Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/f8f565a0b03a4196545c729567ffedc8fe9b02d2.roa
File:                     f8f565a0b03a4196545c729567ffedc8fe9b02d2.roa (raw, json)
Hash identifier:          ksa4cgGggexWrCQXvYFUmoFl9lNgrmYvJr0ya7cOqbM=
Subject key identifier:   6A:1C:76:FB:31:88:A9:DB:65:B6:AB:00:47:C9:68:CF:80:D9:46:FA
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       10EFFE
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/f8f565a0b03a4196545c729567ffedc8fe9b02d2.roa
Signing time:             Fri 29 Oct 2021 18:11:20 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        45.174.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110014 (0x10effe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=f8f565a0b03a4196545c729567ffedc8fe9b02d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:1f:b5:55:81:45:7f:c6:bc:64:30:80:32:
                    fd:59:d8:9f:ef:f2:19:64:b3:bb:3a:cb:55:18:4e:
                    57:15:bf:85:7d:3c:27:ff:09:67:67:8c:da:8f:f4:
                    98:54:13:3c:34:ae:79:a6:73:f3:e8:37:50:2d:b6:
                    d5:a1:f0:78:06:8c:4d:a1:5b:71:41:2a:b7:ac:99:
                    d2:61:ad:f5:c7:5c:81:44:f9:c6:cb:fb:77:e4:d0:
                    23:89:49:21:fc:43:ee:11:51:5d:03:f7:f4:7c:40:
                    3c:92:6e:43:20:22:72:73:63:44:28:68:88:83:ff:
                    9f:b1:c4:30:e7:fa:70:42:42:f0:45:b4:8d:33:4c:
                    2f:55:09:f7:03:a4:c2:a4:24:9c:7c:1c:5a:fc:03:
                    ea:5f:39:87:2a:06:a9:e2:ea:8e:23:6c:4a:5a:d4:
                    38:2f:98:b9:bd:b7:32:60:1c:78:f3:d8:12:0b:d0:
                    5f:ed:bb:60:57:ec:42:2a:7a:c7:e8:61:f5:7b:4f:
                    ef:43:df:b2:c3:f5:df:ac:58:72:97:95:db:de:5e:
                    b9:9c:d4:94:38:05:1c:a3:3a:ae:22:e5:e1:8c:4c:
                    d4:d1:d6:e7:05:bd:e8:92:f5:35:e0:8b:6e:da:67:
                    4c:87:c0:d8:46:b7:1c:99:0e:e6:1c:05:4c:1c:c0:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1C:76:FB:31:88:A9:DB:65:B6:AB:00:47:C9:68:CF:80:D9:46:FA
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/f8f565a0b03a4196545c729567ffedc8fe9b02d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:b9:2a:cf:d0:e2:de:fe:43:14:97:5b:e1:a9:26:6c:4d:
         65:d6:c8:b1:d7:ed:3e:3c:9a:f5:d3:28:6c:2d:e7:f2:91:f8:
         20:0e:c3:aa:be:19:fa:95:1a:f1:a0:3a:f8:0d:d3:4a:54:a6:
         d9:22:fe:91:11:c7:4a:5e:fa:a7:95:5e:05:ff:29:9c:10:d7:
         06:c8:cf:4f:9a:dd:d6:79:5b:19:0d:6e:93:a3:19:55:d8:25:
         d4:7b:b6:78:5c:26:3d:26:2d:80:2a:b6:22:36:b8:43:60:29:
         7c:54:c0:1e:e2:5b:81:67:05:63:6a:18:5d:53:14:ca:52:94:
         39:11:64:fd:f7:c6:42:98:bf:b5:ad:ce:90:d2:e4:cb:54:46:
         80:16:ee:5a:63:4d:70:a8:4f:fd:01:a4:c6:a0:aa:9a:75:b0:
         02:d9:48:5e:94:66:be:d9:bf:0f:d0:cb:d1:e5:36:89:29:7f:
         b8:45:37:0b:49:00:36:07:ee:24:d1:98:bf:7e:e9:64:48:c2:
         ce:21:b5:1b:d7:ed:d3:8f:4f:d1:9d:d9:f8:5a:21:af:ae:ba:
         c7:0c:3f:c9:79:48:d0:33:89:53:d1:84:43:49:3c:30:e1:ca:
         f8:49:40:b5:cf:93:b0:84:c0:64:8a:d8:ad:da:33:6b:ca:47:
         65:20:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org