Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/785cca6346baea1edf93b264c870f84b206e192c.roa
File:                     785cca6346baea1edf93b264c870f84b206e192c.roa (raw, json)
Hash identifier:          S0lN2JXHVLbw1lKzTeg8NcQ0Tv1wso9Sz8MRGBJShHc=
Subject key identifier:   9E:32:16:E7:21:FE:C5:B3:BB:F7:DA:E9:7F:41:3D:F7:8B:84:8A:B2
Certificate issuer:       /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial:       24BAF1
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/785cca6346baea1edf93b264c870f84b206e192c.roa
Signing time:             Mon 06 Nov 2023 17:24:14 +0000
ROA not before:           Mon 06 Nov 2023 17:24:14 +0000
ROA not after:            Thu 06 Nov 2025 17:24:14 +0000
asID:                     263725
IP address blocks:        45.166.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407153 (0x24baf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Validity
            Not Before: Nov  6 17:24:14 2023 GMT
            Not After : Nov  6 17:24:14 2025 GMT
        Subject: CN=785cca6346baea1edf93b264c870f84b206e192c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c5:0b:b0:e6:70:86:9f:8c:bd:c0:86:a2:cf:
                    2c:32:48:aa:b8:43:d6:94:96:ef:b3:69:fc:b4:2a:
                    6d:4a:33:95:ef:04:c6:2d:b5:d0:4a:b2:51:fd:86:
                    9e:f9:23:1b:5c:dd:f9:d3:a2:8e:76:d9:0f:2c:f6:
                    96:ba:3c:0a:ac:26:bc:7f:f2:0d:6c:6e:0a:ca:f0:
                    c1:eb:df:4c:8e:63:fe:04:ca:89:17:13:e4:93:4f:
                    08:5a:46:3c:26:f6:65:2a:67:fe:49:de:e8:90:96:
                    ad:de:3e:1d:0f:ba:f9:8b:fb:99:be:0f:ad:45:06:
                    90:28:88:66:31:8c:42:8b:de:ba:5f:64:24:f8:69:
                    8c:81:dc:5f:20:94:cc:59:1c:3c:b1:f8:c1:3c:7d:
                    73:db:e8:0f:ea:75:7e:bb:87:07:a3:85:ff:b9:4e:
                    de:69:38:02:ac:8e:09:76:44:f4:25:f4:67:7d:12:
                    ef:af:54:c0:63:fd:4d:cb:f0:b0:ca:97:d9:4e:20:
                    e1:fe:68:6a:1f:ea:6c:b2:a5:8a:1e:4d:4d:28:c5:
                    e6:6a:ab:12:72:f5:c4:9a:83:e5:05:d1:87:16:16:
                    3f:d1:d9:c9:a8:8c:c9:54:9f:de:18:1c:73:43:84:
                    29:e0:e7:4d:53:db:f0:d9:04:c6:79:aa:40:99:32:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:32:16:E7:21:FE:C5:B3:BB:F7:DA:E9:7F:41:3D:F7:8B:84:8A:B2
            X509v3 Authority Key Identifier:
                keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/785cca6346baea1edf93b264c870f84b206e192c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:77:76:b4:ed:5d:87:47:87:95:f6:f9:c9:b5:88:40:02:
         a6:a6:3e:57:97:1e:67:4f:7e:00:49:ff:fb:ae:c0:ba:31:63:
         97:f1:fb:ed:6f:a3:b2:79:9e:58:17:4a:db:db:fa:ce:e2:30:
         a0:fa:04:25:83:dd:2a:d8:4a:fa:07:8e:55:4a:68:40:a1:31:
         3b:74:f1:2f:25:37:1d:ee:5f:44:bc:75:a0:ba:c3:d1:f9:5b:
         6e:f9:e8:1f:59:4e:a2:44:13:9a:37:5d:43:9c:28:ca:e0:cf:
         aa:49:a4:a8:ff:1c:94:8f:af:54:48:de:d6:b1:29:27:e9:b4:
         fc:48:25:d4:63:f1:d2:38:50:df:54:b0:ed:ee:7a:70:59:e6:
         d5:38:81:3d:1f:e2:9d:4f:62:01:67:82:e6:3f:f9:a0:cb:03:
         16:c1:e8:49:89:f7:96:2e:d5:15:02:c5:8d:ad:bc:11:8b:ef:
         a3:3b:38:c4:68:a4:50:8f:6f:44:e5:24:64:01:cb:cf:67:54:
         f5:0c:b5:ef:27:78:04:d1:45:c6:55:9e:c4:cf:08:35:dc:ce:
         2e:73:d2:e9:9e:5c:75:32:7d:99:8a:9f:58:62:95:33:f9:ad:
         eb:b0:0a:c2:40:b6:c6:57:ac:ba:f8:35:81:57:d5:0e:b7:c3:
         fa:90:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org