Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/05149ee1660e333369ab0d76c47d59b3ca550563.roa
File:                     05149ee1660e333369ab0d76c47d59b3ca550563.roa (raw, json)
Hash identifier:          aj914HMBhy487Q5WYUdE4zn1C2qdOKMAIT2mds1QDiA=
Subject key identifier:   CD:63:FC:08:B9:4F:89:D6:F6:BE:5A:9C:C8:70:6E:33:AD:8E:7F:FD
Certificate issuer:       /CN=685e9df950810f9f2b2a89ea33716d7329b670c6
Certificate serial:       1156BD
Authority key identifier: 45:17:34:D4:44:6B:EC:BA:4C:A5:90:43:1C:57:95:A2:27:CD:4F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/685e9df950810f9f2b2a89ea33716d7329b670c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/05149ee1660e333369ab0d76c47d59b3ca550563.roa
Signing time:             Mon 11 Jul 2022 15:51:37 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     264737
IP address blocks:        170.233.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136317 (0x1156bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685e9df950810f9f2b2a89ea33716d7329b670c6
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=05149ee1660e333369ab0d76c47d59b3ca550563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:62:80:b5:d6:9f:63:f2:b7:99:e7:9d:67:
                    d9:4a:7d:45:c4:78:88:a7:b4:f0:7e:a9:84:af:e1:
                    bf:4f:62:55:b3:28:ec:95:0e:bc:8e:a5:04:88:bb:
                    f7:a4:12:a8:ec:87:c1:f4:af:cb:3d:8f:3b:7b:2f:
                    f8:0a:83:72:a2:41:70:9c:1a:03:40:d1:74:21:4e:
                    c8:7d:27:07:a7:b0:5c:fc:ec:db:5b:9d:86:19:03:
                    68:8f:18:f3:55:c6:02:8c:34:c1:a2:b8:97:c3:7f:
                    66:ae:80:ca:17:bb:af:89:22:70:67:c3:62:a9:a1:
                    a0:78:44:8d:17:40:fc:1b:fc:95:c7:1f:15:90:ce:
                    8b:c5:b0:ac:72:a3:88:22:99:9c:40:75:02:fe:42:
                    a6:57:b6:0d:32:d2:20:dd:94:7f:f2:4a:15:a7:bb:
                    30:42:58:56:cd:9f:14:18:9e:cf:c0:1e:98:83:06:
                    a5:4d:9e:ba:a6:0e:ec:dd:60:f4:41:a3:6d:c7:c8:
                    b4:63:69:08:c3:52:65:92:7c:68:75:b8:ed:72:b9:
                    23:0b:7f:c0:07:3e:5a:2b:95:a5:5b:94:9f:04:ca:
                    39:08:f3:ec:d9:1b:45:4f:ee:6e:c9:51:bd:93:bc:
                    17:e7:70:7a:f8:61:a5:28:2b:ab:04:67:93:f0:6c:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:FC:08:B9:4F:89:D6:F6:BE:5A:9C:C8:70:6E:33:AD:8E:7F:FD
            X509v3 Authority Key Identifier:
                keyid:45:17:34:D4:44:6B:EC:BA:4C:A5:90:43:1C:57:95:A2:27:CD:4F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/685e9df950810f9f2b2a89ea33716d7329b670c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/05149ee1660e333369ab0d76c47d59b3ca550563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4bd89018-528c-4b96-9271-cbf8c245eea6/685e9df950810f9f2b2a89ea33716d7329b670c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:09:c6:29:e1:8d:83:0b:5b:f2:7b:3c:00:52:8f:2c:fb:4a:
         3d:6c:23:73:36:dd:67:95:cc:64:18:36:fa:1c:6b:99:48:d0:
         2e:04:26:4b:3f:58:d7:b8:ac:c3:2e:4b:73:3e:8a:52:a3:9a:
         27:c7:31:e3:13:a2:bc:c0:50:f6:2f:b6:be:42:25:43:c2:2b:
         49:3d:72:8e:75:48:7c:04:b2:1b:52:ed:50:c4:de:dd:ec:7f:
         ce:91:d6:2d:61:d1:78:17:39:8e:63:55:54:04:9d:6f:ba:fe:
         c4:cd:ce:3b:8f:47:78:f9:3c:a1:22:38:73:4a:9a:1e:af:c2:
         81:b6:e1:63:ba:4d:1e:ee:9a:d3:c9:84:6d:30:8b:85:6d:98:
         c9:06:e7:5b:38:e8:f9:ce:44:d3:6a:c3:d9:94:49:30:8c:30:
         34:47:11:b4:5e:c3:fd:51:ad:33:6c:8a:d2:8f:62:1f:5e:1e:
         b2:a4:9a:4f:89:03:0e:4c:29:84:4e:54:86:f8:ee:90:2c:71:
         09:5b:4f:6d:98:d7:4b:ce:5f:6e:f4:90:43:23:e1:2c:6d:2c:
         f8:08:f6:de:11:23:ae:ba:b0:87:2c:a6:b6:18:e9:c5:ee:89:
         78:3b:d5:78:48:0a:1d:e1:19:49:bd:00:10:f8:07:ee:31:82:
         19:fd:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org