4d:88:cd:9c:c3:9a:c2:7b:5a:13:f3:
         ef:02:f6:ba:da:6d:fa:b6:fb:5e:a8:a7:6c:b7:1d:76:d0:fe:
         07:94:03:0d:6f:cb:e1:26:4a:8b:42:bd:93:b8:95:84:43:30:
         68:07:a4:bf:70:1b:54:f9:49:e0:3f:ef:37:e7:b3:db:38:3f:
         5a:d8:d3:53:9e:c4:73:d0:34:65:f8:36:54:ae:52:2d:2f:42:
         34:37:bc:93:78:40:c9:80:d0:52:c8:e0:ff:63:b5:b9:58:0e:
         66:60:49:ba:38:ae:17:a6:f9:10:59:27:5e:bc:47:d9:61:38:
         c1:a2:ba:61:94:a6:c7:58:09:65:fc:71:97:f0:ca:fe:c0:9f:
         27:a3:aa:28:70:14:05:69:dc:68:74:7b:eb:b0:ac:f4:9d:c0:
         a3:73:c9:c5:3b:d5:f7:cf:10:d0:a8:19:93:c7:97:53:66:16:
         48:10:de:e1:06:5b:85:57:ec:c2:fa:93:4f:d3:91:65:bc:cd:
         4f:36:c6:ab:7a:63:20:7e:ae:51:fe:a1:a3:8f:71:dd:3e:70:
         59:f3:30:da:ef:0c:35:de:98:02:48:eb:d1:99:5e:de:84:75:
         53:f6:0c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org