Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/e2a6a41b0f956500bd9b69dd689cb0c6504e652a.roa
File:                     e2a6a41b0f956500bd9b69dd689cb0c6504e652a.roa (raw, json)
Hash identifier:          8lwCpHKJP1vTX5gYzUTVnlLYHgPOL+3Pfi/qstyw1Ik=
Subject key identifier:   28:87:30:89:FC:5E:10:43:69:7E:3D:9B:CC:0F:80:C2:CE:76:96:5B
Certificate issuer:       /CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Certificate serial:       0C1C60
Authority key identifier: 18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/e2a6a41b0f956500bd9b69dd689cb0c6504e652a.roa
Signing time:             Wed 24 Mar 2021 14:44:37 +0000
ROA not before:           Wed 24 Mar 2021 14:44:37 +0000
ROA not after:            Tue 24 Mar 2026 14:44:37 +0000
asID:                     23470
IP address blocks:        45.170.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793696 (0xc1c60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Validity
            Not Before: Mar 24 14:44:37 2021 GMT
            Not After : Mar 24 14:44:37 2026 GMT
        Subject: CN=e2a6a41b0f956500bd9b69dd689cb0c6504e652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:4c:6d:4b:87:84:b9:10:30:f1:df:c0:43:
                    80:07:2e:a6:e0:40:37:35:05:33:8a:a8:6e:cb:6a:
                    b1:34:99:f7:b9:78:16:9d:55:d0:25:ec:af:b2:42:
                    3e:e7:0a:61:87:bb:d6:a9:95:77:41:a3:b7:f8:17:
                    2e:e5:93:81:9c:c2:6f:5c:b7:cf:31:b4:07:65:cb:
                    4b:99:b7:da:ac:4e:da:64:02:c6:91:a8:b1:72:89:
                    b6:7d:bb:5f:7b:48:74:28:47:61:11:78:7f:25:0a:
                    57:fe:e7:21:04:91:06:b7:87:d4:d5:ae:3a:fc:cd:
                    34:fb:a6:bd:6d:57:cd:d1:6d:49:c7:90:9c:0c:50:
                    7c:91:f3:da:c5:de:08:65:33:2c:96:d8:b9:ea:59:
                    fb:75:8d:cc:b9:c7:8a:6a:1c:6f:96:0c:a7:d7:b0:
                    1d:9d:b1:d6:2b:fa:54:59:0a:e2:7b:29:9c:3d:b1:
                    68:ff:bc:1b:9b:50:c2:cf:d1:00:66:85:c1:27:2d:
                    5e:eb:93:eb:77:1f:0a:c7:25:ed:ca:ed:99:5f:32:
                    e8:8c:ec:62:49:df:a2:e2:5a:6e:ef:2c:50:6b:6e:
                    06:89:f6:24:5e:f8:16:9e:49:bf:86:82:d3:2d:41:
                    93:50:db:a2:18:f8:f1:4e:58:3f:8f:32:24:ff:b9:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:87:30:89:FC:5E:10:43:69:7E:3D:9B:CC:0F:80:C2:CE:76:96:5B
            X509v3 Authority Key Identifier:
                keyid:18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/e2a6a41b0f956500bd9b69dd689cb0c6504e652a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:0c:28:99:a8:29:7f:38:dc:f9:3d:cf:77:14:e9:fa:0b:
         6d:9f:61:3d:f0:05:04:47:65:05:9b:21:d6:1a:39:66:50:de:
         39:25:dd:9d:67:d9:3b:4c:be:b6:05:c0:37:f0:74:42:e9:41:
         8a:d7:b1:27:c0:d7:1c:a3:d5:d8:b3:93:b0:2b:9e:70:09:82:
         ad:e3:ba:a0:8c:a4:52:bd:87:08:77:01:9d:f3:f8:28:f0:fc:
         24:fb:05:1b:6e:20:25:99:2c:e8:bb:f0:d9:29:cc:94:2e:97:
         55:30:14:a2:8a:49:b7:6b:20:47:3c:44:0b:4b:86:5a:3b:57:
         e7:4d:22:a5:72:df:4f:8b:64:73:4f:b7:3e:1c:ba:83:33:d5:
         9a:2d:84:b8:91:bc:b8:8c:c7:34:f6:05:ed:ac:e0:28:a6:49:
         2a:7b:1d:55:72:1a:0b:d8:28:18:c8:89:5d:94:8d:73:6c:49:
         bc:6e:a2:96:26:e7:ef:d9:19:db:9b:d5:9f:a7:45:b3:e1:04:
         c4:15:81:20:db:48:c4:16:49:f1:cd:89:86:fa:13:7a:06:3b:
         59:9a:18:bc:73:ea:f4:60:0c:96:21:55:55:3f:0f:3b:e1:38:
         d8:fa:84:da:45:9a:e9:af:31:f7:99:ba:2d:4c:55:f4:34:3e:
         c4:21:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org