Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/d2c60cf568e199b90dd7bb1be03f4097c227ff3a.roa
File:                     d2c60cf568e199b90dd7bb1be03f4097c227ff3a.roa (raw, json)
Hash identifier:          5E32XJGVn/GorZxaj/DzaYw12o0WTS0tQFdooFZ+mbc=
Subject key identifier:   D7:EF:B4:70:A7:23:12:16:2B:C6:99:B2:C1:15:57:49:94:45:E0:3E
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       111262
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/d2c60cf568e199b90dd7bb1be03f4097c227ff3a.roa
Signing time:             Fri 29 Oct 2021 18:15:19 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        45.174.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118818 (0x111262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=d2c60cf568e199b90dd7bb1be03f4097c227ff3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:f9:f0:1d:00:b6:26:ea:6b:d8:85:d2:44:
                    70:4f:4c:b2:06:bb:26:80:b1:fe:3b:f2:9d:b8:11:
                    ef:84:3d:0a:1f:9a:fe:54:42:5c:cf:13:5f:b5:02:
                    f3:1c:1b:af:d1:ad:20:a4:c5:25:ad:93:a1:a0:4e:
                    f2:0d:e2:b2:eb:2f:52:e1:27:9d:6a:57:b7:1b:ed:
                    f7:0c:cc:36:cc:d6:e2:75:cc:b1:56:49:f5:94:07:
                    d4:2b:63:96:9e:c6:4e:77:1d:c3:52:89:72:92:36:
                    13:e6:04:78:91:29:4c:e2:7d:da:2e:ff:a7:10:15:
                    ba:e3:89:6b:17:a2:07:8a:7f:8e:52:6c:2d:9e:f5:
                    ed:b2:8e:55:01:db:60:ee:1a:f6:e7:73:bd:72:47:
                    55:16:8d:b7:0f:99:f6:fb:60:06:c0:62:07:6f:a2:
                    c1:0f:3e:08:bc:33:88:50:6d:19:c4:19:fe:7b:0d:
                    42:1d:26:6e:8e:1f:4f:4e:1e:e4:04:ba:66:b9:a6:
                    2b:76:a8:df:c1:4a:54:ee:24:b3:4c:14:29:de:ad:
                    e5:6c:4d:ec:7d:e7:8d:fa:3f:b1:0f:3f:72:c6:37:
                    3d:45:51:69:05:99:d6:d7:ef:be:06:17:a1:88:f2:
                    7f:c2:36:04:db:23:e2:d8:02:a9:70:04:48:b8:6f:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EF:B4:70:A7:23:12:16:2B:C6:99:B2:C1:15:57:49:94:45:E0:3E
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/d2c60cf568e199b90dd7bb1be03f4097c227ff3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:3d:48:84:d3:06:0f:97:06:ed:0a:f4:5e:27:c3:b2:ed:
         14:d0:23:77:70:d9:b5:c6:08:ee:cd:20:ea:de:f8:fe:44:7b:
         92:18:19:3a:3e:22:c7:d0:c7:20:cd:19:df:33:c5:ec:92:c0:
         5b:49:78:10:5b:e9:53:82:57:da:ba:07:aa:1c:27:5f:85:69:
         87:86:88:c4:6c:fe:5a:90:7f:03:85:67:25:cc:0c:a0:d2:eb:
         f1:18:39:26:63:db:25:1a:dc:41:9f:36:5d:7b:1e:bd:2a:58:
         d5:1c:50:7a:9e:3c:30:9b:ba:7d:90:12:b2:a8:4f:43:c3:df:
         59:f5:ae:5c:be:de:a7:f3:44:54:e0:59:8b:95:e1:62:de:6f:
         cb:94:62:29:82:92:5f:f6:86:c1:5a:57:bd:32:b6:2b:65:41:
         2b:8a:43:d3:54:06:30:0a:bb:17:bf:e2:d3:7e:7d:fa:b1:4f:
         cc:66:8f:1f:f6:f6:93:d8:6f:a9:bf:33:f6:de:41:4e:c5:dc:
         0f:0f:89:5b:4e:08:94:4b:7a:b2:9b:79:74:8e:b6:15:06:ec:
         18:e4:7f:89:ee:96:7d:6e:16:02:e5:30:13:fb:be:7b:02:2d:
         55:c3:96:68:8a:9b:55:a6:cf:e6:fd:92:84:2f:11:9e:f8:18:
         c4:f9:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org