Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/0fbe59c2be369e77adeba8302b93a5d97e390768.roa
File:                     0fbe59c2be369e77adeba8302b93a5d97e390768.roa (raw, json)
Hash identifier:          hgEMgysY1G5WekPVsxZ3Qi6cUQ6x96NP3gakaRMvMiM=
Subject key identifier:   1A:22:E2:BC:61:81:F2:F5:B9:45:07:08:42:E4:A2:DD:DF:F4:DA:08
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       0D999D
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/0fbe59c2be369e77adeba8302b93a5d97e390768.roa
Signing time:             Wed 24 Mar 2021 14:35:58 +0000
ROA not before:           Wed 24 Mar 2021 14:35:55 +0000
ROA not after:            Tue 24 Mar 2026 14:35:55 +0000
asID:                     262186
IP address blocks:        45.225.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891293 (0xd999d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Mar 24 14:35:55 2021 GMT
            Not After : Mar 24 14:35:55 2026 GMT
        Subject: CN=0fbe59c2be369e77adeba8302b93a5d97e390768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:4b:c0:82:aa:19:01:98:56:70:05:3f:41:
                    a4:06:37:d7:39:76:c7:a6:c0:d2:03:da:1d:a0:4f:
                    e1:1b:40:27:de:f9:3e:e6:3a:5b:82:fa:9c:41:93:
                    18:91:7d:28:78:f4:6a:c4:3d:40:80:6f:51:f7:eb:
                    25:61:ad:b1:94:1d:ec:cc:fe:83:37:88:6e:f4:82:
                    ef:d4:d1:60:c9:e8:1b:4a:cd:2d:a7:bc:fd:ae:d6:
                    3d:53:b6:e9:00:77:18:28:2f:ea:bd:81:47:1f:5f:
                    3e:a5:b5:a2:d2:66:93:fa:8c:dd:d1:89:38:b6:3c:
                    5c:b1:91:73:df:8b:f0:e3:09:3e:22:da:8e:20:6f:
                    44:c5:d0:fe:7b:2c:b9:05:a4:ec:2d:8a:b4:80:53:
                    4b:5f:15:47:7c:1f:c1:24:42:ac:75:72:59:7f:42:
                    69:a2:32:0b:f1:14:17:fb:ea:59:52:34:ca:fe:97:
                    fa:68:0c:ae:93:37:15:69:b6:2f:1d:da:c7:57:de:
                    95:a3:78:f5:9c:e0:9d:0c:92:7c:1c:f1:ea:68:c2:
                    57:68:37:73:94:32:e0:f5:3b:72:66:73:d7:b0:ee:
                    14:8d:8c:c6:4c:4c:04:50:03:4c:fd:02:a0:3c:f2:
                    95:36:34:b3:06:67:26:b7:7f:b6:3b:2c:b0:f8:5c:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:E2:BC:61:81:F2:F5:B9:45:07:08:42:E4:A2:DD:DF:F4:DA:08
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/0fbe59c2be369e77adeba8302b93a5d97e390768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:bb:cb:ef:3c:7e:70:e0:69:5b:65:2c:3f:08:32:36:76:
         6b:4d:8c:be:44:3d:3e:eb:e6:e1:8d:44:49:c9:a5:92:5b:4d:
         1f:49:18:95:8b:5f:0f:1b:98:2d:24:f2:5d:36:c5:6e:02:d7:
         5e:f9:d2:1a:ca:5b:a9:0a:b0:3d:4f:e4:a2:75:f8:cf:54:8f:
         ec:9d:c6:e0:95:77:da:cf:aa:c7:60:d6:fe:aa:9e:47:10:75:
         64:62:a4:dc:0a:de:73:f6:05:33:ec:bd:7a:90:18:73:f3:b1:
         b3:00:22:96:a1:c0:8a:73:f1:51:4c:a1:53:5a:bf:5f:4c:c3:
         2b:0d:96:99:cc:29:44:13:e0:ad:d0:31:fa:64:86:81:50:63:
         38:de:37:7a:11:cd:e1:53:2a:39:c9:f9:82:0c:c5:33:3e:76:
         5e:57:31:15:2f:9b:b7:cf:06:40:9a:c3:59:04:c2:18:85:de:
         1d:67:c5:46:fc:91:45:df:30:9b:52:d4:1f:70:75:89:02:5b:
         67:00:ac:a5:82:c8:ec:62:db:9f:6f:36:a4:01:89:a9:4e:ea:
         16:67:0e:94:b7:7d:d0:b2:27:46:0f:fa:21:bd:03:a0:23:fa:
         27:94:7b:3d:b7:c6:4d:cb:32:66:9a:35:1f:77:e2:f8:88:a9:
         6e:8b:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org