Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/6e62aeda7d4890da4db7e20a1859531212695f2c.roa
File:                     6e62aeda7d4890da4db7e20a1859531212695f2c.roa (raw, json)
Hash identifier:          mcXrBQf7G+6BcbGCUPB9ybirHbSRa89xizAY+Bi36FE=
Subject key identifier:   9F:3F:35:AE:88:13:15:68:61:45:E1:3D:D6:3B:3D:83:C7:06:3B:E4
Certificate issuer:       /CN=dce19eee3e5c1bb13241d78afef96a9a5f803f4b
Certificate serial:       055D6A
Authority key identifier: 28:3D:A4:6D:B8:4F:E7:98:B7:F4:BE:C0:29:18:DA:29:27:06:9B:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/6e62aeda7d4890da4db7e20a1859531212695f2c.roa
Signing time:             Thu 09 Nov 2023 20:58:09 +0000
ROA not before:           Thu 09 Nov 2023 20:58:09 +0000
ROA not after:            Sun 09 Nov 2025 20:58:09 +0000
asID:                     27843
IP address blocks:        45.224.144.0/23 maxlen: 24
                          45.224.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351594 (0x55d6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce19eee3e5c1bb13241d78afef96a9a5f803f4b
        Validity
            Not Before: Nov  9 20:58:09 2023 GMT
            Not After : Nov  9 20:58:09 2025 GMT
        Subject: CN=6e62aeda7d4890da4db7e20a1859531212695f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:ef:b7:49:00:c4:ae:60:18:43:28:c8:64:
                    0b:15:b7:b4:4c:d7:6b:bb:7d:ea:2a:ce:94:5c:d8:
                    6f:bf:f0:6c:49:18:7c:c2:80:d9:af:9d:1c:9d:dc:
                    b7:69:41:52:31:09:24:4f:cc:63:f7:82:ed:3e:5f:
                    8e:f5:2c:c4:59:8e:9a:07:89:b6:30:bb:1f:85:30:
                    e8:37:30:ee:d0:54:2a:15:52:13:c3:2f:be:dd:9f:
                    b0:df:48:a6:e7:57:0f:43:8b:1f:e0:08:c5:82:dc:
                    de:21:15:5e:90:83:80:f4:75:a8:7e:3e:3e:f9:5e:
                    c8:54:5c:52:5f:8a:ab:7f:1a:84:1e:71:04:16:46:
                    a7:90:ed:5f:ae:1f:66:52:34:53:9c:6b:c3:42:5b:
                    de:80:2a:49:f7:3d:2f:67:fc:eb:99:69:1c:8e:2d:
                    cd:81:70:59:9c:1d:88:fc:a7:f9:4a:cd:94:2e:20:
                    b8:35:a8:22:8d:1b:7a:a5:f3:7f:53:2b:b3:6b:77:
                    71:50:e6:7d:f3:9b:83:cb:8d:0b:1d:7d:58:f7:7a:
                    3c:ce:2c:05:2a:ec:57:bf:45:e6:71:93:86:f5:8f:
                    3e:99:fd:79:36:8d:0f:06:dd:06:9c:4a:2b:71:c8:
                    99:cc:f6:9e:f7:70:e5:6c:c2:dd:fa:0f:48:c1:49:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3F:35:AE:88:13:15:68:61:45:E1:3D:D6:3B:3D:83:C7:06:3B:E4
            X509v3 Authority Key Identifier:
                keyid:28:3D:A4:6D:B8:4F:E7:98:B7:F4:BE:C0:29:18:DA:29:27:06:9B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/6e62aeda7d4890da4db7e20a1859531212695f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:72:49:ba:af:4c:cf:f3:30:c1:57:a5:b2:b2:d7:43:8b:bb:
         0a:d4:16:e4:78:c1:08:fd:6f:2e:ce:4f:27:fd:c2:cb:d6:43:
         0a:b5:6d:1a:05:5b:39:d0:2f:c1:2e:54:55:ae:38:12:1f:ea:
         89:ad:9e:b3:d6:05:69:9e:5b:1f:a9:3c:e4:14:23:15:1d:5d:
         f1:c5:28:75:76:94:fc:fa:e3:1e:57:60:9e:c0:bf:d3:c6:f5:
         fc:4c:b7:5b:d5:d9:aa:83:34:a7:cd:84:10:a1:5d:b5:8b:ca:
         c5:6b:d7:41:27:17:6e:46:96:21:ab:de:3e:ca:fc:b3:33:45:
         7d:a8:e2:7f:19:7c:11:d7:b6:1a:99:88:50:57:52:87:3a:ec:
         91:b3:b7:16:83:1c:d3:68:54:fe:13:75:ff:f5:fc:10:e2:e3:
         30:a4:8c:79:58:52:49:10:3c:91:70:83:e4:74:6c:93:29:30:
         4e:c6:ae:1e:b1:be:22:39:b6:39:d1:c3:51:b0:bb:83:fe:54:
         d4:57:9c:77:39:5a:02:42:98:0c:46:2a:88:72:ac:6d:e3:42:
         39:44:45:8b:64:6d:ee:98:95:43:80:00:92:88:ae:61:6b:b7:
         f0:cb:7c:fa:9c:cb:38:b6:ce:b2:57:5f:97:97:5a:6a:5c:41:
         83:65:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org