Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/506855dc-6619-468e-8c85-24de15bccc9b/f6b7d5b62a9f9b316599c545b1371725f87d8254.roa
File:                     f6b7d5b62a9f9b316599c545b1371725f87d8254.roa (raw, json)
Hash identifier:          rkhpXxT2ZI53g4ZCpShFn+iTIQVQJDdCLE+7mLeqPvc=
Subject key identifier:   2B:A6:DD:E5:50:A3:30:AC:3B:F9:1E:53:52:ED:EE:B9:57:53:EE:0D
Certificate issuer:       /CN=c745995ed4130519c6f55bf7afd584601851e6e7
Certificate serial:       048A
Authority key identifier: D9:47:C0:E1:61:0C:62:14:71:48:18:5A:C2:39:EE:63:F2:3A:E3:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c745995ed4130519c6f55bf7afd584601851e6e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/506855dc-6619-468e-8c85-24de15bccc9b/f6b7d5b62a9f9b316599c545b1371725f87d8254.roa
Signing time:             Mon 06 Dec 2021 13:14:48 +0000
ROA not before:           Mon 06 Dec 2021 03:00:00 +0000
ROA not after:            Wed 06 Dec 2023 03:00:00 +0000
asID:                     269891
IP address blocks:        45.190.84.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c745995ed4130519c6f55bf7afd584601851e6e7
        Validity
            Not Before: Dec  6 03:00:00 2021 GMT
            Not After : Dec  6 03:00:00 2023 GMT
        Subject: CN=f6b7d5b62a9f9b316599c545b1371725f87d8254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:b0:a6:db:5d:b4:1b:8c:9a:e2:8e:3e:b6:
                    11:4a:9d:ef:1e:2a:15:85:bf:cf:d8:04:3b:e4:fb:
                    d8:3d:d9:c6:66:48:82:f3:8c:55:89:52:39:b3:3d:
                    99:87:25:84:60:21:18:99:71:f9:6c:8c:9e:28:84:
                    85:a4:e8:77:f7:be:ad:d5:8c:b9:ed:6a:6c:31:c5:
                    0d:fe:64:94:c3:66:28:b8:78:39:b2:53:85:d0:c4:
                    72:47:e3:fc:c0:64:3f:fd:83:63:d5:41:f0:65:14:
                    c7:fb:a1:4b:0a:82:85:fd:fe:6a:ed:37:98:81:6e:
                    5c:f0:ad:b5:60:bc:c6:ba:27:37:9a:65:c5:e3:4b:
                    72:74:71:2f:e1:15:dc:19:79:85:d8:f4:aa:8b:7d:
                    ab:ae:29:07:2e:1d:94:54:e6:10:e7:58:aa:8d:d5:
                    e1:ce:c0:34:fb:3e:d5:87:1f:c3:75:7a:56:56:4e:
                    53:0d:4f:ef:2f:36:d6:ee:d6:6c:6a:b5:dd:fe:0b:
                    44:45:02:d5:1e:c1:e5:e5:03:9f:16:c0:c6:8b:f5:
                    1a:1e:b0:0d:e1:7c:0c:f6:82:75:ca:85:66:3f:f0:
                    6f:01:98:6f:92:4b:8c:6a:94:f2:99:ca:7b:53:23:
                    38:2c:76:e2:b6:79:0d:f1:0a:4a:6a:8c:83:8d:ec:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:DD:E5:50:A3:30:AC:3B:F9:1E:53:52:ED:EE:B9:57:53:EE:0D
            X509v3 Authority Key Identifier:
                keyid:D9:47:C0:E1:61:0C:62:14:71:48:18:5A:C2:39:EE:63:F2:3A:E3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c745995ed4130519c6f55bf7afd584601851e6e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/506855dc-6619-468e-8c85-24de15bccc9b/f6b7d5b62a9f9b316599c545b1371725f87d8254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/506855dc-6619-468e-8c85-24de15bccc9b/c745995ed4130519c6f55bf7afd584601851e6e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:58:8d:bf:ff:ca:81:1d:4f:0e:e9:fa:76:56:b0:a8:24:7d:
         ff:db:c0:29:ee:bc:fb:39:7d:ff:18:2b:0f:c1:ca:ef:84:87:
         21:65:6f:8d:1b:14:ec:b0:7f:ae:90:81:ab:48:b8:cc:82:3c:
         0a:dd:db:9b:34:d5:98:02:08:92:84:63:72:32:e6:0b:f3:ee:
         22:6f:79:55:d8:a5:a3:72:c0:f6:16:83:92:94:46:22:d1:49:
         b7:2d:4b:81:21:63:95:b6:a5:be:a9:36:a8:c0:4f:3b:d6:c1:
         ff:64:6c:7a:d7:ec:11:9f:bf:f5:97:44:6f:dd:e1:83:a6:a2:
         35:57:59:50:ef:46:7e:91:42:27:eb:17:a3:ef:eb:60:5c:54:
         f4:26:68:d5:01:73:70:37:6b:c6:42:3b:74:20:00:5e:fa:52:
         a0:1f:78:b4:17:f4:e2:10:83:08:bb:9a:c2:07:1c:80:e2:49:
         a9:aa:cf:1c:75:69:e9:9e:ee:2e:dd:b6:f8:82:0f:29:ce:27:
         bb:c0:ba:d8:92:27:d5:1c:69:1a:27:c0:26:25:82:f3:cf:e9:
         0f:3b:bf:4f:ec:2f:df:9b:c2:85:2d:a1:0a:4b:60:3c:13:fb:
         ca:04:65:f2:ac:19:71:1c:e4:3a:83:c2:72:86:c0:2d:33:bc:
         44:af:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org