Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/f19b1cf33c36e50cf84df6c4839446c005e046c4.roa
File:                     f19b1cf33c36e50cf84df6c4839446c005e046c4.roa (raw, json)
Hash identifier:          dMJlWFAeXI+oGIrSxv6n+n6hZO/z572+j73QX5Y1ovw=
Subject key identifier:   BE:BD:5B:DF:F3:F4:D8:47:68:EC:8E:EB:68:0C:35:F3:5E:A1:03:75
Certificate issuer:       /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial:       25F9D7
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/f19b1cf33c36e50cf84df6c4839446c005e046c4.roa
Signing time:             Tue 16 Jan 2024 12:47:01 +0000
ROA not before:           Tue 16 Jan 2024 12:47:00 +0000
ROA not after:            Fri 16 Jan 2026 12:47:00 +0000
asID:                     265853
IP address blocks:        45.225.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2488791 (0x25f9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
        Validity
            Not Before: Jan 16 12:47:00 2024 GMT
            Not After : Jan 16 12:47:00 2026 GMT
        Subject: CN=f19b1cf33c36e50cf84df6c4839446c005e046c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:a9:6c:07:a7:84:b8:ef:78:cc:f9:16:1e:
                    4b:ff:2a:0f:5e:fe:44:8f:ce:4d:2f:22:8c:92:59:
                    bc:55:c7:8c:72:a7:28:e9:70:da:5c:42:d9:b1:15:
                    f0:eb:95:0f:c3:0b:20:3a:af:39:13:24:5c:cc:e8:
                    27:17:3b:29:1a:e4:d6:7e:b1:0a:fb:1a:19:33:01:
                    68:36:89:06:1e:48:0f:11:36:c4:77:ca:d0:9d:44:
                    f2:05:01:c8:55:b0:5a:7a:91:22:89:24:c3:89:1a:
                    04:94:40:c7:6d:07:2e:b0:38:45:21:90:08:4b:60:
                    4d:63:2e:ce:92:f6:d8:f0:d3:f8:4e:81:dc:1c:df:
                    5f:83:d2:87:c0:d8:b8:08:72:15:be:ff:ef:7d:8e:
                    55:46:54:90:bd:57:ae:de:46:5b:cc:30:6f:02:1b:
                    03:52:90:18:6d:8c:7b:54:da:5b:fe:55:3d:34:e3:
                    d6:09:77:90:28:8f:24:f7:5b:5a:8b:9e:77:16:da:
                    b1:4c:28:16:37:ff:eb:d1:1d:2e:6d:99:d5:89:6f:
                    bc:89:7b:10:fb:3a:6e:8c:ff:bd:a7:4f:bb:2d:25:
                    0d:6a:70:53:2b:5f:53:cb:79:b8:2b:62:ed:08:cf:
                    8a:ab:eb:dc:cf:24:a4:86:18:64:42:57:8b:76:9b:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BD:5B:DF:F3:F4:D8:47:68:EC:8E:EB:68:0C:35:F3:5E:A1:03:75
            X509v3 Authority Key Identifier:
                keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/f19b1cf33c36e50cf84df6c4839446c005e046c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:df:35:07:e1:4b:a5:7b:19:bb:19:fe:fd:d6:ba:98:3a:7b:
         23:2b:56:15:7d:cf:f9:bd:f7:08:c1:d4:93:d3:21:28:19:e9:
         50:66:19:5a:b1:6c:ee:2f:d8:7f:4d:fb:b2:2f:d2:14:9f:ee:
         36:e3:14:92:ef:e4:ef:d0:29:7a:69:34:f9:3d:d7:9f:24:c1:
         d6:de:52:6e:6a:1d:56:35:e3:ec:3f:58:95:22:aa:51:62:e2:
         38:ce:db:1f:b9:5a:17:62:0e:0e:26:74:bf:b7:ea:57:26:b9:
         1f:4b:c1:bc:1b:9b:7f:38:0b:d1:04:81:0f:f7:33:89:22:fe:
         91:09:95:81:c4:03:3e:44:2e:9b:35:18:f8:8e:7a:31:80:e7:
         41:9a:48:f5:c5:80:cd:f2:f5:eb:10:7a:c9:4e:ea:8e:4e:af:
         da:94:68:3f:45:97:2f:a7:f9:e3:eb:1d:ff:59:94:97:4a:05:
         c7:e6:da:5b:23:9f:66:22:e7:e8:01:09:f0:b0:3d:78:63:50:
         4e:f6:55:51:fc:32:85:bf:fe:23:72:d9:53:61:8b:14:fa:99:
         a6:d6:47:df:fc:40:f6:ad:89:02:e7:80:9c:5e:3a:10:24:c3:
         ee:f4:8a:72:89:d4:2b:78:1c:90:5e:7c:d8:8a:f5:be:64:bf:
         13:68:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org