Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/e1e2f3b2fc0c217a9c62bb9e48870692fdd01433.roa
File:                     e1e2f3b2fc0c217a9c62bb9e48870692fdd01433.roa (raw, json)
Hash identifier:          8mEhAsU44rk6L898aZn39x/ZJdlMa1CT8N5qC43E5tg=
Subject key identifier:   DA:C3:0C:8A:DD:5B:42:97:EA:A1:BA:80:31:24:0C:45:38:03:DB:9F
Certificate issuer:       /CN=406965e9bc1d932024cd1f27cbf7489c0b714ac7
Certificate serial:       0544
Authority key identifier: 09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/e1e2f3b2fc0c217a9c62bb9e48870692fdd01433.roa
Signing time:             Mon 11 Jul 2022 13:35:16 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     61512
IP address blocks:        45.170.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406965e9bc1d932024cd1f27cbf7489c0b714ac7
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=e1e2f3b2fc0c217a9c62bb9e48870692fdd01433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:b0:76:26:94:ff:d8:39:42:3a:2f:bb:73:
                    09:70:1e:a0:b8:27:e4:7c:97:62:69:b7:b5:11:97:
                    2d:3a:47:47:f2:b7:89:d6:3f:8d:a3:a9:3e:a6:e9:
                    4d:e0:5a:b5:bc:8c:cb:37:c5:95:66:9c:bb:de:8f:
                    c5:92:95:0a:38:45:cf:05:f0:94:6c:8a:0d:e1:4e:
                    61:04:37:66:2c:eb:d1:f4:57:6e:92:f0:d4:e1:00:
                    cf:31:1b:79:c4:f5:58:1c:94:e1:57:07:da:2b:ce:
                    89:8d:6b:21:59:28:71:6c:5b:ac:a3:8b:d3:b2:98:
                    76:14:cc:f9:f2:01:54:81:98:37:48:77:1a:e6:23:
                    97:a6:fc:1e:f3:8e:36:ab:4b:bd:2a:73:cc:d6:6b:
                    dd:e9:71:f3:6f:3e:10:d9:08:e4:d5:d7:87:80:2e:
                    6c:28:94:f6:2c:b4:b3:84:c1:b4:99:87:9b:67:eb:
                    a7:12:50:df:80:5b:c5:06:80:53:36:1b:2e:7e:9f:
                    26:f6:24:b1:b5:b9:a4:1d:2a:06:f8:4d:e7:6d:92:
                    06:a5:10:55:bb:3b:7f:6a:0b:c4:b8:1d:e6:31:16:
                    05:2c:82:fe:92:b5:ff:c4:cb:50:7f:61:ad:ff:3a:
                    cd:9e:cf:a3:94:c9:59:1d:54:9b:ad:1f:26:af:ae:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:0C:8A:DD:5B:42:97:EA:A1:BA:80:31:24:0C:45:38:03:DB:9F
            X509v3 Authority Key Identifier:
                keyid:09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/e1e2f3b2fc0c217a9c62bb9e48870692fdd01433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/406965e9bc1d932024cd1f27cbf7489c0b714ac7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:67:5c:d5:b4:61:ff:97:80:81:93:e9:58:4e:a5:3b:02:
         f0:8b:d7:c6:86:6d:78:93:8c:20:b0:e5:9d:4e:8c:b4:7e:6d:
         03:cf:e5:9d:8e:a2:05:7a:c8:b8:4f:6e:33:4e:0e:c2:77:69:
         55:61:ae:16:a7:74:b0:ed:e5:cd:2e:05:b7:c8:c4:ae:e1:2f:
         3c:04:fb:78:99:58:23:09:af:86:7b:63:d3:6f:f1:9e:98:66:
         26:11:37:a8:d3:49:1e:77:51:fc:9a:6e:30:f7:91:09:ca:0e:
         c5:f4:11:15:ff:08:b0:49:f3:22:ae:83:cf:9a:90:96:04:ba:
         4a:1b:45:38:88:11:51:8e:f6:ef:42:63:60:49:c6:5c:81:d9:
         8d:cb:55:27:9b:d9:d4:1c:25:15:4b:a1:74:10:ef:d2:8b:03:
         e0:32:05:8d:85:11:df:e3:a6:53:44:dc:9b:10:f4:35:98:92:
         2a:bf:3b:6a:a4:b7:d2:d7:77:c0:cc:df:aa:5c:ec:c3:10:a4:
         7a:9c:ff:dd:04:85:18:17:48:22:59:65:1d:bf:ac:6c:d0:1c:
         80:02:01:75:4f:13:af:47:73:b2:4d:27:04:33:73:a1:ca:87:
         8f:d6:40:d8:66:44:03:d6:6d:29:94:56:8f:74:ec:d1:52:60:
         43:fb:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org