Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23d251ed33b4223d079c12ec59b0942d9f4296f8.roa
File:                     23d251ed33b4223d079c12ec59b0942d9f4296f8.roa (raw, json)
Hash identifier:          GMRPKdHlAs3Nzr/Ye5/725m6qBadgXD2KxkBb7TJB9g=
Subject key identifier:   C0:AE:C1:FD:76:F4:05:A2:4A:9D:BB:76:54:E8:61:0A:1A:24:C1:F3
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       1C4020
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23d251ed33b4223d079c12ec59b0942d9f4296f8.roa
Signing time:             Tue 31 Jan 2023 17:33:10 +0000
ROA not before:           Mon 30 Jan 2023 17:32:41 +0000
ROA not after:            Fri 31 Jan 2025 17:32:41 +0000
asID:                     266668
IP address blocks:        45.228.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851424 (0x1c4020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jan 30 17:32:41 2023 GMT
            Not After : Jan 31 17:32:41 2025 GMT
        Subject: CN=23d251ed33b4223d079c12ec59b0942d9f4296f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:b0:8a:80:6b:34:1d:ed:6e:77:a9:45:06:
                    84:7f:28:fe:55:c0:de:55:f5:98:8a:e3:c7:83:ac:
                    29:6a:49:c4:50:90:85:07:01:5f:96:b6:f9:35:a4:
                    1b:c5:8b:e6:e5:c6:92:41:13:59:51:01:4d:46:a9:
                    05:65:9a:3d:37:e2:91:02:f9:ae:68:50:ac:3b:82:
                    31:8a:59:e2:1f:58:87:a5:45:d2:e7:eb:00:af:dc:
                    0a:74:57:d8:92:d8:23:40:8e:ac:0d:c6:5c:47:50:
                    68:08:e0:a7:b5:7f:8c:3b:9c:24:66:fe:5d:ec:d7:
                    67:ba:d9:0e:66:90:ae:8f:33:44:bf:73:54:c1:a5:
                    73:66:b3:ba:15:ab:c0:77:97:2b:d1:69:29:1d:71:
                    f4:1d:b1:42:42:20:ef:8f:f7:30:dc:7e:b2:0c:f7:
                    72:4a:7b:49:56:8c:a9:60:a2:5b:98:d0:df:e5:b4:
                    24:0b:93:48:b1:69:0f:76:12:1d:05:c3:98:81:79:
                    90:96:0b:48:ac:20:38:55:58:c9:39:39:91:44:69:
                    80:b7:1b:82:c9:09:27:df:9a:9d:42:7f:ca:dd:99:
                    0f:c8:0e:2d:61:d8:41:82:e0:85:ee:d3:2d:8f:11:
                    fe:bd:ca:12:26:d3:34:d3:5c:df:e3:f6:a1:99:62:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AE:C1:FD:76:F4:05:A2:4A:9D:BB:76:54:E8:61:0A:1A:24:C1:F3
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23d251ed33b4223d079c12ec59b0942d9f4296f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:75:bd:39:c1:f6:35:38:05:c2:57:a7:7a:38:47:82:73:
         f8:49:dd:1b:4d:40:37:5d:eb:75:f7:0b:80:e5:3c:7d:45:a2:
         2a:f6:56:ee:1e:18:1b:dd:c4:9f:32:ac:72:1b:01:d6:1d:14:
         ad:ba:56:f6:55:fa:83:49:eb:5b:94:0d:7a:a4:90:ac:08:37:
         0a:88:a7:22:b8:5b:2f:eb:87:4d:b2:4d:5b:52:bf:a5:50:41:
         1b:0a:56:e7:fd:72:de:cd:01:4e:56:e6:50:c6:05:a8:18:70:
         cb:ea:0e:80:b6:62:cb:a9:c6:8d:c9:bc:70:e1:4a:ee:76:20:
         75:55:f6:49:e1:dc:75:75:9f:58:59:c8:77:3a:8c:b9:aa:0b:
         a3:51:ec:4c:de:a0:3f:fd:e5:ab:3f:7f:80:b9:d9:c2:b1:80:
         aa:81:4a:67:1f:f3:3a:db:01:71:07:10:0c:f4:77:85:1f:dd:
         96:d4:9a:53:7c:0e:f6:79:c0:cc:56:97:1d:f9:94:be:5e:98:
         f6:45:6b:f4:7e:fb:14:1d:71:5a:c1:c1:a4:1d:f2:41:05:43:
         89:7a:9e:04:fe:48:1f:ec:77:65:11:35:24:e4:f9:1c:d3:e9:
         c1:7f:74:bd:40:5c:f3:0c:63:95:5d:b1:08:5f:45:5d:a2:ca:
         90:f3:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org