Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/69481c09ad4a955baa608803a4c1b8d72f3bf43c.roa
File:                     69481c09ad4a955baa608803a4c1b8d72f3bf43c.roa (raw, json)
Hash identifier:          4Nv/LkHCTzMszsXjNjhqx3D5JsrAQHP5/jKkKx71ryI=
Subject key identifier:   81:8C:0E:AC:78:25:3A:F2:C2:E3:2C:68:AF:CD:53:3A:66:0D:D1:C1
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       214E9A
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/69481c09ad4a955baa608803a4c1b8d72f3bf43c.roa
Signing time:             Tue 21 Feb 2023 16:43:27 +0000
ROA not before:           Mon 20 Feb 2023 16:23:16 +0000
ROA not after:            Fri 21 Feb 2025 16:23:16 +0000
asID:                     3816
IP address blocks:        190.255.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182810 (0x214e9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Feb 20 16:23:16 2023 GMT
            Not After : Feb 21 16:23:16 2025 GMT
        Subject: CN=69481c09ad4a955baa608803a4c1b8d72f3bf43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:dc:8a:99:7c:98:91:1b:b6:db:01:d1:b0:
                    03:4a:c4:6c:6c:07:fb:b7:bc:c8:2e:70:e5:da:69:
                    34:a4:9b:60:d7:32:b7:a8:91:16:0d:61:aa:55:aa:
                    16:cc:66:e8:43:ae:30:9e:d4:2b:05:b8:a2:f3:3a:
                    dc:01:5c:bd:c1:de:20:6f:71:80:f8:91:6c:2c:8e:
                    74:63:89:24:9f:a3:f1:d4:37:c0:f9:84:4d:1c:b6:
                    f1:37:b0:4f:44:26:eb:cd:5d:1c:68:f2:73:89:8d:
                    3b:ae:6a:dc:0f:3c:8f:6b:cb:f1:0a:00:ee:82:a7:
                    cc:c3:db:e5:8b:f4:96:1f:5d:d2:17:c5:e7:49:78:
                    dd:16:8d:d0:27:31:0e:49:a1:48:04:29:79:73:a5:
                    33:b4:c4:09:bb:f3:c2:34:25:4e:2a:43:4f:2a:03:
                    f3:0b:92:38:46:a1:b4:9e:18:f4:fe:62:25:55:ba:
                    48:af:07:4c:75:8e:51:dc:d0:61:37:96:d9:bd:79:
                    c7:dd:49:79:bd:cf:d8:c0:b2:85:39:a2:23:f4:3d:
                    ba:94:1b:fa:5a:5a:f4:a0:eb:fd:db:2c:ba:2c:b8:
                    c0:5c:e3:3f:0b:b1:ec:c3:67:48:6a:90:c3:94:db:
                    a0:0b:66:c8:e3:06:cc:50:69:8e:73:94:da:da:3b:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:0E:AC:78:25:3A:F2:C2:E3:2C:68:AF:CD:53:3A:66:0D:D1:C1
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/69481c09ad4a955baa608803a4c1b8d72f3bf43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.255.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:48:08:16:c0:67:8f:05:a3:36:3a:32:e6:a9:ad:3f:95:98:
         e0:79:20:ec:10:2f:7a:f4:e6:0a:81:4a:be:fc:36:46:09:f2:
         fa:b2:08:8c:cc:cc:07:9e:43:05:db:6e:cf:2b:b9:b6:17:9a:
         95:92:c6:62:85:58:41:3a:20:d9:43:7f:5f:5f:d9:6c:42:a4:
         ef:9f:5a:f3:47:3b:05:3c:57:09:5f:96:21:5d:ab:63:dc:52:
         2c:f2:eb:d7:93:a5:d3:1b:0b:b1:5f:45:1e:32:12:c4:09:4a:
         7e:94:0c:b7:0c:51:4b:87:dc:f7:65:74:0c:a2:08:00:59:f3:
         02:6f:f0:76:25:8a:86:c4:77:d0:7f:d5:dc:89:a2:78:e9:37:
         ae:b6:91:2f:71:cc:33:f7:1a:5b:bc:4a:43:1c:5c:7c:f9:f9:
         a5:d7:d4:30:42:c4:5c:72:ab:7e:be:90:1b:99:d5:7b:87:e3:
         da:19:26:7a:4f:33:cc:3e:8e:14:fe:ed:a7:79:aa:7d:93:8e:
         01:1b:59:00:70:dd:7d:e5:68:55:39:6b:4d:f9:ba:3b:23:88:
         b7:7f:03:bf:b4:0f:46:9e:7b:ff:42:7d:ac:40:06:87:69:f4:
         cb:d7:82:3d:25:ed:8a:54:bb:86:01:08:af:36:98:75:8a:24:
         c9:b1:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org