Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/0d64cc33837d3ee7da49a40a9cdd2ed6d80fcb7b.roa
File:                     0d64cc33837d3ee7da49a40a9cdd2ed6d80fcb7b.roa (raw, json)
Hash identifier:          D7kFWXye86ev3OI6WObpNDtZJIt8SFuLQDXclSNFy0U=
Subject key identifier:   DD:B1:D0:3F:B6:1F:A1:C9:C9:03:5A:FD:5A:96:55:76:E9:A7:B7:8E
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       25F5BE
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/0d64cc33837d3ee7da49a40a9cdd2ed6d80fcb7b.roa
Signing time:             Tue 16 Jan 2024 12:47:00 +0000
ROA not before:           Tue 16 Jan 2024 12:47:00 +0000
ROA not after:            Fri 16 Jan 2026 12:47:00 +0000
asID:                     265862
IP address blocks:        45.225.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487742 (0x25f5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Jan 16 12:47:00 2024 GMT
            Not After : Jan 16 12:47:00 2026 GMT
        Subject: CN=0d64cc33837d3ee7da49a40a9cdd2ed6d80fcb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:9d:25:aa:1e:26:b4:e9:43:2c:bb:83:d9:
                    4a:af:6a:ed:97:6a:7a:15:56:4e:38:e6:4e:dd:8b:
                    5a:cd:85:b1:c9:11:45:cf:fb:6b:d5:f3:43:e5:ae:
                    4d:56:44:a3:22:34:47:cd:e8:c1:93:d0:90:3b:ce:
                    04:23:70:ee:ce:6c:10:11:19:49:e7:dc:60:bf:fd:
                    3a:09:92:54:b4:be:4c:75:26:03:3e:7e:50:f5:c7:
                    ac:a6:06:70:86:79:6c:73:c3:89:a6:cb:39:dd:41:
                    0b:1f:0e:67:3d:92:e4:45:03:2b:76:63:f4:4f:26:
                    b8:06:bb:df:5b:94:21:39:c5:cd:f9:90:48:1d:cb:
                    d5:21:8d:b9:03:5b:ec:e1:ee:b8:23:5e:84:5b:c1:
                    e7:48:04:98:06:68:ed:34:71:a5:bb:d5:c0:7e:81:
                    20:ef:0a:dc:59:91:55:4e:9f:42:89:01:f8:3b:13:
                    1a:53:1e:e1:56:18:db:91:09:21:c5:09:09:1d:ef:
                    4e:97:36:21:6b:67:fe:21:b2:40:bb:3d:29:4c:34:
                    6b:d5:aa:50:d8:46:66:70:f4:1e:04:6b:f2:5c:7c:
                    e8:7c:e3:cd:c9:60:67:34:5e:85:68:b8:2f:e9:fd:
                    3e:05:f7:08:72:99:b8:84:26:df:0e:ab:c4:c2:78:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:D0:3F:B6:1F:A1:C9:C9:03:5A:FD:5A:96:55:76:E9:A7:B7:8E
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/0d64cc33837d3ee7da49a40a9cdd2ed6d80fcb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:50:6e:9d:eb:92:83:95:b0:ee:e7:1d:24:8d:4f:a1:9c:15:
         e4:88:da:55:5c:f4:4a:66:52:b8:7b:fb:50:59:1f:e2:e0:bf:
         cc:32:f1:d9:77:ac:73:e9:a6:46:74:74:d5:16:22:ad:8a:68:
         1d:35:80:8c:db:5b:59:18:a7:61:ff:f8:47:38:db:9c:7e:f1:
         26:d7:f6:7c:3a:bb:2a:e5:c9:91:5a:a3:58:ff:f1:3d:60:e5:
         90:35:2a:67:e7:86:67:f1:78:9a:31:47:c5:f1:b7:b0:20:01:
         de:95:77:1c:f7:df:da:8a:0a:21:55:fd:9f:ae:a4:c6:8b:bd:
         8b:ae:97:54:1f:b5:c9:8f:a9:79:23:fd:98:5d:b9:a4:af:f3:
         25:3a:61:f4:de:e4:00:e2:38:19:09:f2:6a:b3:95:76:b1:29:
         f0:6a:d7:ff:d5:20:96:bf:3b:a8:5e:2e:2f:7a:90:4c:c0:3d:
         6f:a7:c3:41:4b:67:0d:ab:14:01:43:f4:fc:09:ab:c2:51:89:
         a3:3e:43:f8:98:aa:88:07:2e:5f:db:3a:9e:05:86:97:e0:e9:
         5c:9c:fb:58:2d:b9:cb:de:b9:7a:88:d8:91:62:9a:ba:0b:6f:
         44:ce:96:03:45:2c:30:ad:af:30:3a:fe:e2:5d:33:34:4a:ca:
         fd:52:76:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org