Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/6d7805b3f89c888da5af4179ee94a99094da68da.roa
File:                     6d7805b3f89c888da5af4179ee94a99094da68da.roa (raw, json)
Hash identifier:          wXGq9wHlT0G+LlSPUImeKq3e9bWCVdAanLzlrF/rMpY=
Subject key identifier:   A5:DE:A1:39:47:D9:74:E4:DD:83:5F:61:09:B0:8B:A3:19:FF:0A:E2
Certificate issuer:       /CN=433a44a4802841d19b4f08fc90e8acbefe06f218
Certificate serial:       1211BB
Authority key identifier: 9F:CC:F4:86:C4:3E:A2:08:8C:F0:3C:E3:00:C2:3B:5D:C3:3F:A9:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/433a44a4802841d19b4f08fc90e8acbefe06f218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/6d7805b3f89c888da5af4179ee94a99094da68da.roa
Signing time:             Fri 08 Dec 2023 07:30:00 +0000
ROA not before:           Fri 08 Dec 2023 07:30:00 +0000
ROA not after:            Sun 07 Dec 2025 07:30:00 +0000
asID:                     269898
IP address blocks:        45.190.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184187 (0x1211bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433a44a4802841d19b4f08fc90e8acbefe06f218
        Validity
            Not Before: Dec  8 07:30:00 2023 GMT
            Not After : Dec  7 07:30:00 2025 GMT
        Subject: CN=6d7805b3f89c888da5af4179ee94a99094da68da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:41:7e:df:3d:ba:2c:2e:af:2b:f2:81:8b:
                    b1:eb:b8:22:ec:de:c5:c6:17:4a:68:77:6b:20:8d:
                    d4:72:70:49:08:3d:2d:15:75:dd:e5:5c:c5:f3:8f:
                    52:ed:c2:1b:ca:10:10:ee:f1:13:cb:df:2f:39:f9:
                    6b:b8:e0:ca:34:f6:27:66:0e:01:a9:c4:cc:4f:79:
                    bf:4a:9f:42:bb:e6:2b:a9:5b:2f:e0:2b:1f:f2:29:
                    25:c8:c6:3a:85:c8:74:d0:52:c3:4f:b5:2c:34:90:
                    69:e6:d0:25:f4:ea:98:74:f4:b7:0e:8f:8c:c2:ad:
                    ca:53:d2:ea:90:fc:9f:e7:77:97:ea:3b:8a:79:e5:
                    87:d8:4c:75:25:47:b1:b8:c8:10:b5:03:0c:a5:09:
                    69:b9:6f:b3:44:c5:32:ec:07:9d:96:48:39:16:38:
                    5c:f1:ba:7c:f4:81:22:95:32:a0:35:a3:23:ae:1b:
                    2d:51:60:98:6a:3e:04:fe:70:2c:e6:34:87:f9:79:
                    b2:ff:36:fb:91:a1:06:c3:03:86:e3:ea:43:11:50:
                    b5:8d:f1:58:45:61:67:aa:49:e2:f1:5b:db:cc:a7:
                    be:4d:33:de:1e:92:0f:ef:c0:fb:a7:56:0f:d8:70:
                    72:99:9c:6a:cf:0e:03:2c:59:fc:05:a1:10:19:7a:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:A1:39:47:D9:74:E4:DD:83:5F:61:09:B0:8B:A3:19:FF:0A:E2
            X509v3 Authority Key Identifier:
                keyid:9F:CC:F4:86:C4:3E:A2:08:8C:F0:3C:E3:00:C2:3B:5D:C3:3F:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/433a44a4802841d19b4f08fc90e8acbefe06f218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/6d7805b3f89c888da5af4179ee94a99094da68da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/433a44a4802841d19b4f08fc90e8acbefe06f218.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:90:96:88:7b:ef:6c:a8:66:1b:05:8f:26:4c:c2:a6:84:a2:
         7f:ee:a6:a2:a9:a2:05:0e:00:29:1a:7d:49:59:c1:30:db:29:
         dc:22:53:d3:7b:db:02:10:b5:d4:10:03:3a:ad:88:cc:a6:31:
         d8:34:34:3a:f6:b0:d7:76:3c:b2:6c:c8:54:94:08:ad:d1:ce:
         00:c8:63:65:26:3a:4f:62:ea:a9:53:c6:9d:f7:7a:f6:6f:54:
         45:3a:f5:0b:c1:40:55:88:e7:f1:f5:65:7f:77:3c:1d:75:bc:
         ec:81:ca:2b:73:6e:31:76:ef:ce:1f:bf:45:bc:5a:1a:2f:ee:
         79:8a:60:54:73:2d:3e:8d:89:e0:2d:0a:b6:01:76:b0:9d:c6:
         2f:b9:e7:19:7c:63:22:83:0b:2e:84:77:90:6e:88:63:c7:07:
         e6:5d:56:23:96:cc:cc:00:96:89:c7:ca:5a:10:5e:93:8c:3e:
         85:fc:dc:3a:fe:92:73:76:19:46:0b:3e:cc:87:56:40:56:37:
         98:1e:d6:b7:93:31:e8:07:4a:c1:15:6d:58:67:76:57:87:1b:
         26:12:68:7f:19:80:e5:12:33:8d:0f:1b:0e:67:97:72:18:fa:
         4f:65:04:60:ee:b6:85:4d:6a:1f:31:0a:97:72:39:98:8a:cd:
         61:09:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org