Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/dc584ff42f283ba0b020c2f162bed08b6d100a76.roa
File:                     dc584ff42f283ba0b020c2f162bed08b6d100a76.roa (raw, json)
Hash identifier:          AZu0npVYPTsHSp0y8MDZ2An7LEiCwGF4wNLZkw7yes4=
Subject key identifier:   89:3F:F4:C1:98:F4:08:F5:7A:1F:17:B7:FD:0C:87:C6:9E:A5:4F:F5
Certificate issuer:       /CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
Certificate serial:       01EBFD
Authority key identifier: 7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/dc584ff42f283ba0b020c2f162bed08b6d100a76.roa
Signing time:             Tue 22 Aug 2023 22:58:36 +0000
ROA not before:           Mon 21 Aug 2023 22:58:36 +0000
ROA not after:            Fri 22 Aug 2025 22:58:36 +0000
asID:                     267724
IP address blocks:        45.166.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125949 (0x1ebfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
        Validity
            Not Before: Aug 21 22:58:36 2023 GMT
            Not After : Aug 22 22:58:36 2025 GMT
        Subject: CN=dc584ff42f283ba0b020c2f162bed08b6d100a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:d4:7f:97:a7:66:db:21:57:14:de:81:ba:
                    a2:19:20:26:5d:3d:bc:09:07:bd:35:7b:77:d4:25:
                    49:04:71:ed:b2:22:bb:67:e1:58:bd:70:e3:24:03:
                    1b:f9:ae:93:af:e0:5b:b7:80:78:5b:13:9f:e5:8c:
                    d1:79:0b:17:c9:bd:64:33:4d:26:6b:d9:01:a6:f9:
                    d9:c5:c7:3d:27:4b:30:8b:86:a9:cd:0f:9a:60:e4:
                    a5:3a:75:da:91:82:00:a3:c3:3d:f5:1b:5e:c8:50:
                    e3:6c:7d:4e:b2:8a:99:cb:e9:9e:ca:ee:d2:13:74:
                    59:28:c0:74:0b:e6:c3:86:54:23:ba:6a:fe:ec:b7:
                    5c:a3:d4:65:c7:b6:55:71:bc:d9:36:45:f0:c7:9d:
                    db:e1:de:22:55:ff:5d:06:a7:23:83:99:41:30:a8:
                    c2:56:3a:f2:3e:82:f5:ff:8b:b7:74:e6:9a:e9:33:
                    03:9c:0a:81:27:e0:44:48:c7:a4:1c:5d:af:7e:36:
                    11:e9:85:9c:b6:d4:dc:01:4e:9b:60:eb:39:77:66:
                    88:b7:0b:d4:fc:27:e1:07:13:29:1d:ca:77:43:15:
                    8d:fd:ad:a4:54:9d:b2:d0:bb:38:7a:21:12:00:aa:
                    46:6e:22:54:18:77:7b:6d:97:26:f7:62:21:0b:8c:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3F:F4:C1:98:F4:08:F5:7A:1F:17:B7:FD:0C:87:C6:9E:A5:4F:F5
            X509v3 Authority Key Identifier:
                keyid:7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/dc584ff42f283ba0b020c2f162bed08b6d100a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:f7:e5:bf:59:fe:e1:0d:65:77:75:20:18:d3:09:e3:de:
         ff:cd:ca:86:1f:17:fd:09:f3:3b:a3:35:94:ea:21:a0:00:d1:
         71:84:d7:17:93:8f:ba:4f:77:c5:d1:cd:b5:d1:c7:63:bd:56:
         e9:6f:c5:f4:b7:49:f0:07:c5:dc:04:32:2d:0f:94:b8:89:bc:
         fa:84:1e:84:24:d2:5a:dc:93:60:2e:2f:84:46:6b:da:28:9b:
         94:90:ca:a4:3f:78:d1:7e:70:17:1e:b5:e3:80:88:8a:38:52:
         97:76:43:1a:ff:12:28:a8:42:31:28:5f:ea:e5:d8:02:f6:b8:
         61:b6:2f:22:9b:d4:a2:9e:92:20:a2:73:db:87:97:ed:1d:8a:
         4c:4c:ff:dd:bc:d1:60:0d:64:9c:d0:dd:c1:28:03:7b:74:26:
         5c:95:b9:59:5d:62:a6:39:67:26:03:fa:2a:5a:0b:8a:5a:d6:
         82:b1:e4:3a:15:7b:57:84:bd:f8:85:37:50:30:b7:dc:66:cd:
         72:cd:dc:9b:4b:f7:1f:f3:6a:50:9f:67:8b:da:08:8f:12:1d:
         80:a5:42:8e:cd:55:6d:01:18:c3:0e:d4:f2:ff:7f:e9:cd:15:
         ee:1e:82:6f:f1:a6:7d:ec:aa:17:33:21:41:a4:29:53:56:88:
         d6:8f:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org