Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/7c0cdf1f2890d2f5b4134205ff47403e6a5a9784.roa
File:                     7c0cdf1f2890d2f5b4134205ff47403e6a5a9784.roa (raw, json)
Hash identifier:          OcHxjl5aW2FBUg5Fu4qMd2zjhgNtgnty6Ofosct9dH8=
Subject key identifier:   D6:D8:56:64:FB:42:49:EE:69:28:A9:31:0F:DF:3B:87:91:3B:12:5D
Certificate issuer:       /CN=3098f1be5c71093ee297851f7b711b67ca6390cc
Certificate serial:       412C
Authority key identifier: 80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/7c0cdf1f2890d2f5b4134205ff47403e6a5a9784.roa
Signing time:             Thu 08 Feb 2024 21:58:24 +0000
ROA not before:           Thu 08 Feb 2024 21:58:24 +0000
ROA not after:            Sun 08 Feb 2026 21:58:24 +0000
asID:                     265582
IP address blocks:        45.174.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16684 (0x412c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3098f1be5c71093ee297851f7b711b67ca6390cc
        Validity
            Not Before: Feb  8 21:58:24 2024 GMT
            Not After : Feb  8 21:58:24 2026 GMT
        Subject: CN=7c0cdf1f2890d2f5b4134205ff47403e6a5a9784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:54:04:7e:48:d1:fb:43:a8:d9:5d:a6:4e:
                    7b:4f:2e:f7:62:6e:cd:e6:59:79:4b:a6:a9:c9:dc:
                    8a:0e:5a:5c:4c:ce:fa:b7:1a:7e:42:55:83:fb:a6:
                    62:3f:da:c4:4b:0f:db:66:81:4d:be:0d:e9:22:fe:
                    59:e0:34:25:65:92:7f:e6:5f:b4:92:d0:24:43:3e:
                    3b:84:4e:a1:75:87:12:2a:7e:43:ac:19:54:5a:84:
                    d6:ea:e1:6f:2d:cb:cd:df:0e:dc:34:d2:9f:87:8b:
                    9a:4c:4b:16:90:01:18:dd:8d:16:08:85:66:df:b2:
                    0f:fc:65:92:07:81:1d:96:6a:c4:5a:5a:d8:53:92:
                    4f:bd:18:46:0a:0b:af:ef:aa:8e:bf:bb:14:db:7c:
                    c1:95:95:6f:d4:bf:6a:3c:95:dd:3e:a5:1a:c3:27:
                    d7:a8:04:c4:2f:7a:74:4c:5b:2c:ee:11:f2:02:4d:
                    f2:cc:83:14:cf:69:af:94:5d:fd:aa:af:19:c7:87:
                    f7:f7:54:22:10:72:1e:9f:19:74:4d:44:1d:a8:4b:
                    f5:4e:02:34:8c:94:29:f7:af:48:34:1a:ab:0f:10:
                    40:4f:3b:07:fd:54:ad:00:db:8c:b2:b7:82:68:c0:
                    28:1f:c1:2f:bb:1e:a4:55:f6:91:70:77:55:05:3a:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:56:64:FB:42:49:EE:69:28:A9:31:0F:DF:3B:87:91:3B:12:5D
            X509v3 Authority Key Identifier:
                keyid:80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/7c0cdf1f2890d2f5b4134205ff47403e6a5a9784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/3098f1be5c71093ee297851f7b711b67ca6390cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:25:ef:68:f0:5e:57:29:7d:4b:25:58:a9:a7:c2:6a:ca:32:
         8f:39:9f:9c:20:f8:f7:dc:e1:8a:50:69:a1:e3:82:d9:33:34:
         47:6a:6f:8e:16:81:54:d4:25:bd:96:ea:30:4f:c1:94:53:cc:
         a1:91:50:5f:a7:d2:a6:97:cf:c0:c8:b2:cf:89:c8:37:ce:87:
         bc:c4:90:b8:43:25:71:f7:4f:a7:d1:9d:fe:1e:da:91:1b:d1:
         3a:29:da:aa:5d:ae:d8:2b:0e:81:40:09:2b:b4:5e:31:00:e5:
         54:ba:72:f8:a0:96:3d:ca:7d:8c:47:c5:31:95:09:20:fc:77:
         a4:e2:6c:85:fd:e6:03:f8:55:78:61:4d:8e:6b:99:a9:f1:b5:
         e8:cc:56:01:09:ac:87:28:8d:85:ce:0f:e0:fc:f0:7c:6e:e1:
         a9:ff:b9:60:51:37:ab:c0:44:7a:e9:a4:c2:fc:66:1a:b6:b3:
         b3:c0:ca:eb:3c:99:55:e1:53:46:45:57:e5:8e:c8:13:88:44:
         b1:75:8a:10:e8:39:d8:72:31:57:2d:35:8c:e3:4a:4e:2d:b7:
         67:53:b1:43:dd:6e:7f:0b:e8:0c:9c:37:25:77:b9:d5:7a:60:
         df:a6:cf:8b:55:89:ab:36:e2:0f:a8:68:b5:c2:16:6c:45:0d:
         db:8a:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org