Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/3014cf08d223029b75f4351c24695c9e7b3ca575.roa
File:                     3014cf08d223029b75f4351c24695c9e7b3ca575.roa (raw, json)
Hash identifier:          ra+buijxLDPT4erFy0Hq3VzpbR+H/xwlF974SOARQrQ=
Subject key identifier:   7A:08:01:3F:DC:D5:BA:84:11:69:86:0C:02:85:D6:61:DE:FD:7D:18
Certificate issuer:       /CN=9d25be9947afcb39fce110f05b5d8afd69a92382
Certificate serial:       2382F9
Authority key identifier: A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/3014cf08d223029b75f4351c24695c9e7b3ca575.roa
Signing time:             Thu 07 Sep 2023 02:13:54 +0000
ROA not before:           Wed 06 Sep 2023 02:13:53 +0000
ROA not after:            Sun 07 Sep 2025 02:13:53 +0000
asID:                     265838
IP address blocks:        45.224.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327289 (0x2382f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d25be9947afcb39fce110f05b5d8afd69a92382
        Validity
            Not Before: Sep  6 02:13:53 2023 GMT
            Not After : Sep  7 02:13:53 2025 GMT
        Subject: CN=3014cf08d223029b75f4351c24695c9e7b3ca575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:a9:2c:d4:ba:4c:98:27:d5:ac:85:87:93:
                    ef:a5:96:26:7d:fe:a1:2e:d8:8b:27:2f:78:ec:32:
                    00:8d:6c:27:e2:81:a0:5f:11:d1:8d:8f:db:c5:69:
                    0a:f4:eb:c7:dd:50:8e:fa:11:d8:16:c0:2b:98:62:
                    db:2a:52:c3:4b:78:1d:3c:ba:be:d8:d6:32:7a:5e:
                    6a:8b:36:d1:e4:d1:38:fb:db:db:dd:26:86:53:19:
                    03:97:64:98:8e:0e:c8:0b:21:12:1f:50:8c:32:46:
                    3c:f6:5d:b7:e2:0b:1f:ae:c6:37:7b:d2:e6:49:0a:
                    fe:91:a2:41:d7:1b:ed:05:dc:e4:31:2e:56:59:ba:
                    a0:0e:d5:bd:26:2a:7d:db:d2:96:0b:06:bb:12:42:
                    d6:7f:7c:77:62:1b:de:1f:46:03:47:c3:88:a7:14:
                    ed:a8:45:dc:82:ac:50:58:c1:c7:2d:05:73:a6:71:
                    25:68:7d:35:cd:1e:c4:bc:e6:49:e8:01:7c:ae:5b:
                    27:94:be:b8:0b:4f:50:99:5d:85:af:b7:ba:4a:e1:
                    5a:94:ff:d2:ea:10:19:96:b4:f2:ae:5f:13:38:f4:
                    66:65:34:c0:a1:bd:68:67:bc:dc:25:1b:52:86:ca:
                    75:a7:84:11:9d:3e:09:d1:94:09:fd:73:c2:91:92:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:01:3F:DC:D5:BA:84:11:69:86:0C:02:85:D6:61:DE:FD:7D:18
            X509v3 Authority Key Identifier:
                keyid:A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/3014cf08d223029b75f4351c24695c9e7b3ca575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:3c:bb:29:74:4e:89:cb:91:8d:bb:05:72:31:d3:66:d6:
         64:0e:ee:49:68:1c:02:4e:d5:d1:79:c2:3e:60:40:e1:9a:2a:
         aa:35:81:5f:1f:91:8f:d4:d1:d3:3f:ab:f3:72:b5:a4:49:0d:
         ef:8f:27:c6:ac:b8:b1:a2:a6:97:85:d1:9d:67:48:0c:0f:5a:
         9b:3a:eb:cb:e4:f7:8e:b6:93:9a:86:ca:bd:90:1d:40:5c:1e:
         83:87:21:8c:5b:d3:91:96:55:12:d7:d4:91:1d:72:d4:28:ce:
         29:22:a8:a4:83:fd:1e:d0:d0:a6:29:4b:e7:2f:da:e7:56:c7:
         15:94:e9:40:a5:81:2f:e5:c0:11:a0:f2:7b:c1:c2:a4:f1:c8:
         9f:a7:e9:61:0f:73:12:e2:57:42:f9:6d:60:bf:6a:97:ae:60:
         f2:9a:dc:cd:6a:68:a8:11:f5:5f:bd:06:a0:bc:ef:07:61:00:
         31:ef:26:13:ac:c8:60:c6:2b:7a:08:1f:f0:2f:34:39:2a:7d:
         89:3b:04:23:4c:8d:b1:9a:0a:77:5a:3e:5d:af:55:7c:b5:b2:
         61:bd:93:94:8c:f6:63:02:c4:3d:6a:b1:cf:e4:26:12:21:3e:
         62:2d:f9:9e:ff:c1:09:d9:04:1a:d9:1f:90:1a:df:7b:96:db:
         b8:97:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org