Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/36797813ee5f06aa66ca01bfcaa260275e72b912.roa
File:                     36797813ee5f06aa66ca01bfcaa260275e72b912.roa (raw, json)
Hash identifier:          4MRXFNUHo3T870l6SA9yAvBxVPEaS8/4Q3UgKfHsuHY=
Subject key identifier:   7D:79:DA:D5:BF:F2:6E:15:1B:4F:9D:69:DE:FE:FC:1C:3F:59:B5:AC
Certificate issuer:       /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial:       227B4E
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/36797813ee5f06aa66ca01bfcaa260275e72b912.roa
Signing time:             Wed 05 Jul 2023 01:47:34 +0000
ROA not before:           Tue 04 Jul 2023 01:47:34 +0000
ROA not after:            Sat 05 Jul 2025 01:47:34 +0000
asID:                     52468
IP address blocks:        45.70.202.0/24 maxlen: 24
                          45.70.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259790 (0x227b4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
        Validity
            Not Before: Jul  4 01:47:34 2023 GMT
            Not After : Jul  5 01:47:34 2025 GMT
        Subject: CN=36797813ee5f06aa66ca01bfcaa260275e72b912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:bf:63:68:60:06:de:b0:fd:03:fa:e2:f9:
                    c0:c7:17:6a:6f:ab:5b:68:75:67:df:70:9d:a5:9d:
                    cf:87:45:fe:89:51:45:83:c2:0d:aa:67:a0:55:7a:
                    58:50:06:1f:da:ff:a0:53:83:f1:0d:eb:1f:a9:73:
                    05:32:7e:02:f2:f3:df:78:19:10:da:c9:0d:e4:c5:
                    96:d8:ab:2d:3e:10:90:6e:5d:84:21:ad:60:6c:7d:
                    c6:76:e6:e0:46:35:c6:34:47:36:3c:66:97:68:0e:
                    5c:85:47:8d:b6:87:00:64:f1:c4:05:e5:b6:bd:e3:
                    b1:67:ad:f7:5f:a9:ed:c4:9f:9a:56:c1:a7:56:46:
                    f6:14:e0:a2:aa:e1:7e:6d:ab:66:df:2e:7a:6f:fe:
                    4f:da:11:47:66:1d:61:1b:6a:f0:83:76:36:2b:b3:
                    05:df:23:71:2f:8e:7a:95:f9:2a:71:12:66:c9:10:
                    af:50:39:68:6b:b7:62:f2:d1:9b:7e:64:b7:4d:78:
                    37:0d:83:95:cd:cd:e4:c8:51:e3:67:22:ee:ce:bc:
                    2d:3c:fc:e2:e6:4b:0c:41:29:cf:9b:1e:4a:e4:67:
                    88:f7:50:4c:49:1a:34:d8:17:4f:12:e2:68:c7:fd:
                    ea:71:5b:28:f6:43:2b:59:9c:79:51:ac:9b:03:8f:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:DA:D5:BF:F2:6E:15:1B:4F:9D:69:DE:FE:FC:1C:3F:59:B5:AC
            X509v3 Authority Key Identifier:
                keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/36797813ee5f06aa66ca01bfcaa260275e72b912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:c2:08:1e:8c:df:27:02:95:48:1c:a6:d7:c2:da:34:74:
         df:ab:cb:f6:b3:97:7c:17:e4:89:ca:45:5e:5c:9e:7a:71:8b:
         9f:cf:6d:69:0b:c7:ab:74:4a:69:75:a9:34:80:04:d1:1d:56:
         7a:2e:91:d6:2c:d3:39:a0:06:44:ca:35:62:38:12:a1:43:b8:
         d2:3e:e4:33:91:78:3f:40:a0:40:30:a9:d9:94:7e:80:f9:44:
         1b:52:7b:df:a8:7e:2e:4e:52:b9:bb:86:5b:34:2f:00:af:64:
         15:70:7d:43:40:e5:ff:23:f9:b0:b6:72:e4:e2:f4:d6:86:5e:
         7c:78:1e:a3:8b:a3:47:01:18:42:41:fa:c4:5a:f6:22:f5:d7:
         ca:88:b7:51:04:e3:f2:e2:d7:2e:8b:e9:c1:29:c1:43:e8:70:
         b1:b7:cc:73:19:a6:da:ac:c6:99:f2:8d:85:b7:10:60:35:2c:
         6a:15:b3:b0:7c:6f:b4:0d:f9:7e:8f:54:6c:28:dd:92:fb:5c:
         8c:8a:a1:20:db:40:39:74:37:9b:bc:23:3a:9a:39:d3:cb:cd:
         25:23:ce:9b:cc:5a:70:d6:a7:f8:13:66:5f:8e:7f:2f:90:d6:
         d6:7d:28:24:fe:14:08:4b:65:54:b4:b4:fc:3a:84:c3:6a:20:
         ca:55:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org