Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa
File:                     0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa (raw, json)
Hash identifier:          EUW08NOXmkRdKxYZIR/BWSNLdUHzG/TZmp9sGi82hfY=
Subject key identifier:   A2:26:69:91:91:7C:9E:52:25:DA:8E:68:D0:4D:A8:FC:82:DA:1F:2A
Certificate issuer:       /CN=9d25be9947afcb39fce110f05b5d8afd69a92382
Certificate serial:       1580F4
Authority key identifier: A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa
Signing time:             Fri 11 Feb 2022 15:36:29 +0000
ROA not before:           Fri 11 Feb 2022 03:00:00 +0000
ROA not after:            Sun 11 Feb 2024 03:00:00 +0000
asID:                     265838
IP address blocks:        45.224.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409268 (0x1580f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d25be9947afcb39fce110f05b5d8afd69a92382
        Validity
            Not Before: Feb 11 03:00:00 2022 GMT
            Not After : Feb 11 03:00:00 2024 GMT
        Subject: CN=0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:7d:b9:ca:72:bc:0d:6e:47:60:ff:c1:ae:
                    e5:f1:32:76:3c:61:9f:5b:15:4c:2a:dd:c8:f0:51:
                    b2:f2:7c:3c:1d:b7:40:54:52:40:ce:e9:50:ef:1b:
                    bc:43:3a:9e:75:e4:63:5c:4a:0f:d6:00:fa:60:17:
                    ee:ff:21:19:41:24:de:28:3b:bf:bb:75:54:7a:00:
                    cc:88:35:19:c7:1d:58:51:aa:af:a4:76:16:51:0e:
                    e0:17:d7:c8:e8:f9:41:5d:ac:70:c0:d6:66:66:8f:
                    7a:56:5e:e6:9a:d8:cc:2b:cf:99:f8:0b:0b:7f:0b:
                    e4:f4:d9:93:5a:fa:a4:63:85:2f:0e:47:d6:79:e4:
                    c9:5a:99:cf:33:bd:90:90:99:f5:0e:07:2a:37:a0:
                    61:76:62:22:fe:3f:d3:bc:f3:fe:f5:95:79:88:9c:
                    11:39:82:67:6b:fe:f2:79:70:39:8e:61:b9:ff:71:
                    f7:6b:51:aa:b4:1d:9b:4a:b8:b5:6f:26:71:1d:e3:
                    24:29:10:74:04:6d:0b:f4:3a:01:89:08:2c:a4:aa:
                    4c:11:e0:87:0f:92:03:25:41:e4:c2:bb:5e:37:54:
                    dd:c6:c6:d1:c8:f9:ef:3b:f9:6e:1b:ed:b6:b6:65:
                    3e:2c:59:06:25:32:42:f5:22:f0:cb:7f:2e:91:99:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:69:91:91:7C:9E:52:25:DA:8E:68:D0:4D:A8:FC:82:DA:1F:2A
            X509v3 Authority Key Identifier:
                keyid:A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/0ff49cbe7062c2d6f90b6daded60ca3c9a0ec041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:d0:9e:e2:63:bd:a9:e3:51:0d:36:e8:71:2a:3e:f2:c4:
         59:f2:f3:fd:59:69:a8:97:6f:49:b7:14:d8:5c:56:09:28:08:
         f2:84:fe:af:51:82:d6:44:fd:b7:59:9c:90:f5:01:60:8f:d3:
         9f:72:6a:8d:4b:af:0b:23:72:43:5c:a0:3a:bd:ed:cf:91:be:
         11:bb:2f:5b:e8:f0:f6:a7:83:11:4f:42:4d:59:99:84:c1:f1:
         c9:31:b2:7b:6b:95:56:cc:b9:05:d6:8a:0b:82:25:87:32:a3:
         72:c5:53:9f:13:61:40:da:81:17:e8:cf:8f:c5:1c:ad:c6:7b:
         4d:f8:f1:80:20:2b:e6:30:bc:88:c9:51:e3:82:62:ea:6b:34:
         09:94:44:0a:2f:b7:e3:d8:33:59:12:b7:9b:3b:ea:4d:2b:1c:
         4e:b7:05:18:a5:af:8a:01:d6:1c:d6:b4:5b:ac:c2:68:94:d5:
         36:05:aa:44:38:2f:a2:8e:f7:26:3d:7c:7d:60:a4:59:cf:c0:
         b2:e6:09:81:82:2e:fa:78:80:8f:a9:35:40:e4:68:be:3f:6f:
         28:06:4c:82:54:71:a1:12:69:8a:2d:83:77:c7:bc:45:ab:c6:
         80:e4:36:7c:2b:b4:1b:98:c1:7e:73:71:98:df:b2:7c:c6:01:
         a9:bb:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org