Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/601e1d68446f592bf0e62804e908cece4e397b1a.roa
File:                     601e1d68446f592bf0e62804e908cece4e397b1a.roa (raw, json)
Hash identifier:          TJUk4KePoKwcQW78aCqOsBXZq772jg8GBsMy+pvtvDA=
Subject key identifier:   94:48:6D:E2:9E:FE:8A:9B:BB:A0:4A:79:02:4E:63:A8:FA:D4:DC:1B
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       144A42
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/601e1d68446f592bf0e62804e908cece4e397b1a.roa
Signing time:             Tue 17 Oct 2023 17:14:19 +0000
ROA not before:           Mon 16 Oct 2023 17:14:19 +0000
ROA not after:            Fri 17 Oct 2025 17:14:19 +0000
asID:                     23243
IP address blocks:        45.229.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329730 (0x144a42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Oct 16 17:14:19 2023 GMT
            Not After : Oct 17 17:14:19 2025 GMT
        Subject: CN=601e1d68446f592bf0e62804e908cece4e397b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:7b:e6:8a:12:84:69:7f:22:e8:58:0a:1d:
                    17:3d:5c:5a:b0:c0:0f:0c:bb:b3:55:53:fa:d7:31:
                    a4:ac:76:16:39:74:42:ac:bc:9c:88:ef:ff:e0:09:
                    dd:7f:1a:12:4e:43:8c:4d:5d:2d:92:28:e5:30:f6:
                    dd:58:2e:04:22:09:fc:ed:57:20:05:f0:60:ac:10:
                    a8:86:47:07:92:eb:11:1b:03:b3:d7:31:cb:ae:52:
                    cd:98:94:af:e8:3f:4f:76:c2:ec:9a:e1:75:f2:51:
                    65:fb:86:d4:3c:f0:f6:99:34:d9:b0:e1:e0:9d:6d:
                    4d:46:a6:e5:d2:60:aa:34:c2:23:a3:de:96:e2:7d:
                    6f:10:55:5d:3d:4d:a3:6c:39:f1:dc:56:05:87:de:
                    bb:58:86:39:74:91:a4:63:07:c6:ad:35:3a:0c:43:
                    e6:15:f8:8f:5a:39:17:8d:d5:9a:0b:47:2f:64:98:
                    4e:6c:29:d1:7c:4a:16:0e:82:94:d9:2e:bc:ef:df:
                    ff:59:5b:78:c1:df:a0:a2:04:23:8e:a0:eb:69:41:
                    ab:74:0b:48:17:e3:78:88:80:22:94:f0:f6:47:26:
                    31:84:54:30:d7:59:5b:33:81:a3:f9:15:56:41:e3:
                    90:b4:ce:cb:3e:e9:cb:7a:7e:45:92:ff:ad:60:51:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:6D:E2:9E:FE:8A:9B:BB:A0:4A:79:02:4E:63:A8:FA:D4:DC:1B
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/601e1d68446f592bf0e62804e908cece4e397b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:cd:ec:df:99:ab:d1:64:31:a7:90:f8:33:b1:1a:eb:bb:
         fa:bc:c8:fb:2a:a0:a8:8a:d4:59:35:88:24:df:0d:75:31:e7:
         22:4e:17:64:da:76:d6:81:b0:6c:5b:75:48:88:46:36:f1:57:
         ac:02:69:ec:8a:f0:2a:f5:09:f9:f1:0e:32:92:4d:7c:b7:04:
         02:87:3b:1e:ee:53:57:e2:d0:b7:a1:5e:69:44:64:6b:8f:cd:
         52:32:0e:b2:c6:e4:5c:65:1f:72:0a:28:ad:82:b7:45:85:bc:
         af:1b:42:3a:5a:e6:d9:45:43:16:3e:33:75:a9:53:2c:77:3b:
         7f:19:e5:32:6c:39:54:00:1d:47:16:94:f2:7b:64:eb:24:f3:
         69:d5:ad:7e:26:9e:9b:df:44:d9:d0:f5:e8:b1:be:5f:09:3d:
         f8:63:f9:5a:5b:d2:de:ef:74:74:db:71:bd:ca:58:80:c7:25:
         d6:e8:02:03:3e:a1:8c:d2:3b:8b:f2:33:b6:24:79:a6:b8:f3:
         a7:65:5b:df:8a:76:d5:d5:5b:cd:d4:95:bd:69:39:60:98:ca:
         ff:7d:80:e7:9e:d5:1d:6e:e9:d5:e2:8b:97:ab:70:21:ad:b7:
         26:43:5f:ee:aa:a2:ab:6e:ec:6e:5e:58:60:7d:63:1f:56:db:
         25:10:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org