Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/77c8ec2a970ab9a57e065a10f48b84be1814a860.roa
File:                     77c8ec2a970ab9a57e065a10f48b84be1814a860.roa (raw, json)
Hash identifier:          LA4C6HcN/E4k/7yPdSajxC75iA01n3UuKYKNdIknLNA=
Subject key identifier:   31:F9:07:55:42:65:D1:5E:68:01:19:45:F9:98:2E:B7:72:3C:4D:C1
Certificate issuer:       /CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
Certificate serial:       20B5E4
Authority key identifier: 50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/77c8ec2a970ab9a57e065a10f48b84be1814a860.roa
Signing time:             Fri 07 Jul 2023 20:30:21 +0000
ROA not before:           Thu 06 Jul 2023 20:30:21 +0000
ROA not after:            Mon 07 Jul 2025 20:30:21 +0000
asID:                     267685
IP address blocks:        160.20.225.0/24 maxlen: 26
                          45.163.18.0/23 maxlen: 25
                          2803:3ea0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143716 (0x20b5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
        Validity
            Not Before: Jul  6 20:30:21 2023 GMT
            Not After : Jul  7 20:30:21 2025 GMT
        Subject: CN=77c8ec2a970ab9a57e065a10f48b84be1814a860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:37:f4:e6:73:69:93:43:c6:68:2e:f8:63:
                    ca:bd:d5:ff:89:37:97:0c:41:24:14:36:49:1e:9f:
                    1e:6e:c0:9e:27:17:c9:3e:3c:ac:5f:f9:2a:12:84:
                    12:3b:68:9a:dc:0e:de:5c:1b:4e:34:d1:e6:a4:63:
                    e7:25:7a:5e:76:94:c9:a2:d6:3e:f5:69:6a:39:e7:
                    f6:24:ae:e8:3d:26:d5:ff:8f:e8:70:ff:df:11:5d:
                    53:23:d7:03:ea:4a:64:85:29:4a:54:96:8a:28:0f:
                    82:2d:67:15:7c:78:3d:22:64:61:f3:cd:52:5c:b6:
                    f3:05:c8:6a:ad:48:05:fa:2d:d1:ab:36:19:20:99:
                    67:2b:2d:83:89:e4:4d:a8:93:31:16:41:1f:db:4a:
                    63:88:e1:90:51:9b:63:53:85:52:39:d4:36:4c:48:
                    a5:70:5a:9b:b4:7b:96:71:24:bb:55:04:02:1a:6d:
                    3d:ed:fe:b2:66:50:37:32:48:e3:61:3e:2e:2b:c5:
                    d7:c2:b0:83:84:93:46:96:ff:f3:68:b9:c2:9d:e9:
                    9a:20:0a:1f:fb:e2:b6:20:dd:a3:35:fd:fe:3a:5e:
                    64:03:47:8b:49:f4:86:f0:02:80:cc:89:0c:dc:bd:
                    1f:a4:97:a8:f0:5d:03:5c:e5:48:0c:15:2c:09:80:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F9:07:55:42:65:D1:5E:68:01:19:45:F9:98:2E:B7:72:3C:4D:C1
            X509v3 Authority Key Identifier:
                keyid:50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/77c8ec2a970ab9a57e065a10f48b84be1814a860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.18.0/23
                  160.20.225.0/24
                IPv6:
                  2803:3ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:60:84:33:07:72:0c:6c:81:cd:4e:70:9a:bb:4b:2d:e8:
         9d:10:c9:2c:46:17:e7:a5:58:08:40:26:4f:2f:95:e9:11:13:
         f1:e2:cd:d1:0e:77:90:65:fb:23:df:b0:ae:7e:28:f0:83:d9:
         24:b8:38:43:92:3f:76:23:07:e2:52:59:03:0d:41:95:c9:f2:
         7a:ea:d5:18:21:4b:1f:51:2c:99:e3:25:04:ce:b8:67:70:88:
         d3:73:d2:28:6e:9d:fd:05:dc:4e:ff:71:51:a5:a7:15:d1:37:
         d4:cd:65:bc:8f:95:98:8c:31:0e:71:24:38:4a:c5:90:94:59:
         08:0e:98:56:1c:54:ec:6d:5c:c4:a4:9d:4b:79:90:d0:98:49:
         5d:c2:76:ca:e2:f8:22:89:8d:25:a2:ab:b8:19:36:96:d3:50:
         08:79:98:66:b8:e0:7f:55:8b:3b:be:94:34:98:7b:0b:e0:b2:
         37:e8:40:e4:79:44:49:14:dc:23:21:13:26:8c:ad:38:2a:a0:
         47:12:51:46:f6:1a:75:d0:83:6a:2f:40:24:04:fa:6c:3c:99:
         67:49:53:cc:28:10:a9:78:4c:da:fd:bb:69:57:92:b4:f8:e6:
         9b:dc:72:c2:1f:72:43:7e:dc:ab:8f:eb:2b:6b:6e:4f:b8:2e:
         ec:d8:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:19:19 2025 by rpki-client