Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/6c4fc16cdde8b9e5dab62cf189be4b984e08a97d.roa
File:                     6c4fc16cdde8b9e5dab62cf189be4b984e08a97d.roa (raw, json)
Hash identifier:          xtL42jXRVmoM8uNtjTcD3X/7Y3LGqGddZu0IZwBxjrM=
Subject key identifier:   E0:F1:67:8F:2A:A4:87:54:45:39:B8:08:E4:5D:1C:27:FB:A5:09:70
Certificate issuer:       /CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
Certificate serial:       0646AF
Authority key identifier: D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/6c4fc16cdde8b9e5dab62cf189be4b984e08a97d.roa
Signing time:             Wed 24 Mar 2021 14:34:55 +0000
ROA not before:           Wed 24 Mar 2021 14:34:55 +0000
ROA not after:            Tue 24 Mar 2026 14:34:55 +0000
asID:                     266832
IP address blocks:        45.238.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411311 (0x646af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
        Validity
            Not Before: Mar 24 14:34:55 2021 GMT
            Not After : Mar 24 14:34:55 2026 GMT
        Subject: CN=6c4fc16cdde8b9e5dab62cf189be4b984e08a97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:fd:1e:2c:ae:28:be:7d:59:d0:38:aa:ef:
                    72:93:1d:69:ec:12:00:6b:f6:17:87:78:fc:80:d7:
                    17:09:bc:66:ad:60:e5:b8:5c:72:86:67:45:81:79:
                    c9:c1:0f:db:06:0e:64:71:05:08:b9:68:54:74:39:
                    a1:0d:de:97:37:b6:41:2f:aa:47:f1:ad:16:97:d8:
                    ae:11:d2:2f:69:3f:4d:9a:73:f1:39:a1:e3:bf:a1:
                    65:f2:ff:40:54:bc:5a:84:9a:30:ac:dd:ff:35:6a:
                    f3:14:7a:92:b8:65:92:08:f5:b0:af:4e:42:ce:48:
                    95:80:27:84:d5:de:bd:c7:2c:9d:69:12:b8:df:65:
                    20:49:87:04:16:04:c7:7b:03:1b:6d:7a:96:fd:2f:
                    3e:13:17:fa:f2:4d:b6:de:c4:a9:92:33:25:60:1e:
                    24:92:a6:84:db:ef:05:95:29:10:bb:75:16:20:8a:
                    08:c7:2b:80:a4:ee:70:31:59:8e:8a:73:79:fe:7e:
                    cb:79:07:67:09:fd:a9:4d:51:e9:75:01:8e:99:41:
                    08:3b:cd:d3:9b:0e:73:01:67:3f:2a:11:47:2e:d9:
                    e1:a7:ae:75:ba:7c:72:b7:e7:ca:e6:91:db:5b:4f:
                    7a:9c:d1:ac:19:1b:e1:00:64:e6:4e:ba:9b:43:9d:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:67:8F:2A:A4:87:54:45:39:B8:08:E4:5D:1C:27:FB:A5:09:70
            X509v3 Authority Key Identifier:
                keyid:D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/6c4fc16cdde8b9e5dab62cf189be4b984e08a97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:19:d1:a9:f0:af:d9:32:21:f7:06:de:6e:9b:e0:0c:f9:f8:
         aa:f6:a6:5e:cd:5c:eb:79:23:07:ac:79:c5:bc:7d:d1:44:e0:
         65:93:78:2d:8b:9d:9b:61:08:86:f3:0a:da:30:72:f7:52:96:
         0e:3e:b3:e1:d0:a7:db:dd:cb:04:e9:12:55:18:d7:bf:10:cf:
         55:47:81:17:a8:1c:ff:64:00:06:da:68:64:6c:39:7b:dc:ad:
         10:e2:c5:01:57:bb:cb:af:7c:1b:39:46:93:db:c7:47:d3:18:
         d6:2d:8d:b5:1b:97:2f:8a:d1:95:28:fa:c5:eb:bc:f6:8a:df:
         c5:3f:05:4b:b2:cb:84:cc:b4:35:b3:41:96:2e:60:81:86:5e:
         4d:9f:63:c2:86:f8:f3:29:3d:25:24:a1:3b:ff:16:28:32:35:
         b2:42:40:dd:fa:d7:60:eb:cd:80:9c:b3:30:59:5b:eb:09:7b:
         6c:f8:3d:95:c8:cd:6b:11:0e:e0:78:23:a6:35:8d:3d:de:a0:
         5f:5c:f5:4c:9b:2a:30:ef:eb:d6:69:57:ee:6c:bf:a3:59:a7:
         98:42:e9:f2:9d:6c:67:2d:27:89:9d:49:1d:80:82:f6:87:6a:
         c8:38:ac:6d:81:69:37:ae:f0:7c:42:9d:01:19:b0:40:8f:07:
         1b:ab:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org