Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/562ff6510b995afc8a09bc43c4c8ade46dccaf8e.roa
File:                     562ff6510b995afc8a09bc43c4c8ade46dccaf8e.roa (raw, json)
Hash identifier:          oNoXU+XtG/qtFMiiIKGo4ie/lFTDnGzH+ix4ooMzBls=
Subject key identifier:   A4:5F:B3:C7:51:66:33:7F:D3:E4:72:22:5E:37:66:5F:40:2A:C2:B4
Certificate issuer:       /CN=4b6e4511423735ba9580fccb3e95db51effb72c7
Certificate serial:       1B1881
Authority key identifier: CA:78:6D:12:E9:8D:FD:82:B8:0A:AA:A1:37:79:7C:C4:BF:CA:7D:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b6e4511423735ba9580fccb3e95db51effb72c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/562ff6510b995afc8a09bc43c4c8ade46dccaf8e.roa
Signing time:             Fri 12 May 2023 08:30:02 +0000
ROA not before:           Thu 11 May 2023 08:30:02 +0000
ROA not after:            Sat 10 May 2025 08:30:02 +0000
asID:                     262231
IP address blocks:        143.0.80.0/22 maxlen: 24
                          170.245.168.0/22 maxlen: 24
                          190.52.80.0/20 maxlen: 24
                          2803:2c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775745 (0x1b1881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b6e4511423735ba9580fccb3e95db51effb72c7
        Validity
            Not Before: May 11 08:30:02 2023 GMT
            Not After : May 10 08:30:02 2025 GMT
        Subject: CN=562ff6510b995afc8a09bc43c4c8ade46dccaf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:7a:a4:10:a5:4a:83:c8:40:85:38:2c:23:
                    59:56:aa:85:77:bd:aa:d0:72:03:c9:6d:20:08:48:
                    e5:5f:be:23:aa:b7:35:3a:0d:54:ef:6c:48:1d:c6:
                    f0:cc:c1:51:57:26:2e:a9:9c:c6:35:bb:24:e4:c8:
                    f4:a9:25:e2:c8:6a:9a:40:2e:57:1d:b3:49:ca:28:
                    94:4a:be:41:45:5c:2b:48:51:73:79:a7:c4:fe:ec:
                    0e:c5:2c:63:42:91:db:a9:d5:cc:56:36:09:9e:1e:
                    e1:cf:fd:0a:95:17:b5:a3:27:07:c4:21:ad:4b:bd:
                    a2:8e:53:b1:77:1a:6f:96:c8:b0:25:81:b7:67:d8:
                    b4:9d:1a:6c:fb:c2:9d:72:f7:7f:28:a3:ce:95:89:
                    d3:67:ec:91:0f:d9:c8:d6:0f:18:3f:a7:7a:9a:c9:
                    ec:96:e9:6c:ca:ae:47:0a:07:73:6c:ce:36:89:d8:
                    92:dc:e0:61:a8:29:6d:ed:e0:a3:bd:0c:96:17:fd:
                    63:cc:9e:e9:5c:ec:9a:24:20:1e:e3:41:5c:d1:9c:
                    fe:bf:50:8a:e1:68:da:a6:9a:81:5f:af:b8:8f:28:
                    27:bb:ba:a3:11:52:4e:4e:76:62:77:bb:fe:e5:9f:
                    2c:21:a9:3d:98:f4:2f:78:c5:4d:8b:39:bf:c7:d5:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:B3:C7:51:66:33:7F:D3:E4:72:22:5E:37:66:5F:40:2A:C2:B4
            X509v3 Authority Key Identifier:
                keyid:CA:78:6D:12:E9:8D:FD:82:B8:0A:AA:A1:37:79:7C:C4:BF:CA:7D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b6e4511423735ba9580fccb3e95db51effb72c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/562ff6510b995afc8a09bc43c4c8ade46dccaf8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/4b6e4511423735ba9580fccb3e95db51effb72c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.80.0/22
                  170.245.168.0/22
                  190.52.80.0/20
                IPv6:
                  2803:2c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:69:35:14:3e:8a:18:c9:e6:a7:80:15:9e:67:d8:0a:82:81:
         b3:d1:8e:0f:0f:8a:a3:dd:c3:5b:90:1d:b3:0b:7c:f0:fd:7b:
         9b:3f:eb:fb:36:72:9e:94:b2:49:0b:0e:29:8d:94:60:3a:ee:
         6b:20:30:de:56:d6:55:d8:1f:f7:2d:39:f3:79:38:36:db:0b:
         19:5e:10:0e:bc:51:07:af:ab:a9:75:90:49:22:00:a6:67:3b:
         6b:9d:a3:df:0e:06:1e:57:73:e5:6c:a8:d6:f7:1d:22:a1:c1:
         51:80:02:74:5c:52:79:3f:74:b5:13:0e:d8:2c:07:48:64:de:
         d3:43:5f:1a:54:5c:df:fe:b0:28:e7:7d:1d:5f:5b:4c:6a:47:
         85:af:4f:59:94:b8:45:4d:77:e6:30:8b:8b:f3:fc:ae:e8:43:
         2a:b0:29:05:d9:5c:03:eb:1c:64:d7:3e:23:74:9c:81:59:33:
         30:72:1e:e8:6f:9a:8b:c4:b2:d0:2e:84:c3:0c:64:4b:d1:0c:
         3f:8f:0f:ba:e9:35:bd:b8:51:24:59:df:70:75:67:00:6e:ed:
         b1:8c:79:bf:13:d1:26:90:0b:00:40:a3:51:d6:ab:6c:1e:67:
         db:d4:fd:6d:49:6a:bf:59:17:52:31:1d:7f:f5:24:e7:70:39:
         98:c5:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org