Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/3c47b0b67aed67aa031058cd8356426972dfe4a0.roa
File:                     3c47b0b67aed67aa031058cd8356426972dfe4a0.roa (raw, json)
Hash identifier:          HPoWGaSytkJ/fXnQYkBxLZlFd+8PEipaT1Ut4CyQbPM=
Subject key identifier:   02:44:A0:EE:F4:F9:62:95:66:84:43:66:27:9D:76:75:66:6B:DB:84
Certificate issuer:       /CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
Certificate serial:       0C402C
Authority key identifier: 40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/3c47b0b67aed67aa031058cd8356426972dfe4a0.roa
Signing time:             Wed 24 Mar 2021 14:45:26 +0000
ROA not before:           Wed 24 Mar 2021 14:45:26 +0000
ROA not after:            Tue 24 Mar 2026 14:45:26 +0000
asID:                     265867
IP address blocks:        45.225.70.0/23 maxlen: 24
                          45.225.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802860 (0xc402c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
        Validity
            Not Before: Mar 24 14:45:26 2021 GMT
            Not After : Mar 24 14:45:26 2026 GMT
        Subject: CN=3c47b0b67aed67aa031058cd8356426972dfe4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:10:a0:8a:71:31:16:94:38:9c:64:7c:5c:
                    ca:ea:dc:bf:ac:33:ce:7f:22:4b:20:9a:12:9a:f3:
                    15:db:f9:32:6c:f3:7c:c7:5d:4c:db:c8:54:14:74:
                    ae:52:31:13:1e:3b:c3:cb:52:f2:8c:cd:5e:39:19:
                    23:3f:5d:d0:56:19:01:79:7e:46:1d:65:04:5a:3a:
                    ac:09:77:a9:57:94:09:8a:21:f5:0e:1c:41:d4:28:
                    85:18:32:62:60:e8:86:87:db:66:76:a2:89:0d:fe:
                    49:e9:ef:de:34:b6:7d:ce:59:b5:6b:39:49:a5:e8:
                    b1:df:f6:29:a3:be:94:c7:42:0c:e4:ea:ed:72:71:
                    9e:bd:be:12:87:e3:ab:89:a6:7c:21:e6:67:64:ca:
                    2f:40:33:61:c6:52:da:97:af:6f:fe:44:c6:ef:cb:
                    d3:79:55:5e:22:00:82:11:07:73:b9:50:91:4b:2a:
                    61:83:1e:ea:d0:8b:ab:08:33:1d:39:80:3a:23:f3:
                    91:a6:d0:fd:b6:87:a2:91:4e:81:51:2e:a8:ec:5f:
                    14:0a:e9:8d:f2:c4:b5:18:6c:be:58:6f:ed:3f:39:
                    97:1e:33:24:38:1c:55:b6:02:32:d7:ad:39:e3:b6:
                    ac:97:d8:0d:4b:ba:ce:05:8f:df:02:09:7f:76:41:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:A0:EE:F4:F9:62:95:66:84:43:66:27:9D:76:75:66:6B:DB:84
            X509v3 Authority Key Identifier:
                keyid:40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/3c47b0b67aed67aa031058cd8356426972dfe4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/e968e7767f9eef64694a8a23c6caf72aa6d20432.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.70.0/23
                  45.225.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:d1:e8:ba:6e:04:7c:6e:e0:59:1c:0d:a0:dc:1d:bb:2e:
         e3:8b:ec:2e:7b:a6:ab:03:07:26:46:8d:6e:ab:54:e5:89:6b:
         2f:b9:5c:11:91:e1:a3:b3:05:3a:aa:bc:ce:af:f3:9e:7d:da:
         f3:54:34:1c:5f:1e:b1:17:dd:a7:ed:42:3c:de:6c:03:5f:0c:
         60:7e:b0:db:f3:83:8b:5e:d3:e1:7e:45:4e:77:d8:12:75:47:
         bf:9c:a2:e6:b2:a9:e9:b8:91:c2:bc:bc:be:7f:c8:c6:7e:f1:
         99:36:7f:7f:8a:97:97:aa:0e:3f:e1:b8:40:44:0f:01:d0:38:
         2a:4b:e8:df:b0:61:5e:38:94:e5:94:03:00:58:c4:c0:19:02:
         7f:e8:67:7b:5c:cd:d9:f1:5e:43:1e:05:22:3d:e3:15:9a:08:
         db:cc:99:f4:02:02:55:d7:93:90:cc:2d:fc:e7:56:cf:a8:e3:
         34:2f:4d:83:1f:d8:9b:54:24:91:30:41:d4:20:f3:82:2c:6e:
         75:c4:19:bf:27:98:17:35:5c:46:ba:e2:f3:14:3e:eb:71:e9:
         44:55:6f:c9:8e:79:54:98:cb:44:6c:2f:20:c4:a0:80:83:af:
         b8:77:47:e6:a9:b9:13:fc:fd:62:88:ce:a5:64:9b:40:ef:3b:
         63:e9:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org