Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/114322b193863e16ef37ff590b432246466e03c8.roa
File:                     114322b193863e16ef37ff590b432246466e03c8.roa (raw, json)
Hash identifier:          3pAqvcH4w5b8va/dRx90uFAVwoTouMa2oo5TBQ7LELQ=
Subject key identifier:   7C:7D:0B:77:D6:AA:3B:08:28:CA:6D:C0:22:AC:4D:6F:10:26:FC:A1
Certificate issuer:       /CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
Certificate serial:       0416
Authority key identifier: B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/114322b193863e16ef37ff590b432246466e03c8.roa
Signing time:             Tue 30 Jan 2024 22:41:49 +0000
ROA not before:           Tue 30 Jan 2024 22:41:49 +0000
ROA not after:            Fri 30 Jan 2026 22:41:49 +0000
asID:                     265551
IP address blocks:        45.238.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
        Validity
            Not Before: Jan 30 22:41:49 2024 GMT
            Not After : Jan 30 22:41:49 2026 GMT
        Subject: CN=114322b193863e16ef37ff590b432246466e03c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:a8:cd:13:14:82:af:b1:0d:0b:c0:ef:d4:
                    e4:4b:2a:a4:6c:4b:d6:fc:10:a1:82:51:57:52:07:
                    6e:b1:cc:88:b8:af:6d:29:02:74:28:6d:6a:1a:93:
                    ed:f6:3b:14:c8:36:b2:b3:d8:86:fd:c1:27:61:71:
                    da:db:74:fe:da:31:70:b3:fb:8a:b5:62:26:64:4e:
                    95:aa:ce:6d:9f:0d:4e:d6:d2:0a:2f:37:cf:c3:f0:
                    8e:48:10:f0:58:ff:1b:32:4e:25:4e:d6:43:39:a7:
                    8d:73:df:00:f0:f0:49:1e:7f:12:06:53:96:23:47:
                    3c:af:07:e2:7f:3a:20:ad:fc:4f:7a:30:22:ca:0b:
                    ea:ec:d1:a1:a2:38:16:79:72:53:39:a0:6e:6e:3b:
                    c4:f7:34:d7:00:d6:df:fc:08:4a:09:4e:2d:f2:d2:
                    4d:de:96:22:74:0b:64:e7:36:a4:d6:34:80:5e:d3:
                    51:a1:12:98:d7:b4:17:9a:ff:d3:7b:63:a5:f7:ca:
                    01:0e:6b:0f:25:dd:37:66:b0:70:69:40:39:e7:60:
                    bd:b1:1c:49:aa:ee:5d:ed:1b:f6:59:b7:6f:c2:01:
                    1e:6d:33:c0:af:5d:99:be:9a:ef:06:22:8d:61:c5:
                    31:c8:87:a0:ef:8d:46:eb:c4:68:d0:e7:9c:a4:f6:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7D:0B:77:D6:AA:3B:08:28:CA:6D:C0:22:AC:4D:6F:10:26:FC:A1
            X509v3 Authority Key Identifier:
                keyid:B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/114322b193863e16ef37ff590b432246466e03c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/f74a648ac87e2ce7fafa327bd89fc95e35a06596.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:85:95:f3:1a:f7:01:3c:48:7b:a5:9a:61:af:88:bc:81:
         3c:1b:b9:72:a0:6e:e1:10:b3:97:39:96:e1:ad:8f:f0:e9:89:
         c8:c1:f2:e5:3f:c9:4c:3e:a4:33:97:fb:4e:20:e7:36:e5:7f:
         38:d4:ac:13:d0:7b:7a:f7:2d:7c:c1:2c:f2:e3:91:2e:ad:be:
         1d:4a:34:9e:78:47:7e:b6:d7:70:45:89:ac:60:8b:89:70:2a:
         9c:a6:ec:39:95:24:5e:60:18:3b:c7:28:e6:9a:85:f5:2b:53:
         fc:5c:ed:c3:19:45:21:40:aa:7b:9f:12:66:3f:cc:d1:e1:23:
         1d:1e:6f:12:b9:6c:1d:45:91:3e:ab:45:ad:c0:e2:b3:a5:06:
         5e:07:b9:15:4a:bf:cb:ca:5c:7b:c2:b4:7e:01:f6:48:a9:30:
         7a:e9:ee:5b:98:1f:ff:be:99:85:82:d8:70:e4:d4:ac:00:06:
         a8:c3:6d:59:d5:46:88:d2:5e:75:db:1c:0e:1c:20:db:f8:41:
         3c:7a:69:5b:00:e9:26:e6:42:39:0d:9f:3f:8c:76:bf:f8:5d:
         81:c5:20:0f:e0:9e:ed:3a:f9:1f:3b:a0:c2:c1:5b:5a:d6:43:
         c4:e5:ae:d0:ec:7d:65:62:db:65:45:67:4d:2b:8a:50:2d:dd:
         28:c4:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org