Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/b59508ed1ca348449f78ee01853a95915a8b74cb.roa
File:                     b59508ed1ca348449f78ee01853a95915a8b74cb.roa (raw, json)
Hash identifier:          Uo71wNnnLZSyO8PTSxjUzARLyaNLBg6+4mOs2N1Mjzk=
Subject key identifier:   39:11:84:A7:56:D7:A2:2C:DA:5B:1C:1C:E1:B6:44:E8:02:27:8A:E0
Certificate issuer:       /CN=10652e563f43bd248018a74ceab6e843345f20ce
Certificate serial:       0DA5E9
Authority key identifier: 15:A7:E3:8C:B7:03:85:C1:A4:2E:F3:16:CD:13:25:41:3E:15:17:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10652e563f43bd248018a74ceab6e843345f20ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/b59508ed1ca348449f78ee01853a95915a8b74cb.roa
Signing time:             Wed 24 Mar 2021 14:38:10 +0000
ROA not before:           Wed 24 Mar 2021 14:38:09 +0000
ROA not after:            Tue 24 Mar 2026 14:38:09 +0000
asID:                     265721
IP address blocks:        45.65.244.0/22 maxlen: 24
                          200.58.240.0/21 maxlen: 24
                          2803:4dc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894441 (0xda5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10652e563f43bd248018a74ceab6e843345f20ce
        Validity
            Not Before: Mar 24 14:38:09 2021 GMT
            Not After : Mar 24 14:38:09 2026 GMT
        Subject: CN=b59508ed1ca348449f78ee01853a95915a8b74cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:9b:9b:9b:cb:04:64:63:22:43:59:45:29:
                    05:b1:bd:14:da:6d:14:df:e7:cb:c1:a8:a6:49:68:
                    18:6c:35:76:61:06:8b:cf:69:d7:03:24:4e:e5:d4:
                    de:c4:f3:51:c5:5e:06:0f:77:13:b7:51:08:46:71:
                    d5:be:f4:7c:fe:7b:6c:f3:28:df:d4:81:24:14:d2:
                    20:3a:f1:3c:7b:e5:e3:10:c9:4c:64:67:52:73:cb:
                    67:40:3b:db:e8:8f:fb:40:7e:ee:ef:20:96:67:93:
                    a3:44:87:c2:55:29:44:ca:77:7d:5e:46:32:f5:7f:
                    3b:2a:b5:0d:95:08:c2:f8:ff:f1:81:2a:61:43:4d:
                    73:de:11:00:86:b5:34:f5:38:52:02:a6:b6:98:dc:
                    d4:51:d8:25:61:1e:0f:bb:f8:1d:3f:65:44:d2:06:
                    b1:a7:41:25:15:c3:0e:98:f9:24:3c:60:42:22:55:
                    d7:fc:cd:e5:6f:59:5a:62:fe:6b:55:96:c3:8b:cd:
                    37:cb:cd:a7:c7:52:4f:9c:69:7f:b2:bc:c2:fc:90:
                    4f:00:9a:a8:f4:ea:48:e9:f1:6b:d0:b8:c7:b8:47:
                    8e:9d:d3:3d:af:0b:d7:a6:8d:8f:7c:2d:7c:86:5e:
                    af:cc:84:16:d5:f9:36:f6:f5:c4:ad:ad:29:b2:a3:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:84:A7:56:D7:A2:2C:DA:5B:1C:1C:E1:B6:44:E8:02:27:8A:E0
            X509v3 Authority Key Identifier:
                keyid:15:A7:E3:8C:B7:03:85:C1:A4:2E:F3:16:CD:13:25:41:3E:15:17:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10652e563f43bd248018a74ceab6e843345f20ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/b59508ed1ca348449f78ee01853a95915a8b74cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/10652e563f43bd248018a74ceab6e843345f20ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.244.0/22
                  200.58.240.0/21
                IPv6:
                  2803:4dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:72:83:ca:6e:ce:bd:32:db:bb:96:f6:ce:fc:55:c6:20:
         ce:c5:52:da:d9:b6:5c:71:2f:52:98:47:46:97:fd:0f:bb:3c:
         34:8b:59:8b:f4:df:a5:ee:47:d4:82:08:5b:2e:0d:7c:8d:e9:
         f9:20:4e:b8:68:18:a4:96:a7:9f:2b:79:13:ac:df:9d:7c:90:
         47:6a:ad:8b:9e:af:e4:38:13:63:b9:3a:a7:ed:f9:96:53:67:
         19:73:d0:53:2f:1f:24:42:67:ec:13:f9:11:85:b8:55:ea:d3:
         0b:0b:ca:35:b0:74:34:bc:7f:18:cf:1c:d2:f5:30:80:fa:83:
         5c:aa:a6:fd:ce:0a:24:9c:29:f7:f6:de:04:d7:8e:16:93:f3:
         f1:fb:09:23:21:45:16:b6:c3:fe:c9:dd:ed:da:2a:ec:ce:12:
         62:1c:18:05:e2:43:50:ea:8d:6d:3f:34:ac:2f:86:6a:0f:42:
         59:0f:d4:61:1a:38:0d:8d:20:5c:14:5f:78:46:24:f4:e6:f8:
         49:fc:86:6d:35:cf:2f:6f:b9:48:f6:a7:3c:95:a9:6a:9b:d9:
         d9:3b:85:a4:c3:f3:e2:84:05:8f:67:6c:9f:ce:3b:0a:ae:e7:
         c7:c8:e9:e4:07:1a:a7:ef:f0:0e:ad:72:2e:56:a2:8c:01:da:
         2f:3c:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org