Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/e3efcceeee55cfe0f2087ad07a6d2ee20b41a2b4.roa
File:                     e3efcceeee55cfe0f2087ad07a6d2ee20b41a2b4.roa (raw, json)
Hash identifier:          FyP+G0sF6L0ftHhyPOKixHdH388RFf0mnMt5iewjrcI=
Subject key identifier:   CA:13:F1:FC:3C:AF:F2:90:79:C9:C0:BC:C2:05:6C:B4:F0:14:98:9F
Certificate issuer:       /CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
Certificate serial:       1261A7
Authority key identifier: F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/e3efcceeee55cfe0f2087ad07a6d2ee20b41a2b4.roa
Signing time:             Thu 25 May 2023 08:30:02 +0000
ROA not before:           Wed 24 May 2023 08:30:02 +0000
ROA not after:            Fri 23 May 2025 08:30:02 +0000
asID:                     53856
IP address blocks:        45.170.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204647 (0x1261a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Validity
            Not Before: May 24 08:30:02 2023 GMT
            Not After : May 23 08:30:02 2025 GMT
        Subject: CN=e3efcceeee55cfe0f2087ad07a6d2ee20b41a2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:a6:ed:40:3d:f4:39:1d:16:d7:c8:f4:f2:
                    78:32:c0:86:dc:72:a7:e1:70:fe:dd:1b:12:59:3a:
                    bf:77:f7:d3:be:32:c1:f2:4d:1c:b7:d2:87:6e:90:
                    00:93:f7:ed:69:22:bf:f2:25:4d:b3:11:23:24:d3:
                    ff:2e:ed:51:3a:10:6b:45:ac:17:5d:03:87:43:6b:
                    e0:8b:c9:9e:17:e6:dc:b3:4d:56:ec:b0:0f:15:a4:
                    26:1b:4e:fe:5a:86:c7:b0:98:17:79:b9:a2:84:f1:
                    06:e9:1f:87:7f:49:ae:d4:ce:be:25:08:7d:b3:3e:
                    e0:bb:80:4d:fb:b8:9b:ae:37:f9:5d:93:b7:88:1c:
                    c8:98:f0:5c:a2:cd:d6:ab:02:54:63:a4:18:e9:ca:
                    5d:22:2e:7c:44:52:18:99:0a:a9:fb:03:1f:b6:4b:
                    ad:aa:b7:b4:84:9b:0e:7a:e1:a1:93:90:8d:8d:00:
                    81:e6:c5:fa:b7:61:7c:c4:62:0d:8d:ef:d4:a8:17:
                    c7:40:a5:bd:80:d6:bd:4c:6d:6c:2f:36:d3:a9:b1:
                    fd:3d:60:a6:38:07:52:90:20:1e:0e:70:e0:72:74:
                    39:9e:53:10:b9:96:bf:d0:e6:a0:73:ec:0b:1f:cf:
                    66:0a:11:09:f7:86:f0:69:a0:14:7a:d8:db:0d:e3:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:13:F1:FC:3C:AF:F2:90:79:C9:C0:BC:C2:05:6C:B4:F0:14:98:9F
            X509v3 Authority Key Identifier:
                keyid:F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/e3efcceeee55cfe0f2087ad07a6d2ee20b41a2b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:de:44:40:69:47:ff:58:09:ec:55:38:98:94:17:a0:00:ac:
         5e:9b:d8:c5:6a:26:68:78:1c:6a:f7:29:49:8c:0d:14:1f:2e:
         fe:2a:8a:5c:ad:9f:d0:76:0e:69:0b:e3:53:4c:a7:b9:98:5f:
         ed:14:dd:b9:98:89:ba:70:0d:ef:f9:1c:ed:05:65:0e:89:3c:
         34:b9:3b:f4:ef:1b:b2:09:76:d0:dd:15:82:3b:bf:b6:29:a2:
         68:94:b2:f7:80:64:95:7e:6e:dd:dc:22:20:8c:0e:fc:7a:f0:
         4d:61:88:a8:b7:d6:84:e9:98:fb:d5:72:2c:eb:bd:bc:df:86:
         be:4d:b0:a7:f0:9c:32:f2:88:b9:2a:33:ff:cb:de:6f:9b:33:
         93:3f:91:8b:3e:f5:c2:3e:35:f7:7b:e5:ca:0e:65:70:59:5b:
         48:1b:7f:55:ed:9d:e4:53:e9:0d:bb:bd:90:ab:f7:8a:52:1a:
         41:f2:01:c7:6a:e6:26:be:29:95:34:a1:16:94:99:ab:fc:ef:
         93:c8:4f:35:e1:68:08:c4:05:1e:ea:3d:4b:9c:98:8f:91:80:
         d7:30:4a:03:65:7a:af:e2:41:15:b1:e3:1d:43:49:ee:10:4c:
         09:51:27:47:c7:9b:c9:42:0f:3f:e7:98:5b:e6:80:95:18:f6:
         ec:ac:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org