Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/e4a4ed15a4d056dc04af3eaff61e06cc0ec7534a.roa
File:                     e4a4ed15a4d056dc04af3eaff61e06cc0ec7534a.roa (raw, json)
Hash identifier:          IPoJ3oR2E1WTvX66WdktS7czBntnH6qVSVvhST4+/uQ=
Subject key identifier:   F5:D2:E2:FB:01:1A:6F:0F:87:04:73:A5:88:47:F1:3D:1C:3E:B2:89
Certificate issuer:       /CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
Certificate serial:       06441D
Authority key identifier: D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/e4a4ed15a4d056dc04af3eaff61e06cc0ec7534a.roa
Signing time:             Wed 24 Mar 2021 14:34:55 +0000
ROA not before:           Wed 24 Mar 2021 14:34:55 +0000
ROA not after:            Tue 24 Mar 2026 14:34:55 +0000
asID:                     266832
IP address blocks:        45.238.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410653 (0x6441d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
        Validity
            Not Before: Mar 24 14:34:55 2021 GMT
            Not After : Mar 24 14:34:55 2026 GMT
        Subject: CN=e4a4ed15a4d056dc04af3eaff61e06cc0ec7534a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:1f:b8:55:b8:14:4d:98:7f:c4:55:16:43:
                    64:4a:c6:c5:ac:10:de:5a:38:e3:ec:28:db:da:59:
                    6d:e1:3a:2d:e6:2c:8d:88:90:1f:fd:2b:d3:03:5c:
                    23:93:16:99:cf:65:f7:43:73:05:d9:52:5f:f5:a7:
                    5d:fb:fd:f7:62:4c:fc:b0:87:69:ca:36:e8:61:09:
                    81:a8:a1:2f:88:26:4a:80:b6:2c:7c:b3:88:4f:b8:
                    3d:ca:5d:19:63:87:ed:0c:c8:04:3c:48:c1:14:50:
                    97:fc:27:9b:4e:32:a5:8f:43:ad:22:38:06:a4:65:
                    2f:9e:23:22:26:52:da:dc:b3:e4:e5:14:65:e3:3d:
                    00:14:ce:73:ee:f8:d3:59:20:2e:6c:c0:53:da:47:
                    65:fb:70:9a:e1:e4:97:b1:de:53:e9:37:0a:3d:10:
                    2c:c8:62:93:5a:9a:b6:9d:88:ee:b2:5e:27:63:0b:
                    49:28:00:3d:21:0c:6c:2e:33:b5:e6:56:63:4b:43:
                    ac:f4:ad:05:0c:00:9f:be:b8:bf:16:d1:97:f9:d5:
                    30:a0:4d:ad:de:33:0c:ef:67:72:6c:a4:7a:15:c2:
                    a3:eb:2d:9a:ea:41:ce:60:f0:40:43:a9:54:b5:0b:
                    41:af:b3:a7:65:17:b6:6e:65:90:5d:b6:88:61:5c:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:E2:FB:01:1A:6F:0F:87:04:73:A5:88:47:F1:3D:1C:3E:B2:89
            X509v3 Authority Key Identifier:
                keyid:D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/e4a4ed15a4d056dc04af3eaff61e06cc0ec7534a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:c7:77:e4:c6:90:2b:69:7e:22:0d:cf:40:54:93:0d:b0:
         41:15:bf:81:85:2a:9d:37:b9:60:26:1f:ac:40:01:24:0d:4e:
         c7:a3:c3:26:68:af:67:a2:b9:7e:17:71:e9:3a:d0:b2:51:23:
         1c:8c:b3:07:9d:76:84:d3:4c:74:78:1b:09:bb:d7:36:61:b2:
         a1:66:c0:b6:72:79:d8:f2:55:67:c2:4f:7b:ce:34:ff:73:18:
         a4:25:b9:7a:c5:f5:38:24:2f:86:1e:1e:6b:5f:b1:18:f1:91:
         cd:f2:65:8c:55:fa:ca:a2:af:ac:e3:51:c9:a1:4e:56:f2:1d:
         ca:51:2f:60:19:d8:7c:ca:7c:b1:fe:ba:d6:b1:9f:3d:0e:a5:
         fb:f6:95:3a:e9:2d:9b:05:c3:2e:82:67:d0:46:3c:ff:b1:c4:
         30:65:8e:b7:7a:e3:0f:32:68:f4:77:26:36:90:f7:04:9e:1a:
         fb:f4:48:02:0f:d1:10:3e:3e:51:aa:11:7a:2b:4c:73:a5:56:
         67:af:e7:87:99:f1:8f:fd:81:29:b6:44:7e:23:e8:cf:80:01:
         97:c0:51:1f:10:64:1f:01:ce:f9:2b:50:a9:db:9f:a9:76:e8:
         3d:b4:52:ce:e1:50:3d:0d:5f:c5:5b:40:e7:17:4f:e9:c0:7f:
         1f:74:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org