Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/e157c3b0a8a8f3a881217451499ad84e30c03ee9.roa
File:                     e157c3b0a8a8f3a881217451499ad84e30c03ee9.roa (raw, json)
Hash identifier:          8rPSO8ARc41vJYPU6+Szp7nR2fxc+lJyvzqoP7cL1SQ=
Subject key identifier:   6B:73:98:42:71:78:E1:A0:21:04:42:37:D8:D9:21:F8:DA:A2:F5:DA
Certificate issuer:       /CN=a26ec314a343bc26436d508024e2d68ff97ea3a5
Certificate serial:       03028A
Authority key identifier: 06:89:35:37:5B:DA:80:44:3D:FE:B4:7E:54:06:09:27:8A:D2:33:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26ec314a343bc26436d508024e2d68ff97ea3a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/e157c3b0a8a8f3a881217451499ad84e30c03ee9.roa
Signing time:             Thu 14 Sep 2023 16:25:29 +0000
ROA not before:           Wed 13 Sep 2023 16:25:29 +0000
ROA not after:            Sun 14 Sep 2025 16:25:29 +0000
asID:                     28431
IP address blocks:        45.174.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197258 (0x3028a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26ec314a343bc26436d508024e2d68ff97ea3a5
        Validity
            Not Before: Sep 13 16:25:29 2023 GMT
            Not After : Sep 14 16:25:29 2025 GMT
        Subject: CN=e157c3b0a8a8f3a881217451499ad84e30c03ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:77:28:be:69:34:5a:24:57:a4:24:9d:69:
                    17:05:2f:42:17:98:c0:0e:4e:04:26:cb:9f:25:ec:
                    8d:5f:49:8d:51:8f:ef:35:15:7e:70:78:f4:16:62:
                    15:24:e7:a2:6a:09:a9:ae:f1:2a:1b:47:9b:9d:2c:
                    5b:53:85:5f:a9:c4:21:a5:93:17:7f:d4:78:8a:89:
                    1d:d5:05:82:f6:f7:83:2b:31:20:29:98:da:f8:da:
                    27:49:c1:ea:75:a9:28:e0:01:92:a1:9b:96:7f:ad:
                    4a:82:31:e1:b1:2a:92:2c:e8:0e:36:f2:6f:7a:bd:
                    ea:f0:ea:1a:b3:63:dd:61:18:e1:46:05:11:bb:f9:
                    fe:a6:78:a5:9f:1e:e3:a1:49:26:8e:b7:55:50:47:
                    9b:57:27:8c:64:74:a3:32:de:60:c8:b7:1c:f0:52:
                    28:02:db:b1:a9:af:b7:fe:95:ab:ad:1e:26:86:8a:
                    34:ee:4b:75:9c:4c:c0:10:b8:8c:14:5a:21:2d:0f:
                    1f:91:a3:1d:25:bc:16:4c:30:18:8b:da:d3:b5:b4:
                    c0:65:b6:1c:87:5f:12:3e:51:d2:1e:46:42:44:5b:
                    db:d8:c6:cc:5d:58:4d:0d:83:5f:8b:10:4f:bf:e9:
                    a7:dd:af:e5:90:b0:92:a0:dc:1a:98:c7:53:e4:85:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:73:98:42:71:78:E1:A0:21:04:42:37:D8:D9:21:F8:DA:A2:F5:DA
            X509v3 Authority Key Identifier:
                keyid:06:89:35:37:5B:DA:80:44:3D:FE:B4:7E:54:06:09:27:8A:D2:33:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26ec314a343bc26436d508024e2d68ff97ea3a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/e157c3b0a8a8f3a881217451499ad84e30c03ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/a26ec314a343bc26436d508024e2d68ff97ea3a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:67:dc:3d:98:f0:ba:7a:67:ea:ed:69:de:2e:a5:78:d3:
         38:c3:cd:f0:50:62:ba:a6:84:94:75:e5:00:b9:02:e2:20:df:
         bc:ea:d1:d4:90:ef:58:f9:3b:8d:5f:e1:67:e7:9e:32:24:73:
         f2:69:c7:25:13:84:4f:2b:fa:9a:ae:17:88:95:93:e6:fb:bc:
         d7:14:a9:5d:d9:86:f9:3e:37:6a:ae:c8:47:46:17:a5:17:04:
         d9:d2:3c:c8:76:5a:e7:c1:08:db:d0:b9:32:a1:3a:86:6b:f5:
         29:d0:1c:2b:8c:0a:24:b5:10:d8:97:fb:82:c4:c3:51:c1:09:
         13:00:d4:25:52:3b:9c:28:a9:8c:47:ae:b1:14:95:df:ad:9b:
         0a:2e:78:c3:94:5f:79:38:f4:62:0d:4f:ed:14:3c:b8:bb:ae:
         e3:65:ab:0b:a4:15:ed:8c:a1:74:03:78:ef:07:ec:2f:74:e7:
         32:5f:c3:a2:af:59:b8:7b:12:f7:65:66:b0:65:19:11:fe:ca:
         99:1f:d7:7b:6e:f3:3b:22:a1:f2:59:51:a6:43:77:c0:bb:a5:
         bf:3c:d4:d1:b0:05:e1:51:1a:bd:2b:55:5a:0b:8d:0c:fe:a7:
         5c:85:83:df:92:84:58:5e:52:1b:29:e6:d5:0c:71:84:17:7b:
         a2:ca:2e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org