Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e34f453b-415a-49b3-9320-08932e29b6e8/58a2691d535ed035eecfe12ae0d806569426cfd5.roa
File:                     58a2691d535ed035eecfe12ae0d806569426cfd5.roa (raw, json)
Hash identifier:          Ba9447IZ9FmB5ySa/+4+GrAU0FhuKAXSZQ1COs9m+Dk=
Subject key identifier:   48:51:04:7A:DD:FD:55:05:73:9A:9F:E4:0E:43:B4:CE:EB:55:4C:2C
Certificate issuer:       /CN=12bc9e6e09217d8bc18197cebcdee3d12ee4fd06
Certificate serial:       01B231
Authority key identifier: B7:34:0D:A1:25:D1:E0:3C:19:D7:B1:A7:EF:8C:8F:B2:51:5E:2B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12bc9e6e09217d8bc18197cebcdee3d12ee4fd06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e34f453b-415a-49b3-9320-08932e29b6e8/58a2691d535ed035eecfe12ae0d806569426cfd5.roa
Signing time:             Wed 01 Sep 2021 14:23:51 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     27884
IP address blocks:        45.4.136.0/24 maxlen: 24
                          45.4.137.0/24 maxlen: 24
                          45.4.138.0/24 maxlen: 24
                          45.4.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111153 (0x1b231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12bc9e6e09217d8bc18197cebcdee3d12ee4fd06
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=58a2691d535ed035eecfe12ae0d806569426cfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:8b:ee:19:67:26:00:e2:e7:b6:88:42:01:
                    83:eb:12:26:1c:c7:b2:29:4f:a1:38:49:6d:8c:7d:
                    8f:8a:cd:a9:33:66:57:3e:a5:64:a3:78:bc:94:ed:
                    75:5d:46:8d:82:5b:27:23:fa:01:19:eb:0e:63:1c:
                    94:bd:ee:8f:99:ea:60:47:10:66:0c:ec:23:91:51:
                    37:c1:ad:12:45:cc:3e:16:38:83:68:06:5a:d9:0c:
                    17:b5:90:a9:bc:83:fa:b7:1c:d1:5b:e6:cd:65:c6:
                    b0:67:72:c5:d2:0b:28:14:ff:d2:d2:fc:1d:35:bc:
                    9a:91:2d:a7:73:e6:db:ce:d8:3e:71:8a:0f:17:5c:
                    dc:1e:a8:98:bf:db:75:67:11:bd:b8:72:e6:70:0a:
                    0a:00:a5:39:43:8c:25:5e:16:13:69:11:1f:0f:e0:
                    8f:3f:c3:28:b2:eb:14:4a:8c:18:3f:f6:10:25:91:
                    e3:49:cc:89:dc:ba:65:a6:06:c3:e1:59:3b:99:1e:
                    2e:65:f4:6c:dc:c1:17:d7:7e:9e:a9:67:f0:6f:65:
                    ca:b8:c1:ce:09:92:9c:c7:83:4f:27:7f:9c:85:e3:
                    08:fe:31:96:f2:5e:d3:06:e4:b3:02:d5:2a:e3:03:
                    0c:fd:f6:5b:65:e0:42:00:e1:94:8f:d2:c3:75:58:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:04:7A:DD:FD:55:05:73:9A:9F:E4:0E:43:B4:CE:EB:55:4C:2C
            X509v3 Authority Key Identifier:
                keyid:B7:34:0D:A1:25:D1:E0:3C:19:D7:B1:A7:EF:8C:8F:B2:51:5E:2B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12bc9e6e09217d8bc18197cebcdee3d12ee4fd06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e34f453b-415a-49b3-9320-08932e29b6e8/58a2691d535ed035eecfe12ae0d806569426cfd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e34f453b-415a-49b3-9320-08932e29b6e8/12bc9e6e09217d8bc18197cebcdee3d12ee4fd06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:b0:df:3e:26:e1:25:9b:cb:cd:65:8e:ea:fa:5e:60:90:5c:
         a5:e8:ce:91:a7:81:9b:80:4e:db:69:da:ce:90:30:2a:d3:f2:
         e4:13:d7:12:60:23:0c:e7:4e:3d:11:bf:de:7a:39:b2:8a:f5:
         ad:25:08:8f:56:42:7b:e2:75:8a:11:5b:fd:f2:ae:c4:18:8d:
         e4:a4:15:3b:4c:2e:75:e9:42:06:73:3c:95:2c:57:43:89:3f:
         27:02:e5:c8:fe:66:66:06:b5:97:04:2b:ba:ed:10:bb:e5:5a:
         dd:bc:2f:18:2a:84:4d:12:ff:54:a1:d7:6d:dc:e5:34:a0:69:
         c7:29:cc:61:e6:52:be:dc:44:f4:c5:5d:75:b2:87:7f:b2:d9:
         27:c4:9b:98:5a:a9:27:12:ff:c5:5b:70:09:a2:79:36:b2:97:
         23:f1:4c:18:99:cd:20:37:ae:b2:3b:cd:62:a6:d2:7d:6a:81:
         9d:29:f9:b5:dd:39:4a:08:a5:da:e7:d8:b6:a2:c9:c0:fc:54:
         1f:e1:ac:9b:31:a4:e1:e3:24:c4:94:5b:d6:5e:f5:dc:6d:45:
         9d:1a:3a:4b:83:4f:af:89:3a:26:da:77:99:43:fe:24:6d:4e:
         70:0f:e2:e2:85:93:5c:04:8c:ab:af:bd:e7:56:d1:1a:b5:49:
         ed:75:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org