Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/50df2cb6cb589d97f92798956e4f99c1e3662274.roa
File:                     50df2cb6cb589d97f92798956e4f99c1e3662274.roa (raw, json)
Hash identifier:          wLnVI0FFeETty8fwe0Wy63STElNemo4GfVuHfPALwss=
Subject key identifier:   8D:84:63:B4:CE:26:26:F5:E6:FE:1B:9E:62:47:F2:8E:80:66:E8:64
Certificate issuer:       /CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Certificate serial:       1193D0
Authority key identifier: 12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/50df2cb6cb589d97f92798956e4f99c1e3662274.roa
Signing time:             Wed 01 Nov 2023 07:30:03 +0000
ROA not before:           Wed 01 Nov 2023 07:30:03 +0000
ROA not after:            Fri 31 Oct 2025 07:30:03 +0000
asID:                     266738
IP address blocks:        45.229.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151952 (0x1193d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
        Validity
            Not Before: Nov  1 07:30:03 2023 GMT
            Not After : Oct 31 07:30:03 2025 GMT
        Subject: CN=50df2cb6cb589d97f92798956e4f99c1e3662274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:e1:a3:99:a6:df:d3:b6:3c:80:0c:e6:67:
                    c6:b8:2f:0f:b5:19:58:58:b6:8a:33:22:23:e7:e9:
                    08:62:7f:4c:1f:68:c8:00:13:08:41:6d:dd:dd:67:
                    63:de:78:6f:2d:c9:52:76:c1:81:f7:e2:08:ff:6e:
                    45:8f:9f:20:80:d3:26:af:d6:98:26:e9:52:24:a8:
                    6c:7e:b2:be:7c:6e:d4:00:a6:3e:9b:c1:a6:f1:3b:
                    33:68:a2:4b:94:2c:53:72:ed:b9:e5:ff:c2:9d:95:
                    e3:01:b6:52:3f:a2:b3:96:4b:02:8d:60:c5:34:21:
                    01:42:cc:27:23:b7:10:ba:98:8d:55:b3:44:33:70:
                    23:a2:3d:33:77:0f:2e:fe:c9:e0:80:ab:16:da:d8:
                    51:7e:42:2f:5c:2c:e0:f8:37:76:05:6a:74:66:c7:
                    69:8b:e1:2b:e5:85:43:9d:cd:e4:ac:99:74:30:14:
                    e1:d9:43:bb:b8:db:50:54:72:7e:65:ea:c2:95:b7:
                    c4:75:9f:29:e4:65:4c:44:d9:15:cd:b9:2d:40:17:
                    a6:bd:c7:ad:ab:8a:61:29:b7:d4:8e:24:37:91:25:
                    c9:69:69:46:c7:cf:cd:69:ef:65:73:e6:97:92:ca:
                    7a:df:ad:c3:11:f0:b7:ea:13:d3:59:f6:7b:74:8c:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:63:B4:CE:26:26:F5:E6:FE:1B:9E:62:47:F2:8E:80:66:E8:64
            X509v3 Authority Key Identifier:
                keyid:12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/50df2cb6cb589d97f92798956e4f99c1e3662274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:d3:41:9f:68:80:d7:ea:db:e7:73:a7:08:ad:b4:92:1c:
         c4:46:f7:bf:b2:61:ee:6e:29:2c:f4:9c:ec:6e:e8:4a:ff:28:
         9b:f0:be:76:ca:e4:01:e4:0a:6e:c8:56:e0:31:2c:6e:17:02:
         d5:3e:ce:a3:df:ec:a7:74:f2:5b:b3:c8:25:0d:f2:a8:2e:80:
         e0:c9:8e:6d:a6:00:4a:36:d3:84:88:24:b4:e6:62:0a:24:12:
         b2:62:53:d2:c7:90:a0:30:3a:fa:48:62:1c:29:c6:7a:e9:3a:
         6f:fc:49:4c:b3:b3:69:c1:01:a3:20:68:8c:7c:3f:b8:6e:18:
         19:7c:d7:12:08:c1:71:da:8a:48:76:98:af:4c:80:90:67:a6:
         03:0a:53:83:74:55:ab:aa:cd:56:03:63:9d:c9:20:15:d0:60:
         cb:e9:03:2a:a1:c8:0f:a8:a4:b0:ba:a0:d4:d3:20:e6:74:f4:
         a8:95:3b:71:7b:f4:1d:8a:71:ad:39:c5:99:a7:6a:b8:9e:4d:
         8e:85:58:ad:08:a1:9e:84:45:cf:3c:b9:ea:86:cb:77:36:7d:
         a3:8e:28:32:f0:40:8d:9a:d4:88:31:94:28:3f:70:71:1b:78:
         23:57:d7:8f:67:a0:ca:d6:75:99:9a:22:7e:12:32:5c:83:1a:
         02:a6:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org