Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/e88fba627c54b86cd7cec693d1840f720195b12c.roa
File:                     e88fba627c54b86cd7cec693d1840f720195b12c.roa (raw, json)
Hash identifier:          sXdXWDHa9pxDy9zn0B/PanZHlaIOpjZU+Y8X2DJVEk8=
Subject key identifier:   2E:21:0C:69:B5:45:C8:5A:86:AF:B5:22:B7:67:C8:32:A5:5C:64:1C
Certificate issuer:       /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial:       271CE0
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/e88fba627c54b86cd7cec693d1840f720195b12c.roa
Signing time:             Wed 24 Jan 2024 07:30:00 +0000
ROA not before:           Wed 24 Jan 2024 07:30:00 +0000
ROA not after:            Fri 23 Jan 2026 07:30:00 +0000
asID:                     266698
IP address blocks:        45.229.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563296 (0x271ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
        Validity
            Not Before: Jan 24 07:30:00 2024 GMT
            Not After : Jan 23 07:30:00 2026 GMT
        Subject: CN=e88fba627c54b86cd7cec693d1840f720195b12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:d2:24:87:5e:63:e3:b4:35:57:12:24:35:
                    e5:13:39:9f:cf:b3:d8:21:cc:d5:8c:e9:4f:ec:23:
                    96:6f:9e:9b:07:86:83:5d:3a:26:52:cb:84:08:3f:
                    61:07:70:36:08:8c:47:a7:be:e3:60:ef:9e:64:fa:
                    03:18:23:5b:37:98:c3:bd:2a:95:5e:e0:90:08:e6:
                    89:00:7c:95:e8:47:10:6e:f5:a3:69:0d:be:bf:bd:
                    ba:fc:62:6e:c1:a2:3a:20:a9:60:32:c5:92:2b:27:
                    79:36:46:28:52:16:f2:a5:26:08:b2:1b:32:9b:d0:
                    20:0e:db:2c:59:97:96:a3:ac:c3:51:b2:32:ed:db:
                    f4:d7:d1:7b:f3:ab:86:4c:bd:35:10:a9:eb:7c:63:
                    01:5a:c9:fc:e3:23:ee:ee:a8:a5:06:5b:b0:e6:d7:
                    81:14:b7:90:da:be:e0:78:bd:eb:78:42:3b:ac:5b:
                    c6:10:3b:5c:9d:b1:51:6d:d6:d9:b7:d5:f2:c0:27:
                    b8:2b:3e:7d:d6:75:14:21:ea:13:3b:a5:0f:a1:b4:
                    9c:fc:32:9f:95:e2:84:a0:38:aa:03:3e:7d:48:7e:
                    11:98:60:17:42:19:e4:9b:61:26:d6:c8:3f:c3:f7:
                    52:70:90:28:ed:e9:fd:b9:87:b2:ea:64:78:2e:05:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:21:0C:69:B5:45:C8:5A:86:AF:B5:22:B7:67:C8:32:A5:5C:64:1C
            X509v3 Authority Key Identifier:
                keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/e88fba627c54b86cd7cec693d1840f720195b12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ec:03:a6:25:7b:79:15:4e:d8:0f:45:d0:65:2f:2c:f8:b9:
         9b:8f:99:7a:ba:f7:33:b5:22:74:dd:1c:77:cc:8b:f8:74:64:
         41:d8:4a:f4:bb:8f:bc:e9:81:f9:0d:dd:4d:08:e4:80:ae:d1:
         52:14:ce:70:cb:42:c1:3f:76:8a:46:e8:bb:90:02:17:93:4a:
         f7:f2:dd:6b:e0:6f:3b:7d:00:c1:0a:a7:e4:4a:db:ef:1c:44:
         64:bf:9c:2e:ac:b8:12:d9:68:27:8c:90:26:5a:61:dc:1a:35:
         42:de:95:d1:07:e5:0c:2f:c9:ad:8e:10:18:6e:a0:d0:68:3e:
         de:af:91:00:1c:6d:6d:54:83:c8:52:c6:84:e0:e8:12:df:67:
         00:cf:7f:d1:d9:67:b0:59:27:7a:23:9d:18:c7:27:84:39:f0:
         ab:7a:d1:1f:95:c1:57:60:05:97:79:92:59:43:38:40:9d:b3:
         b6:47:41:47:f5:90:f9:c3:4f:8a:85:1d:dc:2d:c2:93:14:e9:
         41:e1:2b:96:1d:e1:e7:9a:d1:20:b7:6f:bf:1a:d7:b3:f8:32:
         e0:46:e0:b0:a6:07:ce:7f:c9:12:e1:2b:a8:35:ba:9d:bc:26:
         1a:d1:6c:35:92:0c:3f:14:16:91:46:34:a2:44:fd:45:b1:e0:
         9e:0c:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org