Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa
File:                     626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa (raw, json)
Hash identifier:          7UqNfqhyTc0yG91sgM5BkW1AeswA2vF3SGgJm2o8H6s=
Subject key identifier:   57:BB:F1:F0:B1:04:38:51:95:1A:20:F2:CD:E9:C7:6A:38:08:71:67
Certificate issuer:       /CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Certificate serial:       030D
Authority key identifier: 12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa
Signing time:             Tue 02 Nov 2021 15:34:10 +0000
ROA not before:           Tue 02 Nov 2021 03:00:00 +0000
ROA not after:            Thu 02 Nov 2023 03:00:00 +0000
asID:                     266738
IP address blocks:        45.229.151.0/24 maxlen: 24
                          2803:8b20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
        Validity
            Not Before: Nov  2 03:00:00 2021 GMT
            Not After : Nov  2 03:00:00 2023 GMT
        Subject: CN=626e2ae30d206cbf4bc2c3907534f128bf5877bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:9c:90:47:36:9c:18:e0:1c:cf:2e:a0:42:
                    74:00:e2:52:8c:56:07:9f:29:ee:96:46:c8:2f:2f:
                    ac:5f:67:41:fc:0c:4c:52:de:e3:d6:59:da:f2:05:
                    eb:30:43:0b:ea:2d:74:33:9b:74:cd:66:38:87:08:
                    e6:eb:b8:ce:e9:8d:9d:35:7c:21:a2:43:be:bb:11:
                    d2:d8:24:93:83:92:4d:53:45:57:f7:47:34:9b:f4:
                    89:e5:1d:90:34:cf:b1:10:dc:50:43:ad:9d:bb:ae:
                    20:3e:68:f6:f5:9e:84:9a:b5:73:9a:89:d7:68:76:
                    0d:94:9f:9b:47:30:df:81:4c:1c:e2:8a:86:d6:3c:
                    b2:4f:5c:5e:cd:27:1b:ca:2e:57:fd:d3:b2:24:62:
                    1c:34:d2:46:5f:39:ba:7c:38:a2:e9:d5:04:3d:90:
                    93:ad:f6:a4:48:5c:de:34:23:9d:c7:89:51:2f:28:
                    1d:6b:af:08:e5:e4:ab:57:e4:35:d5:68:33:3c:31:
                    8e:c8:c8:cd:0f:a9:27:b8:1f:46:16:2b:27:5a:5a:
                    71:a5:90:09:aa:95:c9:01:82:a9:f2:cb:28:fb:31:
                    60:6e:59:b6:39:13:e3:05:b3:30:f5:eb:82:ab:63:
                    4f:cc:f6:40:7b:8f:fa:99:fa:48:68:44:98:54:7f:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:F1:F0:B1:04:38:51:95:1A:20:F2:CD:E9:C7:6A:38:08:71:67
            X509v3 Authority Key Identifier:
                keyid:12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/626e2ae30d206cbf4bc2c3907534f128bf5877bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.151.0/24
                IPv6:
                  2803:8b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b3:af:ce:fb:ac:52:10:b6:da:42:e7:32:9f:b7:79:fd:8a:
         48:69:eb:fe:d0:81:8e:8b:96:df:41:ee:05:29:17:84:d4:63:
         a9:dd:62:da:9c:53:81:42:ed:59:ec:68:63:92:0b:a1:38:d4:
         a4:ad:20:4a:b3:29:21:07:8a:b2:b0:9e:b9:97:48:37:c6:45:
         47:21:7a:dd:4a:e2:bd:7f:55:03:eb:6b:f9:fc:aa:db:76:4f:
         50:f9:60:fd:a3:fb:77:fc:f2:42:77:dc:44:ab:62:cf:86:84:
         f9:73:fa:8c:0d:87:a9:2d:8c:a1:b8:e8:c4:94:49:62:33:06:
         45:ca:9c:b8:1d:fc:2f:46:a2:30:1d:a0:8a:37:ea:4f:af:6f:
         14:0d:73:a3:e5:20:5b:d2:12:88:56:81:aa:96:92:69:bb:0b:
         0d:17:19:6a:c4:13:e7:9a:dd:d7:f7:dd:33:2b:ce:87:90:7f:
         bb:9d:ff:39:3d:be:6f:54:7a:e2:1b:74:82:f6:6d:7c:17:8c:
         d3:39:0a:90:5f:e1:d1:98:fd:be:f1:15:63:12:2a:f6:8d:39:
         96:55:2d:dc:52:13:64:7c:14:5d:e6:c4:aa:53:32:03:3c:84:
         a8:87:13:20:57:01:77:7f:af:79:fa:98:93:3f:df:79:f9:ec:
         83:12:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-ams.rpki-client.org