Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/fa31879e6c0f4bbaefe5dfb211016951417e9fcb.roa
File:                     fa31879e6c0f4bbaefe5dfb211016951417e9fcb.roa (raw, json)
Hash identifier:          Zuqk6WN5x8R4BxB+ohKBzS/YgN2D1xL3//zH/ZyBu/k=
Subject key identifier:   92:A2:A3:F2:37:02:48:23:E3:0E:0A:91:6B:1F:E1:A8:C6:3A:4D:40
Certificate issuer:       /CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
Certificate serial:       2094B0
Authority key identifier: 81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/fa31879e6c0f4bbaefe5dfb211016951417e9fcb.roa
Signing time:             Mon 15 May 2023 18:04:17 +0000
ROA not before:           Sun 14 May 2023 18:04:17 +0000
ROA not after:            Thu 15 May 2025 18:04:17 +0000
asID:                     266753
IP address blocks:        45.232.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135216 (0x2094b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
        Validity
            Not Before: May 14 18:04:17 2023 GMT
            Not After : May 15 18:04:17 2025 GMT
        Subject: CN=fa31879e6c0f4bbaefe5dfb211016951417e9fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:30:4d:2f:e8:95:95:1c:11:28:aa:29:92:
                    64:6f:90:2c:53:25:4f:13:33:4c:97:9b:e2:65:67:
                    40:88:9b:07:6b:6f:23:70:28:60:05:22:5d:50:ca:
                    6e:bd:6b:27:45:75:d5:1c:71:a7:d9:b2:01:b0:b3:
                    e3:64:e8:11:f3:b1:32:78:1d:8a:8f:c8:a8:6d:25:
                    10:a8:88:85:2e:5f:9c:4d:91:f3:a7:34:bc:6d:a4:
                    80:cf:b7:ed:94:85:2c:ae:70:13:2d:25:1b:2a:2c:
                    42:02:c8:90:20:a5:5a:f3:95:a9:cf:f0:5b:fb:78:
                    89:42:d3:f9:13:19:71:5b:37:02:aa:87:5d:3c:60:
                    47:72:05:74:ca:33:bf:14:00:60:7c:66:36:77:7e:
                    cf:1f:8c:29:96:eb:1b:ab:59:b5:1d:64:e8:10:b2:
                    64:56:35:a5:6d:5b:90:43:72:d6:59:cd:f3:ca:56:
                    3b:39:58:bf:4c:47:03:27:4a:df:83:27:6d:89:43:
                    a5:ed:35:35:88:8f:65:d0:f7:9f:51:e3:a8:02:23:
                    50:7f:be:97:38:b2:a2:6e:a2:32:67:7d:6e:28:67:
                    cd:54:c3:94:35:3f:df:00:09:02:e8:44:0b:24:8f:
                    e2:8e:89:38:36:fc:65:78:21:d9:18:1a:38:40:50:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:A3:F2:37:02:48:23:E3:0E:0A:91:6B:1F:E1:A8:C6:3A:4D:40
            X509v3 Authority Key Identifier:
                keyid:81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/fa31879e6c0f4bbaefe5dfb211016951417e9fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:75:68:7c:bc:7d:42:0f:b8:a1:8e:48:dc:eb:23:91:b6:
         d3:54:0f:9c:9d:8d:02:97:2a:75:df:81:34:be:5f:de:4b:18:
         bf:d9:ad:54:c6:32:50:6d:e9:44:a6:55:be:f6:85:46:cd:1e:
         84:88:72:62:2c:18:d7:72:39:09:5c:59:a1:9e:33:2c:c7:f3:
         74:0b:e7:15:e4:0a:46:83:6d:64:b4:00:25:90:38:5d:b6:2e:
         e6:31:83:0a:44:e5:55:f3:08:7f:34:75:d5:dd:44:9c:86:dd:
         54:a6:6e:59:7e:dc:43:26:c1:03:ff:33:0f:45:27:d4:47:3a:
         2b:41:85:af:43:d6:f7:f9:5e:d5:2d:95:13:e7:30:89:34:a5:
         76:aa:55:c0:7d:e1:0e:94:e3:73:0d:5f:46:15:10:7c:dd:f7:
         03:c3:f2:86:4b:d1:33:af:39:b9:19:74:cd:c9:25:39:92:f9:
         67:9c:f6:58:2a:a8:21:30:3d:73:2c:f5:ce:79:a7:fe:95:ce:
         04:27:3f:70:af:90:af:f1:ff:25:92:57:b9:59:45:ac:7d:5f:
         19:e0:68:83:81:28:69:20:8a:72:be:a4:4a:26:be:f4:c6:40:
         de:47:53:f1:c1:c5:00:ce:c4:48:63:6f:46:dd:0f:5f:47:e1:
         68:2e:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org