Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/d0506a4b191ce499cc0674b2b8bbbb88c2fdac08.roa
File:                     d0506a4b191ce499cc0674b2b8bbbb88c2fdac08.roa (raw, json)
Hash identifier:          HIW5xtz7R6BjQuayEMw4zHelVQG2pDwuYdRtRBhuZ/8=
Subject key identifier:   6A:AC:39:DC:F0:FB:18:38:69:DC:91:B4:97:FA:05:A7:0F:B7:0D:59
Certificate issuer:       /CN=406965e9bc1d932024cd1f27cbf7489c0b714ac7
Certificate serial:       07472D
Authority key identifier: 09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/d0506a4b191ce499cc0674b2b8bbbb88c2fdac08.roa
Signing time:             Wed 03 May 2023 17:21:50 +0000
ROA not before:           Tue 02 May 2023 17:21:50 +0000
ROA not after:            Sat 03 May 2025 17:21:50 +0000
asID:                     61512
IP address blocks:        45.170.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476973 (0x7472d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406965e9bc1d932024cd1f27cbf7489c0b714ac7
        Validity
            Not Before: May  2 17:21:50 2023 GMT
            Not After : May  3 17:21:50 2025 GMT
        Subject: CN=d0506a4b191ce499cc0674b2b8bbbb88c2fdac08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:ad:07:2e:c3:7d:9a:e0:51:16:88:cb:b5:
                    4d:36:bc:97:64:a8:9d:69:80:fa:23:65:a1:a8:a0:
                    a5:bc:37:0f:65:c7:60:6b:d0:96:e8:ff:8f:a9:43:
                    93:2f:13:bb:14:c0:20:e7:99:98:37:29:be:f8:90:
                    b5:c8:65:e0:80:57:84:6f:5c:27:53:0b:38:c2:f2:
                    9d:ac:fa:5b:1b:20:d7:6d:a1:dd:2b:e8:54:ab:38:
                    eb:bd:fd:6e:95:b7:48:85:f6:b3:38:8e:82:05:98:
                    20:f6:f3:34:a2:d8:d0:0f:f8:f0:7f:f5:35:9b:80:
                    63:76:8f:07:dd:7d:25:87:1b:69:a6:a1:d5:86:d9:
                    55:ef:63:74:53:3d:7b:44:9c:03:f1:6a:64:c3:ef:
                    82:42:cf:5e:9e:4f:22:96:86:f8:27:4e:75:38:72:
                    e6:3e:04:21:17:a9:ce:a0:e3:19:f6:ca:77:86:25:
                    92:c7:3f:ed:69:80:6e:3a:45:f1:df:bf:45:dd:6f:
                    1c:81:94:69:88:7e:ab:a2:87:06:5d:9a:2c:65:96:
                    4c:66:64:2c:31:89:1e:9c:18:7a:b7:20:f8:b3:c1:
                    db:c0:60:df:3d:58:bb:3e:11:67:fe:fd:3b:1d:1d:
                    71:7e:02:f8:fb:16:30:f5:b5:0c:f4:c5:a7:b7:f8:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:39:DC:F0:FB:18:38:69:DC:91:B4:97:FA:05:A7:0F:B7:0D:59
            X509v3 Authority Key Identifier:
                keyid:09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/d0506a4b191ce499cc0674b2b8bbbb88c2fdac08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/406965e9bc1d932024cd1f27cbf7489c0b714ac7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:27:d5:95:5f:11:95:ea:4b:38:2d:62:07:85:b2:d7:3d:4d:
         ef:f0:d5:31:12:94:b2:ad:33:42:ae:7b:38:9e:18:dc:8b:ff:
         1c:32:80:13:c0:68:8c:70:47:9f:f8:49:e7:22:f2:f2:ff:90:
         4c:86:d4:56:f2:57:a3:2a:02:ae:3b:08:2b:f8:82:0e:44:23:
         3f:e3:90:6b:e9:bc:e9:b0:e4:0a:eb:9a:c8:b3:ec:1c:a0:59:
         23:7a:40:87:89:95:91:03:7f:1e:86:77:fa:0e:3a:30:d8:5a:
         0d:00:17:6f:2f:b1:15:93:20:c9:71:d1:6f:b9:f7:cf:96:66:
         6e:91:1a:90:74:3d:bd:f5:df:1e:21:15:cc:fa:36:3e:7f:0d:
         e6:66:90:37:f9:68:94:26:4b:34:af:d6:c6:80:19:a8:61:44:
         7b:c9:46:7d:86:f7:2a:79:4b:d3:00:aa:35:df:cd:13:a5:0b:
         be:eb:91:21:98:5a:4d:af:3e:fa:b6:2a:fc:f9:b7:c8:47:6f:
         9a:e2:17:4b:3e:13:71:0e:f6:1c:3e:41:36:1a:c2:1d:4d:b8:
         69:02:f3:b1:d0:81:dd:38:fe:4c:a1:fe:c4:80:93:2b:a4:85:
         6a:23:96:a7:49:fb:ae:b9:a0:af:b5:f9:c2:21:61:93:d6:b0:
         af:ff:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org