Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/dcd440e906afc6817f2c3648300a02dc2c8cc793.roa
File:                     dcd440e906afc6817f2c3648300a02dc2c8cc793.roa (raw, json)
Hash identifier:          ebucSCw373VOe9BM2PfU9zQcF6UfDjctNuyA1/pCRBI=
Subject key identifier:   A1:FA:D7:2D:C0:A3:75:FA:3A:9B:C8:5B:15:2C:4F:AE:44:EC:3B:D2
Certificate issuer:       /CN=09e0adac59b7e340818728c50db0e80398835f20
Certificate serial:       17C762
Authority key identifier: AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/dcd440e906afc6817f2c3648300a02dc2c8cc793.roa
Signing time:             Wed 07 Feb 2024 14:19:07 +0000
ROA not before:           Wed 07 Feb 2024 14:19:07 +0000
ROA not after:            Sat 07 Feb 2026 14:19:07 +0000
asID:                     273063
IP address blocks:        45.183.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558370 (0x17c762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e0adac59b7e340818728c50db0e80398835f20
        Validity
            Not Before: Feb  7 14:19:07 2024 GMT
            Not After : Feb  7 14:19:07 2026 GMT
        Subject: CN=dcd440e906afc6817f2c3648300a02dc2c8cc793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:26:09:23:e0:d7:20:6d:99:e3:a1:81:a8:
                    15:34:f5:99:ac:c5:60:3d:8c:00:e5:4a:5e:67:cf:
                    fa:0d:31:65:2f:62:5d:eb:3e:99:ad:bb:e5:2b:96:
                    9f:f6:72:3a:c3:0d:b0:ca:2a:27:90:09:51:f3:9e:
                    87:fa:76:a2:ac:c1:f4:c5:3a:02:74:31:da:3d:92:
                    90:10:6f:d6:ca:91:66:ce:ab:84:69:08:f7:a8:6e:
                    1d:32:8d:70:a2:92:e6:a3:64:f9:92:2b:cb:f1:27:
                    ac:5b:0a:3c:96:90:b3:bd:bc:8f:3b:1e:01:38:e2:
                    d1:3c:7a:69:53:80:a6:74:78:57:85:16:2c:fd:28:
                    21:7c:72:a8:f8:1a:bb:f8:14:19:1d:c6:a2:f7:7b:
                    f9:e1:89:27:32:f6:73:e8:27:b2:4f:db:fa:c4:f3:
                    af:0c:c1:58:00:89:38:c4:99:19:1a:30:0c:fe:6f:
                    cf:48:ea:f3:9a:ee:0f:5e:8e:ad:b6:70:66:ae:f7:
                    52:f1:6c:16:9c:ed:f4:22:64:a6:2a:8c:87:22:20:
                    95:01:07:8a:a7:6a:73:21:95:92:29:82:eb:05:87:
                    c1:22:b2:5e:aa:40:67:cf:51:9b:ea:cd:e1:30:75:
                    02:be:3b:26:58:d1:b4:55:de:da:23:c0:fd:29:35:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:D7:2D:C0:A3:75:FA:3A:9B:C8:5B:15:2C:4F:AE:44:EC:3B:D2
            X509v3 Authority Key Identifier:
                keyid:AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/dcd440e906afc6817f2c3648300a02dc2c8cc793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/09e0adac59b7e340818728c50db0e80398835f20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:bb:4f:8c:77:5a:72:78:63:de:fe:c8:1b:ae:a2:bd:bf:
         39:eb:dc:ba:59:18:2e:e8:c5:95:e7:e5:21:d6:89:eb:84:02:
         2e:92:0a:fc:e6:aa:bf:b4:5f:6b:62:5d:60:35:ae:60:5e:bf:
         8e:df:3d:ec:a9:76:85:ec:20:7f:08:28:7b:e4:34:01:52:8b:
         32:4c:da:6c:a3:db:50:1f:de:42:4d:57:ef:20:4a:c0:e4:18:
         37:61:71:1e:a2:81:80:65:6f:eb:b4:74:99:56:ef:bf:5b:b9:
         37:97:76:53:a6:38:71:8c:e7:bf:a9:07:a8:41:7e:e0:b9:c3:
         07:9b:2f:66:e9:19:f1:e2:e7:b5:1b:b0:5a:79:12:61:35:49:
         a8:a2:61:e0:26:22:14:a5:f5:ca:17:90:51:ad:10:aa:ce:6e:
         f3:9d:76:23:ee:75:45:12:c8:c1:e3:e8:20:25:3c:73:6a:48:
         b4:9d:16:52:f7:1c:5f:93:d9:7a:65:9f:25:87:4b:61:87:65:
         ad:57:6d:33:b4:a9:75:2f:d2:96:a9:b4:a0:09:e6:19:86:8f:
         7f:ea:79:ff:58:54:40:41:9d:d4:09:e3:87:57:8d:41:2f:19:
         d6:dd:df:e7:c3:4e:3b:ba:54:23:b6:19:f4:f3:11:99:e6:f0:
         f6:e4:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org