Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/907f33432b24e11ab7731ed9965244fbe321d7d2.roa
File:                     907f33432b24e11ab7731ed9965244fbe321d7d2.roa (raw, json)
Hash identifier:          0KJJYw+POwhLtUonnMcR1X9k4QvhjN98jqWPNbvPGyo=
Subject key identifier:   C6:14:2F:0E:39:84:8F:B7:A8:2C:FE:F8:AF:E5:31:81:8A:D3:0C:33
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0D0D91
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/907f33432b24e11ab7731ed9965244fbe321d7d2.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855441 (0xd0d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=907f33432b24e11ab7731ed9965244fbe321d7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:d3:ce:b5:d5:8a:ad:e5:42:81:2a:ed:0b:
                    0b:d5:19:3b:a3:f6:46:9f:84:e9:a2:69:a5:3a:a5:
                    ae:b6:86:a2:e9:2f:3b:fc:21:ff:27:bd:2d:fb:93:
                    4c:88:c9:2e:d1:08:b9:54:cf:79:eb:b8:d3:b2:db:
                    ac:e5:1d:21:fc:81:bb:f4:59:25:4d:95:ed:c9:32:
                    21:8c:8b:82:ec:ee:71:e1:03:58:34:33:c5:f5:5f:
                    cb:28:5c:d0:89:72:72:be:e3:79:b6:7b:15:fd:ce:
                    a8:70:5b:d2:63:b0:5c:ab:2c:6a:0d:7a:91:6e:04:
                    02:e5:33:0d:49:bd:73:c2:7c:95:6c:8b:42:c9:ed:
                    fc:36:e1:41:20:8a:7f:32:eb:4a:84:42:5e:87:bf:
                    3a:83:59:8d:f5:15:d7:7d:32:0c:58:16:c7:98:4e:
                    62:bc:05:5b:6d:54:41:a9:0a:ad:65:6b:6b:4b:13:
                    90:b4:5f:ed:ef:06:6d:7a:50:77:8b:0f:17:5c:04:
                    d4:e8:c7:a4:5c:c2:5c:5f:0c:0a:20:81:68:f7:27:
                    42:38:8e:14:a0:fa:0c:63:9e:b3:15:9b:d8:a4:42:
                    15:38:0e:6b:4b:16:6c:a5:b5:89:b0:f2:d0:be:c2:
                    a5:61:38:d6:d4:79:b9:c1:20:f4:41:16:8b:8f:fb:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:14:2F:0E:39:84:8F:B7:A8:2C:FE:F8:AF:E5:31:81:8A:D3:0C:33
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/907f33432b24e11ab7731ed9965244fbe321d7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:23:8c:5a:95:6b:3c:5a:3d:c8:90:ae:8e:6b:f4:0b:61:
         ec:f2:b6:de:d0:3a:71:a1:9a:7e:0a:4b:bb:ab:3d:1b:c7:2a:
         c0:fe:e6:24:ce:82:5f:65:a7:8f:88:de:eb:3e:1b:fb:94:27:
         28:c2:04:34:dd:0a:12:f8:22:db:b6:53:44:b7:5e:9d:df:fb:
         4a:54:f1:aa:b8:1e:05:25:b1:e7:61:b9:e0:73:e9:3b:4d:b7:
         af:be:5b:17:cd:51:0a:24:b8:9e:45:83:14:79:ea:f9:63:4a:
         2f:47:ff:92:a3:88:db:04:0d:e7:b1:0f:0c:7d:56:5e:87:68:
         00:c7:dd:1a:25:b2:96:db:f4:41:ad:e8:9d:9b:5d:b7:2a:04:
         81:be:53:6d:49:43:f8:b1:74:38:1e:87:0a:70:84:63:8e:15:
         5a:d9:37:0d:a3:a1:74:ce:88:64:fa:ae:f2:e8:51:c6:b3:5e:
         b7:25:c0:9a:f2:9c:72:1b:d2:23:8c:24:36:de:7b:a7:4f:5d:
         34:15:69:ab:a1:9a:fb:52:db:7a:2c:3b:df:c5:8e:ad:83:fd:
         24:2f:f3:60:e4:4c:11:a7:11:19:1f:f2:13:90:0a:fc:88:67:
         2b:35:ef:cb:4b:48:86:bb:07:ff:1d:b9:e2:dc:83:47:df:c2:
         9e:a8:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org