Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa
File:                     6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa (raw, json)
Hash identifier:          K7UOr3aSA9PKM3lK0E3/PHh87KfJwzWAjJrwxfeEoqU=
Subject key identifier:   D8:F8:B0:B1:9B:3F:2D:D8:98:72:12:51:B1:12:18:33:F8:D5:78:06
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       024C
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa
Signing time:             Mon 17 Jan 2022 23:20:10 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     269735
IP address blocks:        45.181.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=6e213e85533b8b25c29c10f1c18efaff6771cd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:8d:25:42:92:a8:b6:fc:57:a5:7a:cf:13:
                    fd:02:65:9f:f3:d9:e8:32:04:d4:11:43:07:a3:a8:
                    74:6c:dd:a9:ef:6b:76:e5:c3:3c:c4:0d:76:f8:ac:
                    c4:9e:3d:d7:ca:5f:9a:ae:08:9b:7f:fe:5c:ed:8d:
                    5c:e5:c6:b4:ac:d5:53:c0:54:16:57:ac:a6:04:4b:
                    24:69:d9:e0:5a:c0:1d:b4:65:6e:aa:61:b3:26:66:
                    11:c5:f5:32:35:b0:48:90:d7:a3:cb:e5:be:aa:76:
                    85:fd:f2:79:a9:71:4c:c0:8b:09:3f:11:f4:b2:7d:
                    a4:39:7c:2a:f4:82:d7:3d:7d:b6:81:6b:84:9b:a6:
                    e6:fd:cf:e9:24:23:44:93:18:b4:bf:75:28:f5:c1:
                    16:e3:23:cd:74:a2:a2:a7:c9:57:08:10:07:d4:84:
                    ef:49:b2:6c:ce:86:8a:c0:63:6b:cb:1d:f0:ac:fc:
                    79:e7:ae:bf:27:ce:46:0b:b9:82:4b:8e:24:38:b1:
                    c1:7e:82:1c:0e:8f:b2:79:1d:6b:7a:22:6b:49:ff:
                    08:8f:0a:9f:63:70:b5:6e:9a:d5:c2:84:d6:20:41:
                    73:e5:16:11:6b:c0:58:48:71:df:eb:7b:54:9d:d0:
                    c9:5d:d5:01:6e:53:fa:fe:0f:a1:9b:b7:d6:73:00:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F8:B0:B1:9B:3F:2D:D8:98:72:12:51:B1:12:18:33:F8:D5:78:06
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:d4:24:5c:be:af:d1:44:a3:1a:51:6c:de:0b:24:57:1e:
         21:a0:4b:fe:96:0f:f9:f7:8f:3f:2d:47:22:e1:53:35:f2:b8:
         82:48:d8:08:f6:cc:a0:b2:d3:97:bc:aa:35:bd:93:aa:42:37:
         46:c1:e2:e7:a3:d6:b3:b5:89:95:ac:c5:ef:11:50:e4:12:dc:
         68:9f:ae:ba:83:22:fe:b7:3a:30:5b:c2:f8:7c:b1:c9:11:55:
         68:3b:80:74:b0:f0:70:c4:27:2b:4a:57:0c:9e:1e:09:da:d7:
         60:80:a2:7a:b7:22:a4:8d:c3:fb:9b:73:b4:b5:dc:8d:40:85:
         d2:88:ab:53:7b:e6:6d:b0:a2:2c:46:60:c6:e7:00:5c:b3:41:
         92:ce:d3:d0:18:a1:45:a4:9d:a1:66:2b:f6:c8:0d:da:73:89:
         17:18:03:e8:2e:78:5e:96:e1:ac:a1:88:68:bb:05:4e:80:fa:
         c8:85:df:f7:63:85:b8:09:fc:c6:f3:69:a5:fa:4d:df:0c:5d:
         81:33:cf:b8:fe:81:79:a3:84:e5:17:b9:fa:0b:5f:7f:83:ed:
         0b:5e:32:81:46:00:33:74:53:0e:bc:09:30:7d:a6:fa:08:f4:
         94:35:b0:d5:74:c6:1c:67:41:50:b5:d9:d7:5d:40:57:69:3c:
         55:f6:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org