Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/c58ef372cb63b7adc5370359895b4fb7981589a5.roa
File:                     c58ef372cb63b7adc5370359895b4fb7981589a5.roa (raw, json)
Hash identifier:          PUnJ4aKJg/NbPk1Y9nz8CYzqD80LIJ3Qibvcm81D3K4=
Subject key identifier:   B8:F4:BA:31:93:61:17:5A:4D:73:54:7C:FE:D9:05:92:6A:23:90:F4
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0D0AF0
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/c58ef372cb63b7adc5370359895b4fb7981589a5.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854768 (0xd0af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=c58ef372cb63b7adc5370359895b4fb7981589a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:60:d8:e4:fb:22:74:e7:4f:0b:56:06:c6:
                    4a:df:9c:8e:9d:ab:0a:4c:ea:5d:b7:ba:a6:03:3c:
                    21:4a:79:07:83:65:e9:9f:73:5b:33:01:4a:65:8d:
                    47:0a:c1:1a:2d:42:69:47:af:bf:3c:a6:f7:98:f6:
                    0d:7b:d4:9f:c5:6b:3f:4d:40:15:db:bd:1d:65:32:
                    94:5b:00:14:01:83:a1:69:b7:75:a2:df:63:21:92:
                    25:cb:73:f5:3f:d7:c7:e4:b8:7f:82:55:3f:4b:8d:
                    35:98:2c:6d:89:de:81:6b:62:1d:a8:b5:8e:7e:9e:
                    91:8d:8c:33:ea:93:43:e7:0b:f3:0f:f3:f9:90:1c:
                    cc:3c:17:4f:72:fd:56:e6:ec:24:c7:65:f0:8c:fe:
                    d5:10:94:32:5c:d8:91:24:6a:be:5c:d4:0e:50:83:
                    10:28:7a:c0:ef:f7:65:b1:2f:3c:da:a2:b9:24:da:
                    00:57:e8:a3:20:68:07:61:6e:e9:cc:6a:f4:1f:86:
                    6f:dd:34:13:50:90:5c:81:9c:1f:9a:17:57:98:c2:
                    5e:8c:79:8e:62:2f:f2:73:cc:a3:7d:cb:4a:2c:09:
                    67:fd:34:32:49:ad:0b:b0:2b:4e:cd:69:50:df:5e:
                    c1:f0:ad:88:42:af:cb:e4:16:dc:cb:93:36:69:10:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:BA:31:93:61:17:5A:4D:73:54:7C:FE:D9:05:92:6A:23:90:F4
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/c58ef372cb63b7adc5370359895b4fb7981589a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:d6:58:0f:07:a0:f5:02:cf:99:d4:c4:7b:04:2c:ee:23:
         01:5e:4f:c6:d2:f5:a5:8d:55:cf:d8:2e:f3:a3:7b:89:b5:66:
         15:c2:34:fb:ec:0c:66:8f:9d:cd:e2:ef:9d:4e:52:93:12:14:
         47:67:94:11:05:11:70:f5:79:d9:85:b4:7e:b6:3c:a4:70:75:
         22:95:c5:92:30:71:91:fe:75:26:8c:75:ea:61:31:de:a5:d3:
         e8:d6:7b:e3:eb:2e:8d:72:5b:aa:ee:70:fa:aa:14:cb:b1:ce:
         ed:18:79:78:9c:7e:2e:ab:1c:5b:a1:2e:51:ac:22:72:1c:32:
         51:4f:cf:ca:ad:c2:7b:6f:23:fc:61:ec:2d:b2:26:65:10:5a:
         37:aa:04:bc:69:19:69:24:bd:1f:17:06:b3:22:59:84:49:7c:
         6d:7c:b1:88:37:14:3c:e7:8a:eb:2f:8a:ad:ba:64:06:20:90:
         2a:ff:ef:ce:98:79:5d:72:56:96:36:c9:a7:d8:7a:02:00:b4:
         0f:64:d7:2c:67:54:7e:22:a3:28:c6:0f:99:e8:02:ea:17:07:
         2b:81:2d:5d:b5:48:0d:ff:5e:e9:3b:0e:24:33:42:68:65:f6:
         64:31:44:88:38:60:74:a8:b6:74:09:da:0f:a2:07:68:c7:b4:
         5c:9a:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org