Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/cf1904e6778357a0136939235900506c05ffea80.roa
File:                     cf1904e6778357a0136939235900506c05ffea80.roa (raw, json)
Hash identifier:          fHzT/EeViDXzeNpnOG9nUxAfIgP1n7M88vNOghZBHLA=
Subject key identifier:   93:4B:9F:CA:FA:6A:DE:5F:83:47:07:06:CB:04:54:5A:25:CF:DA:40
Certificate issuer:       /CN=4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003
Certificate serial:       256FE0
Authority key identifier: 2A:03:50:BA:30:19:DB:A9:B8:18:CE:20:1B:F4:BB:51:A1:8D:99:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/cf1904e6778357a0136939235900506c05ffea80.roa
Signing time:             Thu 21 Mar 2024 19:09:57 +0000
ROA not before:           Thu 21 Mar 2024 19:09:56 +0000
ROA not after:            Sat 21 Mar 2026 19:09:56 +0000
asID:                     265684
IP address blocks:        45.5.116.0/24 maxlen: 24
                          45.5.117.0/24 maxlen: 24
                          45.5.118.0/24 maxlen: 24
                          45.5.119.0/24 maxlen: 24
                          45.186.104.0/24 maxlen: 24
                          45.186.105.0/24 maxlen: 24
                          45.186.106.0/24 maxlen: 24
                          45.186.107.0/24 maxlen: 24
                          45.228.233.0/24 maxlen: 24
                          45.228.234.0/24 maxlen: 24
                          45.228.235.0/24 maxlen: 24
                          2803:e1c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453472 (0x256fe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003
        Validity
            Not Before: Mar 21 19:09:56 2024 GMT
            Not After : Mar 21 19:09:56 2026 GMT
        Subject: CN=cf1904e6778357a0136939235900506c05ffea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:45:43:c1:da:fc:4c:8c:32:4c:5c:8f:db:
                    de:a6:5a:1e:ae:64:60:66:70:e8:99:3d:5a:95:08:
                    3c:81:37:d8:b9:09:7f:9e:90:ff:b3:9f:86:9f:89:
                    a4:3a:c1:55:7d:ab:4a:1a:e1:b6:00:94:b7:ca:b9:
                    65:72:b7:85:ab:40:ad:04:52:d7:5d:7d:23:e9:91:
                    6b:fb:0b:05:37:86:7c:09:9e:55:26:8f:3b:94:06:
                    ab:61:ae:9d:80:0a:b3:eb:be:53:ed:df:f0:c6:b9:
                    c0:d6:d5:e6:0d:50:fb:d8:96:7d:40:45:54:8f:bf:
                    88:ba:30:e5:2a:a3:b7:56:e7:2c:80:ed:26:b5:84:
                    09:62:d4:26:90:7c:ad:8f:9b:96:6d:13:ff:63:9c:
                    56:02:91:9b:46:d3:33:05:23:e5:84:9b:ca:73:38:
                    a8:26:93:eb:29:db:2b:3f:b6:9e:1e:af:bf:d7:70:
                    4e:e6:cf:05:0c:cf:59:d9:16:d5:40:91:3f:0b:fc:
                    bd:40:a1:7d:6a:0c:db:db:b2:31:05:05:99:ff:d5:
                    c7:ab:32:d6:08:21:9d:2a:99:d3:2d:9b:1f:eb:83:
                    90:f4:62:bc:37:2e:f8:55:3e:c3:2c:bd:03:29:bc:
                    ae:20:1f:6e:bd:1b:35:8c:15:8c:10:41:1f:77:59:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4B:9F:CA:FA:6A:DE:5F:83:47:07:06:CB:04:54:5A:25:CF:DA:40
            X509v3 Authority Key Identifier:
                keyid:2A:03:50:BA:30:19:DB:A9:B8:18:CE:20:1B:F4:BB:51:A1:8D:99:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/cf1904e6778357a0136939235900506c05ffea80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.116.0/22
                  45.186.104.0/22
                  45.228.233.0-45.228.235.255
                IPv6:
                  2803:e1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:28:d8:68:d1:16:fe:0f:fd:5b:05:26:cc:e7:ac:d0:2b:
         ea:cc:ac:b0:bd:a3:e3:aa:93:7a:06:03:1d:ba:42:f0:91:00:
         48:77:ca:73:c7:6c:7f:bd:c1:68:10:f5:44:89:05:d9:0e:9e:
         23:e3:4a:58:8a:64:7f:8f:f4:30:8e:03:78:58:66:6f:61:68:
         5c:59:a5:ca:54:e2:ed:1b:80:bd:60:68:d4:62:e4:f2:9f:85:
         3d:b0:a1:a5:80:ac:d9:b1:1e:5d:2e:8b:0e:1c:d9:98:d7:b2:
         62:ac:6e:8a:c4:b8:9c:2c:01:17:d2:ab:bf:6d:84:5d:48:6d:
         73:7e:07:e6:0a:c6:17:76:62:95:09:ef:6f:4b:e3:dd:09:d7:
         c9:f6:b7:57:b0:e3:b8:8c:31:31:de:1d:13:96:8b:22:ce:8e:
         a3:88:9a:00:e8:0e:12:10:71:ba:c3:ce:62:d5:a9:b2:c8:c4:
         75:3e:57:be:86:c4:eb:b8:c5:82:f6:33:58:40:b3:49:9c:47:
         d2:20:81:d2:36:a0:b7:26:c5:7c:b3:51:fb:47:86:e0:83:ef:
         fd:8e:85:28:77:0f:94:33:12:ed:82:18:56:83:c3:5a:b9:04:
         71:25:89:f8:60:71:15:c3:ff:52:d7:3c:ef:8e:8c:69:ea:38:
         a9:78:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----