Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/ff5de4df9fe50c32173e293f8ada98bc1299c85f.roa
File:                     ff5de4df9fe50c32173e293f8ada98bc1299c85f.roa (raw, json)
Hash identifier:          NwQJObMlxpHBxY32VQE9e+WRN20vQJ6VJF2bV9Xq0as=
Subject key identifier:   00:4F:66:84:89:60:89:C5:26:62:7C:F3:0E:F5:4F:EC:C3:EE:58:75
Certificate issuer:       /CN=10d9b55586f192607b1feb6a096fc7f49882367d
Certificate serial:       0B6C9F
Authority key identifier: 54:84:9F:80:D9:90:D3:08:42:6D:3C:02:E4:6D:91:76:D9:A9:F7:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10d9b55586f192607b1feb6a096fc7f49882367d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/ff5de4df9fe50c32173e293f8ada98bc1299c85f.roa
Signing time:             Wed 24 Mar 2021 14:33:52 +0000
ROA not before:           Wed 24 Mar 2021 14:33:52 +0000
ROA not after:            Tue 24 Mar 2026 14:33:52 +0000
asID:                     265703
IP address blocks:        45.181.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748703 (0xb6c9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d9b55586f192607b1feb6a096fc7f49882367d
        Validity
            Not Before: Mar 24 14:33:52 2021 GMT
            Not After : Mar 24 14:33:52 2026 GMT
        Subject: CN=ff5de4df9fe50c32173e293f8ada98bc1299c85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:82:50:16:b4:69:79:95:42:14:b4:41:a2:
                    7e:43:8b:f7:c6:7c:41:21:9f:09:38:0a:cf:61:a5:
                    06:ec:7b:9d:fc:5f:f6:b1:f9:e1:39:3b:0f:2b:80:
                    34:21:cd:ad:c6:2c:b2:ab:59:0c:4a:20:6d:d4:38:
                    a5:cc:a6:f6:92:20:c9:fa:49:9b:76:9e:bc:e0:7c:
                    14:55:39:81:a9:a2:87:04:d4:d8:02:c0:de:f8:77:
                    e3:63:32:31:bf:f7:f4:a3:60:ef:8c:db:10:8e:dd:
                    b4:fd:9c:f4:e3:fa:bb:4c:04:33:ac:b9:0e:80:d2:
                    69:f6:a2:56:3f:43:44:9c:41:4b:76:63:52:ae:ad:
                    36:22:51:1f:73:bc:d7:5c:03:84:55:5f:0b:35:1d:
                    98:db:86:63:14:d5:44:e0:93:1f:ea:a1:32:2b:cf:
                    56:bb:a6:ed:58:fe:35:d6:d0:cc:f9:c8:19:88:19:
                    3e:8a:01:b0:8d:3d:a8:7a:e1:83:41:0e:9d:b1:33:
                    39:72:20:93:b8:82:c7:35:59:c3:4a:49:24:16:64:
                    0a:e0:37:56:55:53:ef:f6:39:d7:e5:41:72:e2:da:
                    40:17:07:18:bb:86:7b:70:0b:c0:23:c8:bb:43:85:
                    d6:c6:be:8d:ca:25:18:ef:ff:99:8f:58:42:5c:34:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:66:84:89:60:89:C5:26:62:7C:F3:0E:F5:4F:EC:C3:EE:58:75
            X509v3 Authority Key Identifier:
                keyid:54:84:9F:80:D9:90:D3:08:42:6D:3C:02:E4:6D:91:76:D9:A9:F7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10d9b55586f192607b1feb6a096fc7f49882367d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/ff5de4df9fe50c32173e293f8ada98bc1299c85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c40febec-ad21-47be-a358-2ebd7acb11b6/10d9b55586f192607b1feb6a096fc7f49882367d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:26:cd:eb:ac:1d:07:f2:62:ec:fa:1f:f0:2b:b5:1d:31:
         f2:13:66:bb:c0:62:c2:97:93:84:aa:22:81:4e:18:65:5b:e3:
         ed:1d:aa:f6:3c:3f:26:3f:0e:a2:24:eb:92:e0:8c:1a:43:aa:
         94:f7:22:7b:c4:a6:64:a0:a3:f2:40:ad:6e:0c:66:6a:8a:fb:
         48:4f:ca:76:26:31:40:79:c4:c0:7b:f8:58:9d:a7:d8:b9:6f:
         54:c1:75:ba:28:43:e1:df:0a:2a:ad:c8:0e:30:99:85:c7:83:
         71:1c:a8:d7:fc:49:d3:42:ec:2c:a1:5e:6a:f6:16:c5:b1:c8:
         1f:74:17:d7:35:24:bd:16:b8:b9:39:32:09:5a:74:3b:47:76:
         74:2d:06:8f:42:5e:12:af:e7:50:6c:37:eb:c2:29:a6:a4:17:
         56:f5:ee:cd:89:24:c0:f3:43:bd:e3:5d:7d:d8:d0:26:07:b7:
         ce:b7:8f:e8:b2:49:93:9f:e6:08:6c:b2:44:34:8f:62:a0:23:
         9a:e8:57:e4:ee:8a:08:99:6f:7d:02:7a:87:42:ce:46:fa:78:
         10:8e:22:8c:4b:63:59:60:49:ca:de:14:bc:99:44:a7:28:28:
         10:69:11:f6:df:2d:1c:a9:ee:c3:8a:90:3f:3a:6a:60:6b:a9:
         49:d4:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org