Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/31fbe14794496580d438841042699a8bd792bbb7.roa
File:                     31fbe14794496580d438841042699a8bd792bbb7.roa (raw, json)
Hash identifier:          RnJSkAmFMCCIppGb+BPsJmSyZK9R84r14gubKcNRhNw=
Subject key identifier:   7B:49:61:B1:D2:29:C5:14:4F:F5:EF:FE:9A:BF:01:29:C6:AC:B5:44
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       237AA0
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/31fbe14794496580d438841042699a8bd792bbb7.roa
Signing time:             Thu 06 Jul 2023 04:48:07 +0000
ROA not before:           Wed 05 Jul 2023 04:48:05 +0000
ROA not after:            Sun 06 Jul 2025 04:48:05 +0000
asID:                     264668
IP address blocks:        45.225.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325152 (0x237aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Jul  5 04:48:05 2023 GMT
            Not After : Jul  6 04:48:05 2025 GMT
        Subject: CN=31fbe14794496580d438841042699a8bd792bbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:7d:01:c2:40:f6:af:3d:4a:70:d1:f3:09:
                    bb:a9:df:f7:55:5e:59:ac:89:91:ba:08:be:a2:e7:
                    10:7f:f3:53:dd:f4:90:2f:e9:02:ad:29:0a:40:0e:
                    2e:69:5a:11:8f:25:a7:d8:98:18:88:be:27:f3:19:
                    a3:fb:ca:d7:9f:a0:07:3d:4d:24:78:3d:a0:a2:ce:
                    b2:e9:e3:7e:b4:29:68:84:5e:be:bf:16:97:97:16:
                    6f:92:1d:ad:1a:14:25:61:74:bf:8f:69:d5:19:a7:
                    2d:28:0e:18:04:43:8b:7d:0e:89:2b:a1:3c:ec:25:
                    de:81:c2:48:3b:d2:36:a3:f8:ab:3f:10:b1:4d:f2:
                    ef:61:4a:c8:1f:f3:31:d4:47:f1:ac:7f:bd:5a:25:
                    29:01:80:0a:12:f7:53:6a:f1:3e:01:e5:c6:8d:2a:
                    30:8a:89:9c:ce:68:c3:6c:80:10:08:73:3e:5c:7c:
                    38:18:23:77:52:8c:33:30:10:88:96:68:69:2f:f4:
                    2b:c3:58:ac:0d:17:ae:2b:aa:ba:31:1e:d2:e7:49:
                    ff:b2:ce:6c:48:cf:0e:23:88:49:cb:5a:f1:70:d0:
                    00:eb:61:10:3a:4a:41:65:4c:e2:6c:1e:a3:e0:64:
                    a2:99:99:35:4f:8a:96:8e:4a:5d:13:b1:0a:8e:ce:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:49:61:B1:D2:29:C5:14:4F:F5:EF:FE:9A:BF:01:29:C6:AC:B5:44
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/31fbe14794496580d438841042699a8bd792bbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:6c:c5:67:70:36:ef:63:5b:61:e7:cc:7f:0a:8a:37:e9:
         c5:cf:bc:21:27:b5:8f:3c:25:46:98:29:d8:1f:81:b3:58:ac:
         60:40:b6:a4:fe:b9:81:5e:39:9d:bc:47:7f:16:cb:71:10:f3:
         c3:67:13:74:64:2d:00:3c:6c:a1:fe:13:97:9b:72:d9:66:81:
         31:eb:49:6a:76:57:32:d8:f1:f3:d4:92:30:f5:e2:59:90:54:
         40:cc:b2:db:b4:14:8c:a4:51:28:a5:c4:93:5f:36:50:6d:76:
         ac:9b:c8:aa:c2:49:a3:af:b0:b8:4a:b5:29:e6:4a:bf:87:59:
         13:75:57:11:64:4e:ac:33:9c:6b:ee:aa:8e:fc:4a:2a:ef:8a:
         cb:1c:c1:7e:1c:14:31:74:87:18:3a:35:3c:a3:ec:61:d5:b8:
         31:38:14:01:85:7a:fc:63:84:df:ab:7b:62:6d:ba:a2:ee:fa:
         7c:02:d1:02:2a:28:d5:2e:b7:7d:52:60:40:d7:ac:09:9c:bf:
         53:1c:a3:bf:07:7e:3a:08:84:7c:43:fb:0e:81:7f:be:bf:7b:
         e7:3d:81:c2:a7:be:a0:fa:63:82:36:b3:10:fa:f9:a8:a9:0a:
         af:ff:26:9a:76:29:d2:3b:ac:3b:b6:78:82:b3:96:18:33:06:
         0e:cc:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org