Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/9de718f618fd5bad744c678ab585e62b3a2b1283.roa
File:                     9de718f618fd5bad744c678ab585e62b3a2b1283.roa (raw, json)
Hash identifier:          SamJ3Vm7b3rv/OuCgMkbB2KH/9gbBkCO5/Ibx51QMcw=
Subject key identifier:   C9:35:09:4C:EA:69:03:3B:E3:D7:79:0F:E0:C0:6C:FD:F0:F7:4B:1F
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       26D88A
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/9de718f618fd5bad744c678ab585e62b3a2b1283.roa
Signing time:             Thu 08 Feb 2024 00:31:37 +0000
ROA not before:           Thu 08 Feb 2024 00:31:36 +0000
ROA not after:            Sun 08 Feb 2026 00:31:36 +0000
asID:                     266706
IP address blocks:        45.229.188.0/23 maxlen: 24
                          45.229.188.0/23 maxlen: 24
                          45.229.190.0/24 maxlen: 24
                          2803:bd20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2545802 (0x26d88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Feb  8 00:31:36 2024 GMT
            Not After : Feb  8 00:31:36 2026 GMT
        Subject: CN=9de718f618fd5bad744c678ab585e62b3a2b1283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:43:03:39:2b:04:a1:55:79:19:c0:e3:44:
                    4d:d3:c4:94:f0:ff:b9:18:25:c0:93:92:54:9b:e8:
                    ed:80:f1:6a:58:7c:4d:0e:5d:ba:50:8c:6d:5f:e9:
                    e4:c7:af:0e:6a:26:8f:d2:11:b9:a9:d2:ac:be:4e:
                    84:c6:8b:5b:b3:db:49:c5:7a:06:66:00:f0:db:28:
                    da:3c:82:80:af:ac:fa:d1:6e:65:07:fc:7e:58:e5:
                    34:cf:31:04:51:1e:dc:6e:1e:8f:8d:43:0a:f4:4b:
                    fb:2d:81:bf:af:5e:ee:a0:4e:84:a2:99:cc:e1:f3:
                    ae:c5:44:b0:e2:98:b8:a0:a8:30:33:be:bf:7b:f9:
                    dc:aa:9f:ff:5c:11:60:1e:e3:2b:3f:c0:39:10:8c:
                    52:ee:c7:71:38:02:ab:1b:be:8c:c2:1c:33:c3:68:
                    d4:86:0a:4f:8e:f4:c0:bf:99:71:44:cf:82:fe:b9:
                    91:dd:ed:51:f5:f1:5e:ea:4f:e2:45:49:7b:d0:89:
                    b7:12:60:7b:22:6a:3e:7c:1d:94:b9:44:15:53:e6:
                    4c:39:66:c1:6b:d2:af:31:5b:5a:66:3f:7d:c3:e7:
                    2c:79:31:cf:9d:f3:dc:21:be:ca:c6:70:c2:a3:06:
                    87:a9:4b:39:b4:5e:e5:cb:79:bc:2c:83:89:d5:8d:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:35:09:4C:EA:69:03:3B:E3:D7:79:0F:E0:C0:6C:FD:F0:F7:4B:1F
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/9de718f618fd5bad744c678ab585e62b3a2b1283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.188.0-45.229.190.255
                IPv6:
                  2803:bd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:cb:15:85:b6:b9:9e:ae:17:d5:9f:19:2b:ac:62:26:bf:
         03:77:e2:a9:30:7b:57:b3:7b:6c:f7:2d:fa:6c:ec:42:2e:bf:
         57:fa:14:b4:6d:fb:6a:e7:57:31:1e:77:f6:62:ba:a7:41:6f:
         0b:a0:17:46:95:52:65:c0:5b:87:ff:4d:e6:d6:0f:b3:70:86:
         3e:88:c2:90:a5:cf:5d:66:87:07:24:87:05:fc:46:8b:e0:80:
         10:c5:35:62:97:58:76:ce:bf:ba:ce:be:c8:e1:72:53:4f:05:
         42:98:ea:51:18:68:7d:60:e0:15:00:2c:34:4f:cc:0c:74:86:
         bd:a6:b8:29:da:d7:ef:c7:37:a2:34:9a:ed:bb:20:5b:ca:78:
         f1:0d:89:08:74:a1:1e:71:c6:67:a3:76:e7:50:33:db:e6:b6:
         1c:d4:2e:3d:2e:e3:4c:8c:0d:9e:33:b5:59:d4:0f:27:50:83:
         94:0c:83:33:ca:c1:ae:d1:13:11:a5:e0:c5:c3:5e:72:4a:d3:
         86:93:4c:ff:47:b2:55:f9:16:41:f5:35:b4:09:b6:bf:0a:47:
         5c:5a:4c:58:e7:19:4b:95:d0:99:1a:67:f9:f3:af:f2:3a:69:
         8a:6e:40:b1:d1:4c:35:79:6f:2a:3c:e3:ce:3e:0d:3f:85:66:
         5e:68:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-ams.rpki-client.org