Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/ee803d371c56744e3546ec42648332e4491178e3.roa
File:                     ee803d371c56744e3546ec42648332e4491178e3.roa (raw, json)
Hash identifier:          NlwX7A1In4ttAimUHxA/wg5wqKTj5oOIGqcGZ6wMYb4=
Subject key identifier:   FE:88:90:21:39:00:F2:98:EC:5E:D6:78:F4:4F:CA:B5:B7:C9:4F:E9
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       25A283
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/ee803d371c56744e3546ec42648332e4491178e3.roa
Signing time:             Wed 08 Nov 2023 22:23:01 +0000
ROA not before:           Wed 08 Nov 2023 22:23:01 +0000
ROA not after:            Sat 08 Nov 2025 22:23:01 +0000
asID:                     271933
IP address blocks:        45.70.12.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466435 (0x25a283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Nov  8 22:23:01 2023 GMT
            Not After : Nov  8 22:23:01 2025 GMT
        Subject: CN=ee803d371c56744e3546ec42648332e4491178e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:c5:72:c1:fb:b1:87:80:10:bd:92:9f:7b:
                    ec:a3:7e:7e:5f:e0:88:5a:68:0e:1b:98:b0:98:88:
                    5f:ff:b4:15:42:b8:fc:cb:60:e7:e3:c3:a8:b7:23:
                    09:93:92:63:9a:1d:c6:85:91:01:8a:41:6a:75:6d:
                    64:0c:68:c5:6b:3a:54:f1:75:9a:36:06:6a:6c:9d:
                    90:d1:cc:31:a8:a7:89:2f:f6:2e:c9:47:a9:29:49:
                    1f:cd:f1:92:a7:0f:ed:1f:2f:a3:d9:b9:31:75:a5:
                    a5:6e:03:7b:70:10:77:c2:96:2b:1c:33:2f:ed:7c:
                    60:b6:ca:70:89:48:6e:d2:23:2d:dc:50:26:2f:53:
                    23:0d:18:60:63:d6:a5:34:2b:c7:b9:df:05:44:fd:
                    d0:13:be:49:e5:6f:bb:f1:3f:50:04:a9:46:fc:0e:
                    e7:83:a1:99:5b:6b:47:b6:e4:2a:9c:a9:1a:04:44:
                    bd:98:fb:c1:2d:2b:b8:f5:30:fc:20:d3:6b:90:b5:
                    08:36:01:50:e1:86:42:03:9e:97:1e:e0:66:e9:d7:
                    e1:89:5b:e4:d0:51:31:8c:e0:79:0f:ad:f2:eb:e1:
                    e0:0f:92:15:e6:d5:a8:fe:4a:b4:72:11:36:5c:00:
                    d3:7f:70:d5:53:5f:bf:72:f1:41:e9:1b:1c:04:90:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:88:90:21:39:00:F2:98:EC:5E:D6:78:F4:4F:CA:B5:B7:C9:4F:E9
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/ee803d371c56744e3546ec42648332e4491178e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:e3:3b:fc:d4:b8:14:cb:c4:4c:19:16:7a:2b:94:7b:f4:
         72:86:4a:0f:93:c6:34:cc:e3:5d:59:1f:fc:60:84:88:37:e6:
         cb:55:5d:e7:53:38:67:8b:14:4c:5b:12:8f:cd:a2:19:df:5b:
         f6:8b:ed:70:d8:9d:ad:bb:7b:18:2b:d6:92:55:dd:f1:39:ca:
         cc:c0:c5:09:89:12:c1:19:51:77:4a:ef:30:c1:0a:52:04:ec:
         11:c6:95:1a:29:5c:ce:8f:09:89:8c:fa:7a:9d:33:2a:70:73:
         fd:50:7b:39:2b:db:30:c6:27:5f:a2:a7:11:04:48:16:5b:89:
         92:62:52:74:e8:30:95:0d:2d:11:d1:78:b3:7c:60:07:e3:71:
         bd:66:1f:14:bc:ad:e9:cd:55:d5:ce:38:52:4e:a6:f3:4b:82:
         ed:dc:71:8f:98:d6:9a:db:c5:04:3a:cd:6d:62:68:f6:cd:93:
         34:1c:20:13:03:00:a7:ff:1e:ff:33:72:97:d6:19:d1:40:7d:
         98:d8:ab:40:95:93:b3:95:be:3a:d8:24:70:a9:e6:cf:94:47:
         5c:f7:b6:fe:9a:c0:a3:f1:50:ea:cf:92:0f:09:08:d3:38:3f:
         20:e3:ff:55:e0:7b:8d:7a:18:7f:dc:b8:0a:12:66:38:12:6c:
         a1:10:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org