Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/364c6f7d36861279a46528ea76b551428a715538.roa
File:                     364c6f7d36861279a46528ea76b551428a715538.roa (raw, json)
Hash identifier:          iGyjWxEWHk/zIMKSfIDNJJw8lA/jqgpm6T91E5PEKno=
Subject key identifier:   9D:A2:37:C1:51:6C:88:CC:32:2E:68:80:A0:94:AF:D5:4D:82:6A:DF
Certificate issuer:       /CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Certificate serial:       285C6A
Authority key identifier: D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/364c6f7d36861279a46528ea76b551428a715538.roa
Signing time:             Tue 09 Apr 2024 19:53:22 +0000
ROA not before:           Tue 09 Apr 2024 19:53:22 +0000
ROA not after:            Thu 09 Apr 2026 19:53:22 +0000
asID:                     263807
IP address blocks:        45.68.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645098 (0x285c6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
        Validity
            Not Before: Apr  9 19:53:22 2024 GMT
            Not After : Apr  9 19:53:22 2026 GMT
        Subject: CN=364c6f7d36861279a46528ea76b551428a715538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:40:a0:85:88:4a:28:4f:15:1f:fe:41:23:
                    4d:b9:9e:07:ae:16:8a:42:3e:82:31:1f:7a:70:d3:
                    91:d7:66:bc:bf:42:3a:c3:54:3d:39:6b:c6:64:d6:
                    e8:32:4c:3c:83:8d:89:f3:b5:32:e8:86:1a:29:5c:
                    9b:a6:0e:fd:d8:33:4f:21:d2:45:5b:5b:b7:e9:7c:
                    41:bc:cc:a0:b8:19:78:7b:3c:5c:ba:cd:5c:c6:d6:
                    29:be:d8:9d:9c:53:b0:c9:6e:ab:e3:d6:3d:94:e7:
                    f9:12:ce:c0:15:72:03:7c:e4:8c:0a:79:6f:61:fd:
                    ff:3d:ef:a0:45:0c:b1:4f:98:01:13:5e:4b:c4:65:
                    79:a0:52:d2:31:0f:f4:57:38:e2:01:f3:b3:8a:ce:
                    ac:60:56:b6:7e:e8:2b:8c:9f:84:c6:89:49:53:65:
                    b6:51:a7:1b:e6:d5:d2:8f:8e:19:40:5b:bf:2e:51:
                    23:b0:c1:ea:45:c8:6c:e0:9c:77:92:3e:73:fd:97:
                    41:a3:e0:81:62:c2:60:14:5a:99:bf:9e:f3:06:f0:
                    18:9b:c0:96:41:dd:e6:0d:d3:09:92:58:38:27:5a:
                    a5:36:5d:2f:c0:fc:1e:d9:23:6e:69:a9:e6:89:5c:
                    69:1f:e8:61:f3:5c:44:91:5b:d3:d0:07:d5:f6:1b:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A2:37:C1:51:6C:88:CC:32:2E:68:80:A0:94:AF:D5:4D:82:6A:DF
            X509v3 Authority Key Identifier:
                keyid:D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/364c6f7d36861279a46528ea76b551428a715538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:f1:3e:07:ae:15:4b:c4:1f:45:1f:e4:dd:ee:48:e7:4b:
         bd:3e:8c:70:3a:28:0c:f9:1e:3b:c3:7e:04:1e:20:93:99:ec:
         ea:e7:17:d3:af:06:95:0e:3f:10:5c:27:2f:d2:a1:73:a0:44:
         74:50:ce:e7:95:cf:a0:56:2a:a0:37:eb:42:4c:92:53:59:d7:
         de:20:bc:26:1e:e7:8b:76:2d:f7:d4:82:f1:ba:2d:48:c7:83:
         47:81:29:37:24:41:41:47:59:6b:ef:b4:0f:36:aa:d3:81:ca:
         d4:f6:12:9e:9b:40:89:e9:54:16:c7:e3:bf:5f:cc:a0:39:2d:
         d5:dc:60:01:f8:a3:fe:98:ca:d1:85:c3:09:0d:1c:5d:ea:65:
         c3:35:6f:74:f0:ec:d8:d8:27:6b:fe:a8:c1:a6:8b:04:66:92:
         47:74:58:94:bf:cc:33:d6:2e:cd:0c:1c:4d:e3:c5:89:e9:71:
         5e:f0:26:e8:20:52:f6:56:c9:9e:ef:03:66:99:c7:3a:10:d9:
         6b:57:5d:7b:55:d6:f7:02:ad:85:78:f4:0d:31:b5:15:62:87:
         5e:be:9c:51:01:30:f3:e1:09:c0:b5:f3:7d:f4:6d:b2:65:7f:
         d0:0c:21:38:71:f2:72:3d:05:9f:77:c8:7a:bf:f5:45:a7:4e:
         5e:17:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org