Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/bc9b24ad463dce2f192d18e1359cdaf3a0c136ad.roa
File:                     bc9b24ad463dce2f192d18e1359cdaf3a0c136ad.roa (raw, json)
Hash identifier:          8ZrnkKMYbGR4/ldPrTZSrQ5qIz7tNW74Y/Y2E5ioBhM=
Subject key identifier:   40:7D:C0:1D:B8:11:88:7D:B6:20:4D:DA:27:A4:70:47:D5:66:C5:90
Certificate issuer:       /CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Certificate serial:       1FBF75
Authority key identifier: 04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/bc9b24ad463dce2f192d18e1359cdaf3a0c136ad.roa
Signing time:             Mon 17 Apr 2023 18:50:15 +0000
ROA not before:           Sun 16 Apr 2023 18:50:15 +0000
ROA not after:            Thu 17 Apr 2025 18:50:15 +0000
asID:                     266771
IP address blocks:        45.232.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080629 (0x1fbf75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
        Validity
            Not Before: Apr 16 18:50:15 2023 GMT
            Not After : Apr 17 18:50:15 2025 GMT
        Subject: CN=bc9b24ad463dce2f192d18e1359cdaf3a0c136ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:19:58:b8:a6:51:0a:33:b0:3d:fe:85:ec:
                    87:b6:cc:27:8b:7d:72:eb:27:1c:64:80:a7:af:5d:
                    06:15:5a:ff:de:85:67:39:ee:86:92:2f:66:79:13:
                    b7:51:96:78:d0:49:8a:f1:97:9d:73:d9:e1:e1:a6:
                    db:12:ff:5c:b1:43:6f:3b:17:f7:aa:23:08:d5:3d:
                    57:95:44:7e:f0:9b:9d:56:5f:fa:52:9e:09:4e:e9:
                    13:f8:1c:ce:65:c1:1e:51:76:78:d3:72:47:d2:e2:
                    b1:7c:58:f8:a2:f0:0c:b4:88:bf:62:d1:29:e5:ca:
                    97:dc:c9:a8:41:91:c1:7a:0e:1b:73:a4:a7:4b:3e:
                    9b:2e:08:5c:31:f4:7a:b6:21:f0:26:f3:d7:82:69:
                    83:33:bb:4f:a5:ea:9f:f9:52:a9:ac:8c:d3:b4:4c:
                    72:fd:e7:0c:78:f0:08:a7:bc:a4:7e:5a:b5:45:ee:
                    91:b6:78:5e:6b:15:b3:44:bd:69:70:0b:3a:a4:5f:
                    8f:0b:31:da:b3:f0:80:8c:ba:a7:81:7a:ca:ba:dd:
                    4f:47:35:66:19:17:08:6c:c7:c9:fb:31:0f:93:74:
                    29:75:8b:77:76:55:cf:d7:9f:ed:29:c7:86:fa:cf:
                    a5:8f:84:f8:00:e9:a0:42:af:4c:9a:bb:35:ce:1b:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7D:C0:1D:B8:11:88:7D:B6:20:4D:DA:27:A4:70:47:D5:66:C5:90
            X509v3 Authority Key Identifier:
                keyid:04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/bc9b24ad463dce2f192d18e1359cdaf3a0c136ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:80:58:96:25:28:cc:d5:7b:8f:03:a7:c5:cb:57:a8:ec:
         6d:27:11:32:6c:fe:6b:da:41:2e:36:3a:22:74:47:ac:1d:5c:
         be:d5:87:83:aa:1f:a1:d8:77:e1:d4:b3:97:28:fb:fa:63:a7:
         52:c3:c2:74:bf:63:f7:81:08:9b:17:34:70:39:91:1c:a7:62:
         14:7a:fd:30:9f:22:59:f4:98:4d:dd:81:95:73:cd:d7:20:74:
         5b:c6:e9:5e:3e:25:5a:6b:13:eb:0f:28:0a:50:a7:a7:da:aa:
         01:c5:f5:12:a0:f7:ff:5d:65:16:39:33:04:57:44:69:fc:7d:
         ab:f6:76:e0:82:7c:90:50:e1:b8:08:a9:ee:0f:76:f3:b6:1a:
         8d:b5:d0:c5:8d:97:e2:d3:f6:8d:a8:5b:15:09:5b:34:e4:e0:
         4b:cf:8e:40:fd:71:17:d3:e6:6e:85:ba:ac:a8:38:48:87:41:
         7c:25:72:fe:ef:f1:ff:70:9d:de:58:84:24:0d:f0:f2:7a:e0:
         d4:c3:e1:12:f7:9b:05:7b:69:76:96:65:db:c1:61:45:38:7b:
         2d:2d:ad:d6:94:78:d9:3b:5d:95:0f:b2:e9:91:7a:81:48:e7:
         fe:8a:72:35:08:9e:f8:cf:df:f2:ff:50:77:24:c4:60:3f:74:
         f6:5d:13:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org