Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/c26f2c5a52724d659c6d250cbde7324f20984485.roa
File:                     c26f2c5a52724d659c6d250cbde7324f20984485.roa (raw, json)
Hash identifier:          fqZ05rWz8AVxYJOGEx5qHmTQ53UyUWUTZM2B1KL5KJw=
Subject key identifier:   C2:4F:31:33:F6:EF:DB:69:32:4B:CE:34:56:CE:A8:F5:4F:4D:28:C4
Certificate issuer:       /CN=13c901d01480b53fbb495710d0bce80433642ecd
Certificate serial:       1D342B
Authority key identifier: 02:5E:22:17:40:09:02:B6:24:F9:29:13:88:54:0E:01:15:6D:50:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13c901d01480b53fbb495710d0bce80433642ecd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/c26f2c5a52724d659c6d250cbde7324f20984485.roa
Signing time:             Tue 05 Sep 2023 08:30:01 +0000
ROA not before:           Mon 04 Sep 2023 08:30:01 +0000
ROA not after:            Wed 03 Sep 2025 08:30:01 +0000
asID:                     266838
IP address blocks:        45.238.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913899 (0x1d342b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c901d01480b53fbb495710d0bce80433642ecd
        Validity
            Not Before: Sep  4 08:30:01 2023 GMT
            Not After : Sep  3 08:30:01 2025 GMT
        Subject: CN=c26f2c5a52724d659c6d250cbde7324f20984485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:c7:de:2e:6f:2d:a7:28:a6:27:fc:34:72:
                    b1:f4:75:80:b6:05:b2:d0:93:9a:5e:eb:5c:8c:04:
                    c4:f6:20:e7:4a:99:c9:f0:3c:77:3e:9d:6f:6d:d2:
                    f7:19:04:f4:d6:d7:3d:67:a4:8b:0a:6a:81:c6:4c:
                    aa:b9:0d:a2:71:61:ec:d2:e9:c8:77:d8:93:43:dd:
                    9f:50:d1:d9:e9:74:50:6f:2a:de:14:3d:12:46:b1:
                    5c:cd:3b:1e:c6:2c:83:07:12:41:de:cf:ce:c7:e5:
                    7a:91:69:af:68:f5:9b:4c:47:68:5e:49:9e:f9:f2:
                    d5:4e:6f:d4:e5:03:f2:68:74:04:79:cf:67:66:88:
                    ea:47:30:d9:d0:30:ab:70:a3:65:ec:4c:29:16:e0:
                    19:1c:f6:d4:1c:1b:77:94:8b:bb:df:40:45:04:a0:
                    ba:d6:cf:e4:f2:56:10:2d:f2:cf:15:81:44:3d:c4:
                    81:0f:43:67:b8:32:2d:7e:d6:90:8d:bd:02:78:9b:
                    02:ae:d4:8e:4e:7a:d3:0c:d2:e8:71:02:99:7c:6c:
                    3c:c8:6e:8e:89:ca:43:a6:96:ed:f4:b7:d2:b7:53:
                    0a:af:15:62:9f:6f:7b:78:9d:e9:d3:cd:bf:cc:c4:
                    de:19:62:96:59:34:5f:8e:93:f5:f0:08:ae:ad:32:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:31:33:F6:EF:DB:69:32:4B:CE:34:56:CE:A8:F5:4F:4D:28:C4
            X509v3 Authority Key Identifier:
                keyid:02:5E:22:17:40:09:02:B6:24:F9:29:13:88:54:0E:01:15:6D:50:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13c901d01480b53fbb495710d0bce80433642ecd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/c26f2c5a52724d659c6d250cbde7324f20984485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad8615b6-c55e-4129-9de3-2eb73e1cede7/13c901d01480b53fbb495710d0bce80433642ecd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:5d:b6:7c:95:4f:46:a8:5c:33:a4:91:a2:7f:19:6b:1d:
         0e:3d:d5:44:6c:b2:b4:19:b3:51:00:1c:51:7d:12:66:80:0c:
         46:88:fd:88:dc:83:4a:33:d0:5b:e9:cc:e7:4e:a6:b3:24:a9:
         95:66:60:ae:a9:44:ea:96:dc:ba:26:fc:51:c0:cc:51:c5:c4:
         47:41:8d:fa:6c:3f:6e:b0:5c:fa:ec:ca:c1:f0:ec:65:cb:1e:
         29:a1:62:9f:bf:c6:c4:af:f6:16:23:5e:a6:c7:af:98:ac:75:
         1e:82:79:db:ef:6c:3d:0b:1d:1e:f8:c2:7d:6c:7f:df:26:c6:
         a5:06:70:94:7b:c8:74:34:80:de:02:eb:b4:f3:a0:b1:29:5b:
         c4:e7:30:01:6c:c5:4f:6b:dd:d1:a8:33:3b:82:94:8b:82:02:
         6f:31:a1:f4:66:70:f8:52:0c:85:ae:5a:8f:c7:63:40:56:38:
         c4:40:53:81:f1:53:b6:04:9b:45:d8:e3:fe:8b:02:19:63:b5:
         0f:9e:cd:9b:28:ae:12:a6:0e:c5:ad:f1:2f:2f:76:18:dc:79:
         df:18:41:c8:8f:02:a4:6c:cf:53:71:3a:b9:39:b1:77:03:71:
         91:44:b2:9f:af:fd:29:7a:e6:17:4f:22:a1:b0:36:1f:96:a9:
         7a:43:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org