Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/04c477f7a9f14980ce51b0f8eabe8617b7fc77dd.roa
File:                     04c477f7a9f14980ce51b0f8eabe8617b7fc77dd.roa (raw, json)
Hash identifier:          L9ZcoDzyz766ls3XebjWvigGx/pIuI4652BMDlZPJo8=
Subject key identifier:   8F:6D:58:82:2F:CD:D2:24:D3:EB:A8:52:BD:D7:6D:2C:4A:97:74:92
Certificate issuer:       /CN=b5870581a7a54ad76661b8f0f4f741a7f81ae942
Certificate serial:       059C
Authority key identifier: C6:8F:A1:BB:54:55:2A:11:4B:5A:F7:47:D4:DB:74:74:4D:62:65:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5870581a7a54ad76661b8f0f4f741a7f81ae942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/04c477f7a9f14980ce51b0f8eabe8617b7fc77dd.roa
Signing time:             Mon 04 Oct 2021 23:08:15 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     394474
IP address blocks:        45.4.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5870581a7a54ad76661b8f0f4f741a7f81ae942
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=04c477f7a9f14980ce51b0f8eabe8617b7fc77dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:e2:fe:ea:83:a4:d3:6c:0a:6a:d0:fa:45:
                    53:e4:dc:7d:a2:2a:46:c3:79:4c:3c:0b:73:7d:e2:
                    d9:1b:7e:cc:d2:f2:f3:6c:d1:2c:53:1c:d8:86:09:
                    04:2f:da:58:65:e8:21:1a:a6:81:dd:92:35:05:1a:
                    bf:3d:dd:3d:85:34:45:05:a9:a6:8d:65:19:88:a3:
                    d9:e8:5a:36:04:31:79:4e:60:48:0b:fc:16:0f:86:
                    76:c0:0e:65:f7:85:06:0e:f8:4d:97:18:9e:bd:0d:
                    60:e1:3c:87:47:dd:5a:2b:39:48:e6:d1:39:e8:c5:
                    ea:d6:fa:85:d5:fc:7e:56:42:95:99:a0:1d:c5:c7:
                    ba:df:40:17:a9:1c:77:fc:85:5e:65:52:1a:9c:19:
                    6e:ad:d7:a2:4e:4b:aa:5b:de:11:d0:fc:77:d2:41:
                    e1:8c:2a:40:54:87:34:5f:b6:09:be:02:8e:07:52:
                    aa:c1:64:2b:b5:b7:87:74:76:0b:f8:88:27:2b:16:
                    25:29:67:10:f9:04:f2:22:c5:ca:2a:34:87:d8:fa:
                    f2:8b:0c:e8:72:42:8d:9a:fc:b0:c6:cd:5e:2b:53:
                    d8:e9:ea:f4:21:08:14:2b:b1:bb:5e:97:4d:6f:97:
                    fd:da:df:e2:cd:55:72:0a:51:83:26:aa:7f:cb:13:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:58:82:2F:CD:D2:24:D3:EB:A8:52:BD:D7:6D:2C:4A:97:74:92
            X509v3 Authority Key Identifier:
                keyid:C6:8F:A1:BB:54:55:2A:11:4B:5A:F7:47:D4:DB:74:74:4D:62:65:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5870581a7a54ad76661b8f0f4f741a7f81ae942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/04c477f7a9f14980ce51b0f8eabe8617b7fc77dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/610cb410-ef52-4382-a924-acb3b274565e/b5870581a7a54ad76661b8f0f4f741a7f81ae942.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:e2:99:81:44:b7:d8:65:04:43:4d:92:65:58:7b:bc:01:
         d7:97:89:e8:03:de:4f:b8:d6:26:f8:08:d8:1e:2c:b7:f5:ab:
         89:f2:ae:9a:c7:73:c1:08:c1:b2:d1:fd:e5:17:a4:c5:ea:f8:
         49:1c:5c:94:8f:4b:c7:a1:0b:12:4e:a0:bd:a4:79:d6:ad:76:
         e6:eb:3f:46:ed:e2:de:d1:95:f8:5a:c9:d2:a2:fa:79:63:b9:
         7f:48:36:d4:2b:d2:0e:29:81:bf:07:27:c7:50:3f:46:67:4f:
         08:a5:3f:4e:3d:b9:07:2a:ff:5d:8c:fe:0c:6d:72:4b:8a:42:
         c2:ca:cf:f3:09:91:2d:bf:85:45:73:b2:dd:d4:a5:0f:02:9d:
         35:6a:19:62:f8:34:cd:98:27:bb:41:ee:d8:ea:80:ef:63:2f:
         a3:f8:cd:50:16:ad:88:bf:f8:dc:27:43:86:31:ed:e9:19:f1:
         ab:ef:bb:78:bf:e6:71:65:73:1b:f7:13:1b:7e:0f:9a:a9:98:
         74:5b:28:02:f7:5b:8b:bd:a7:f4:78:b2:b9:2a:e2:f6:9e:66:
         78:1c:8e:1f:06:f2:3c:31:ed:aa:91:c9:24:80:07:b7:24:ba:
         92:b5:94:84:e9:61:88:b0:6f:d0:25:c9:3b:6d:b7:48:66:49:
         6c:5f:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org