Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/469cbaffe7f691bea3d1e25f6b226af6003d7c32.roa
File:                     469cbaffe7f691bea3d1e25f6b226af6003d7c32.roa (raw, json)
Hash identifier:          Hzl6joxyayx76M/hDrl1oOCQ+1N0Agw4fvwxoAV2gr4=
Subject key identifier:   80:3C:D3:97:86:12:78:DB:2B:6B:5D:71:B6:CF:C5:15:63:98:7D:F8
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       225B47
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/469cbaffe7f691bea3d1e25f6b226af6003d7c32.roa
Signing time:             Thu 06 Jul 2023 04:19:36 +0000
ROA not before:           Wed 05 Jul 2023 04:19:35 +0000
ROA not after:            Sun 06 Jul 2025 04:19:35 +0000
asID:                     52468
IP address blocks:        45.70.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251591 (0x225b47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Jul  5 04:19:35 2023 GMT
            Not After : Jul  6 04:19:35 2025 GMT
        Subject: CN=469cbaffe7f691bea3d1e25f6b226af6003d7c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:7a:31:d3:b2:80:c1:24:95:fa:2a:67:db:
                    e2:d4:55:68:c6:7c:f6:cd:e9:7c:35:ba:d0:65:3e:
                    c1:ed:a6:1c:09:a7:23:e5:6c:97:a1:01:e2:a2:67:
                    41:e6:40:38:2d:52:b8:41:48:6e:74:fb:af:73:93:
                    47:ea:a4:42:68:c4:c8:0c:d4:d4:29:c7:44:64:2c:
                    20:7a:ce:47:a6:9e:11:cd:b4:2b:36:6e:88:18:0e:
                    a8:98:aa:a9:78:98:61:71:f9:95:db:1f:24:ce:cc:
                    49:e8:49:9a:0b:54:11:98:a5:2e:f3:cb:ab:7e:b5:
                    bc:7c:f5:1b:7e:66:1f:81:22:af:ae:10:e5:a4:83:
                    16:2a:49:3f:4e:a5:88:05:ca:4e:0d:12:18:d4:b4:
                    0b:4a:04:83:b2:2d:24:7a:89:44:c2:69:b2:15:4f:
                    3d:7b:83:96:88:ec:d3:7d:1e:d7:84:f7:d1:fd:60:
                    33:a9:89:e1:4b:b8:68:30:c1:07:46:f9:12:f8:65:
                    74:96:99:cc:60:6d:c1:7d:27:bc:34:7c:c8:ce:d6:
                    c6:b2:8d:46:ff:61:4f:08:1e:74:b8:87:d5:26:e3:
                    a5:05:24:be:e4:8d:0c:dd:29:02:0f:1d:e2:d9:48:
                    99:56:66:bd:50:f8:25:89:ec:35:af:67:c2:d3:22:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3C:D3:97:86:12:78:DB:2B:6B:5D:71:B6:CF:C5:15:63:98:7D:F8
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/469cbaffe7f691bea3d1e25f6b226af6003d7c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:27:5b:65:d5:f0:3d:c5:14:bf:a0:55:d6:f1:3c:cc:bd:a8:
         29:c0:4e:b0:69:7a:8e:ee:7e:66:2a:cc:41:1e:8f:cf:16:4f:
         79:ea:c1:ec:64:fa:75:92:3e:9d:be:11:07:16:4f:87:1c:fd:
         cd:67:f2:2d:1d:ed:f5:34:f5:f8:dd:9d:35:67:f0:c8:99:99:
         0a:f4:d3:dd:b6:d6:c5:38:76:e8:28:88:b1:8c:da:cd:e1:bb:
         02:f4:8a:95:60:3f:e2:93:4e:1e:7e:18:0a:1c:ca:be:eb:17:
         e7:6a:b1:bb:4a:d4:e1:ba:87:ab:3a:74:30:21:a0:ca:22:e1:
         9a:03:ed:21:6b:9e:c5:c0:40:ef:db:11:35:c4:84:15:ad:e1:
         87:07:1c:ce:0a:6b:23:a1:b8:58:25:28:74:12:98:db:49:1d:
         bc:5c:3f:c4:00:81:8c:00:0b:ad:c8:b3:14:9c:1b:ec:5d:a8:
         37:e2:37:90:23:f1:7c:79:bd:12:93:28:bb:81:72:c6:ef:41:
         47:bf:b2:e8:30:12:90:2b:31:7e:e7:14:1e:61:f4:38:39:d0:
         ce:bd:5e:8d:1c:8a:50:ec:41:0e:66:43:b0:f4:68:3e:90:8e:
         23:82:3c:d6:94:94:c7:21:08:f5:94:b5:b2:e2:b6:ec:98:2f:
         e8:d8:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org