Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/7c478e89caf5dd40b4287a3a1f2f9bed3cff7d45.roa
File:                     7c478e89caf5dd40b4287a3a1f2f9bed3cff7d45.roa (raw, json)
Hash identifier:          IYXKJVthzsZ4MqxIRpMTDu7XeCfrcYDOd2ij2AnzgHQ=
Subject key identifier:   30:6B:68:9C:7D:56:31:95:91:79:B7:2D:8A:73:69:64:CF:3D:42:92
Certificate issuer:       /CN=13e36a619c735065b41044b121f1885f2666878d
Certificate serial:       121A
Authority key identifier: 7B:93:B4:2C:2B:82:40:1B:5C:51:73:0A:0E:E6:AA:F9:22:02:21:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e36a619c735065b41044b121f1885f2666878d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/7c478e89caf5dd40b4287a3a1f2f9bed3cff7d45.roa
Signing time:             Sat 20 May 2023 16:46:41 +0000
ROA not before:           Fri 19 May 2023 16:46:41 +0000
ROA not after:            Tue 20 May 2025 16:46:41 +0000
asID:                     64150
IP address blocks:        45.68.34.0/24 maxlen: 24
                          45.68.35.0/24 maxlen: 24
                          45.68.34.0/23 maxlen: 24
                          2801:17:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4634 (0x121a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e36a619c735065b41044b121f1885f2666878d
        Validity
            Not Before: May 19 16:46:41 2023 GMT
            Not After : May 20 16:46:41 2025 GMT
        Subject: CN=7c478e89caf5dd40b4287a3a1f2f9bed3cff7d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:bd:09:20:dd:cf:3f:44:9d:c1:42:12:10:
                    72:0d:52:ba:85:8f:f0:20:e1:d2:a9:68:91:b2:fe:
                    ca:c9:e1:ef:f0:49:e6:3b:cd:b1:de:ad:97:78:7c:
                    07:21:be:03:3c:0d:48:26:3c:c0:82:b5:f8:32:ec:
                    ab:8e:e5:e0:e7:a1:3c:b3:99:0e:6f:dd:55:ba:41:
                    96:74:83:01:fe:5b:0b:c5:69:c4:dc:10:b7:37:81:
                    09:1d:23:40:31:de:26:28:aa:10:12:6f:4f:7a:7b:
                    ef:15:9f:5d:cf:46:b2:ca:c4:11:26:29:e5:b4:1a:
                    80:49:d5:72:54:5b:0a:7b:ec:c6:df:bf:6e:7f:67:
                    2c:55:17:24:b6:f6:6a:a8:44:49:80:80:c7:13:a5:
                    91:b8:b7:39:01:6b:58:db:44:ac:84:80:67:ee:49:
                    3e:2c:41:e1:fb:5e:d7:55:b1:17:e1:08:31:f2:43:
                    8e:d9:06:69:5e:52:c5:39:c6:35:4c:a2:e9:db:21:
                    04:36:d6:19:b5:a4:b5:d1:68:e4:f0:8c:61:53:10:
                    08:d7:e9:f9:c4:82:44:48:04:74:1b:ba:42:63:5f:
                    80:30:14:35:3e:b6:09:b9:b3:40:3e:e8:3b:5e:86:
                    bc:28:79:09:1c:b1:44:81:2c:e2:4a:bd:b4:17:97:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6B:68:9C:7D:56:31:95:91:79:B7:2D:8A:73:69:64:CF:3D:42:92
            X509v3 Authority Key Identifier:
                keyid:7B:93:B4:2C:2B:82:40:1B:5C:51:73:0A:0E:E6:AA:F9:22:02:21:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e36a619c735065b41044b121f1885f2666878d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/7c478e89caf5dd40b4287a3a1f2f9bed3cff7d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/13e36a619c735065b41044b121f1885f2666878d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.34.0/23
                IPv6:
                  2801:17:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:8b:5e:7c:24:23:d5:8f:24:e7:3e:fc:90:fd:b9:b7:9b:
         fd:0c:22:22:3b:84:29:b3:aa:0b:06:2f:ed:07:fe:2a:34:5c:
         37:eb:1f:59:f9:60:62:a7:2b:17:96:de:7a:a2:04:9c:35:89:
         d9:f9:e3:42:e4:ec:9e:75:da:73:42:87:62:27:f5:10:ba:b3:
         cd:60:97:44:b2:f9:99:74:f0:e8:b8:99:2d:9d:ea:57:46:d3:
         a4:94:03:ec:f5:61:1f:2d:03:84:44:8e:fb:1f:9e:77:25:d1:
         f1:bf:87:96:b9:59:80:03:ff:a9:ce:a3:7e:df:78:b5:61:da:
         9a:58:ae:a9:f1:21:9d:8b:02:3b:ae:5f:b1:18:c3:54:ef:23:
         2e:55:9d:2b:ca:df:ca:86:1b:ab:d5:e4:39:c2:af:44:35:ea:
         01:3c:e9:46:63:c5:08:bf:d8:a1:4e:87:ab:df:58:6f:84:3d:
         1f:58:5e:cc:6a:cb:b5:ac:c1:12:ed:d1:36:e9:0b:f5:89:eb:
         2e:0b:ff:fb:ed:44:78:ff:6e:31:a5:dc:1a:4c:4c:90:6b:ad:
         93:58:66:00:8c:fa:1b:42:a1:ed:e9:9a:df:13:ba:39:42:fd:
         2e:d6:2b:ea:96:b5:90:1c:d2:00:05:8b:ae:10:84:86:79:4e:
         be:af:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org