Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa
File:                     65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa (raw, json)
Hash identifier:          bFCpps2xvmI80N0hUXJ6WV0Kuue7iy8kSIIblXlo1sA=
Subject key identifier:   40:DE:E7:8A:EB:2C:BF:4E:7B:D7:89:7F:00:85:F5:76:A7:67:AF:FF
Certificate issuer:       /CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
Certificate serial:       224C34
Authority key identifier: CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa
Signing time:             Mon 07 Aug 2023 15:45:14 +0000
ROA not before:           Sun 06 Aug 2023 15:45:14 +0000
ROA not after:            Thu 07 Aug 2025 15:45:14 +0000
asID:                     27884
IP address blocks:        45.234.232.0/22 maxlen: 24
                          2803:8f20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247732 (0x224c34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
        Validity
            Not Before: Aug  6 15:45:14 2023 GMT
            Not After : Aug  7 15:45:14 2025 GMT
        Subject: CN=65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d4:51:de:f8:bf:cd:a7:d1:70:e4:05:55:8f:
                    b0:79:c2:70:8f:aa:4d:5e:09:fe:27:c3:6e:72:85:
                    84:0a:ae:75:33:44:1e:f8:1a:77:99:93:95:6b:20:
                    f3:80:5f:c4:09:81:25:cc:73:5d:e3:b5:2d:a1:f4:
                    e2:a4:13:b0:63:6e:86:48:0c:a6:b8:44:b3:54:9e:
                    82:12:22:63:d5:91:96:ea:32:28:e5:6d:0c:17:c1:
                    ea:c3:6b:4d:6c:10:db:72:82:dc:fa:7d:6d:63:c0:
                    06:62:f5:00:11:20:f1:fd:3e:0d:a4:93:a4:d4:f6:
                    d0:e4:30:5b:55:8e:be:38:11:d9:7f:c4:7c:95:90:
                    75:2f:1c:c7:79:40:ce:a6:92:1b:8e:50:25:cd:53:
                    96:0e:f8:e4:5f:3d:c8:25:c3:ce:34:2e:c8:6d:3b:
                    dc:01:3b:53:dd:39:8a:ee:5f:b0:05:2a:d9:f1:89:
                    7d:53:96:82:12:f4:98:52:ee:43:77:f6:14:aa:25:
                    c4:76:a9:f4:a3:ca:4b:10:b3:a6:2d:10:f5:00:7e:
                    b0:28:51:4a:25:d1:82:b5:35:6a:d0:03:5f:a2:fd:
                    df:b6:51:e4:3d:b8:39:4a:36:24:4a:b5:91:ce:f3:
                    f4:c1:b7:35:f8:ef:dc:25:cd:bf:56:e5:58:39:83:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:E7:8A:EB:2C:BF:4E:7B:D7:89:7F:00:85:F5:76:A7:67:AF:FF
            X509v3 Authority Key Identifier:
                keyid:CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/65ecf4f4b28a7d4c7f19d1288d5fbbc44313755c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.232.0/22
                IPv6:
                  2803:8f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:73:ea:e5:e1:d3:17:84:7f:ea:d5:f1:cc:ee:de:0c:0b:
         d2:6f:fc:b0:8c:6e:02:f0:45:62:12:43:47:0d:bc:eb:b9:2b:
         10:00:6f:5b:22:60:80:66:d1:6d:b5:6a:88:f0:f6:b8:25:8e:
         a2:15:c0:28:53:7d:b8:53:5a:3c:83:57:01:f8:35:06:0e:64:
         3c:76:b6:10:9c:5c:d9:a1:e7:02:cf:34:65:be:bf:a6:96:c5:
         dc:85:12:63:b2:70:e5:71:47:d4:c7:bf:d9:d8:3b:95:8d:d5:
         78:9a:e9:d3:8f:79:83:41:68:e8:44:b6:59:6c:0c:a8:be:0e:
         11:56:19:bd:fc:e1:7c:44:f3:bd:0b:70:6f:44:de:6e:bf:92:
         d1:ca:63:e6:cf:e3:93:62:dc:3b:3e:62:b8:5b:df:14:29:e6:
         cc:2f:1f:d4:c4:0d:58:ba:9f:19:9d:8c:18:40:11:41:cd:35:
         5f:4a:a1:94:67:99:8d:e4:62:4b:91:49:62:98:28:3f:c2:08:
         2b:00:a7:4c:68:2d:27:1a:cf:2a:fc:4c:6e:62:39:eb:ce:31:
         d2:ad:d1:ef:a4:28:53:d9:eb:c7:c2:0e:97:7e:a4:44:95:25:
         94:de:87:28:6d:09:41:24:f3:d3:e8:77:e8:3d:be:66:06:b9:
         69:cd:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org