Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/fc231c000d2452749400438f28542ade213e6a31.roa
File:                     fc231c000d2452749400438f28542ade213e6a31.roa (raw, json)
Hash identifier:          iNRJjrg1d+1UIcIuFK25Q3zQOfjmnCmq5bBe36wd2pM=
Subject key identifier:   1C:66:5E:67:FE:52:77:45:5A:45:76:5F:48:6B:BE:87:76:24:01:4A
Certificate issuer:       /CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
Certificate serial:       0E1B1E
Authority key identifier: D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/fc231c000d2452749400438f28542ade213e6a31.roa
Signing time:             Wed 24 Mar 2021 14:31:41 +0000
ROA not before:           Wed 24 Mar 2021 14:31:41 +0000
ROA not after:            Tue 24 Mar 2026 14:31:41 +0000
asID:                     265824
IP address blocks:        45.70.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924446 (0xe1b1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Validity
            Not Before: Mar 24 14:31:41 2021 GMT
            Not After : Mar 24 14:31:41 2026 GMT
        Subject: CN=fc231c000d2452749400438f28542ade213e6a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:fa:bb:ac:0d:54:5c:64:02:48:ea:f8:7e:
                    6c:9a:ad:33:a4:b7:3f:56:c6:40:e6:9d:a1:5a:49:
                    3d:9b:38:10:60:b2:8f:f5:c0:29:9a:47:5d:a3:25:
                    06:80:b5:81:5c:63:4f:e9:14:d8:0c:3e:6c:22:c7:
                    64:78:c8:28:9c:34:29:bc:a5:86:00:52:0b:4d:22:
                    45:2e:ba:c7:2b:59:9b:73:07:d3:b3:ef:fb:44:0a:
                    88:23:9e:bc:27:41:77:ac:16:b2:b1:29:a1:8d:70:
                    fc:7e:f1:40:4c:34:c2:62:77:fb:96:91:d2:cb:0d:
                    7e:c7:a9:7b:b6:15:dd:0f:6e:39:4f:f0:e8:8e:27:
                    7f:09:60:aa:7e:6d:17:59:94:ad:8b:f0:b5:3c:b5:
                    c8:64:ce:a5:d5:c4:96:69:0d:c7:22:d5:d1:47:42:
                    5e:af:d7:00:e4:c3:69:9b:15:29:69:e8:c7:90:e0:
                    04:08:34:a1:62:a1:46:51:84:52:70:51:e6:3e:98:
                    ee:36:70:88:a4:c7:1f:67:9e:35:ee:cd:05:19:33:
                    9f:0f:01:dc:fb:68:15:20:0e:88:f2:77:84:cf:1f:
                    a7:c4:ca:0f:11:5a:5f:11:13:3e:f2:8e:bd:ef:1f:
                    9d:4c:d2:83:34:f7:7e:c7:4d:ef:4c:8e:e6:2d:85:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:66:5E:67:FE:52:77:45:5A:45:76:5F:48:6B:BE:87:76:24:01:4A
            X509v3 Authority Key Identifier:
                keyid:D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/fc231c000d2452749400438f28542ade213e6a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:1c:3d:f7:92:ac:c5:6c:4d:fd:df:7e:53:55:6c:34:49:
         29:dc:ef:81:4c:fa:68:46:78:a0:7d:4f:38:fa:52:27:4b:a2:
         d5:86:8b:5e:50:4a:c0:33:49:d7:1f:79:a3:d1:6b:ce:7f:e5:
         39:48:58:58:a9:af:0b:3d:fc:25:33:86:5f:09:0d:63:39:7a:
         92:4a:e3:c9:6a:d3:26:0f:81:ae:b7:bd:47:a9:7c:0d:3c:6e:
         c5:be:43:31:d1:64:a8:17:7a:3c:fd:ad:8b:ba:fb:ff:22:fd:
         a2:01:7f:d6:da:cc:fe:43:d7:85:23:e4:8a:fa:80:c9:e4:12:
         30:df:33:0a:c3:65:a6:3a:21:2b:bf:90:f7:de:6b:3c:27:0f:
         eb:d4:18:93:b5:0b:ba:33:41:e9:35:a5:ec:1e:41:fe:ba:49:
         fe:6b:36:83:7e:f5:da:d0:ad:8c:b0:aa:bd:68:a1:56:df:fc:
         e8:8e:16:e7:55:96:85:90:7d:43:33:c1:24:42:37:90:b9:58:
         d7:e7:ce:af:83:d3:04:08:35:72:50:18:5d:d8:61:3a:64:f5:
         c1:6e:9b:34:36:6f:fa:5b:83:9e:1c:4e:0c:2a:60:15:6c:fb:
         de:0c:5b:3f:e1:37:c9:06:8d:bf:28:bf:39:73:0a:ad:df:37:
         5a:27:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org