Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/6a379583c161ace23fe7bd96e86b98760936a49e.roa
File:                     6a379583c161ace23fe7bd96e86b98760936a49e.roa (raw, json)
Hash identifier:          gLvNBASTV4MORjhtz/bf2IOoe6piP08/C9vSiBsCTFo=
Subject key identifier:   CB:1C:EB:E8:89:2C:6C:D8:FC:71:17:68:11:9E:14:9D:6C:59:47:58
Certificate issuer:       /CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Certificate serial:       0BC8B0
Authority key identifier: 20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/6a379583c161ace23fe7bd96e86b98760936a49e.roa
Signing time:             Wed 22 Dec 2021 16:08:05 +0000
ROA not before:           Wed 22 Dec 2021 03:00:00 +0000
ROA not after:            Mon 22 Dec 2025 03:00:00 +0000
asID:                     263218
IP address blocks:        45.191.244.0/24 maxlen: 24
                          45.191.245.0/24 maxlen: 24
                          45.191.246.0/24 maxlen: 24
                          45.191.244.0/22 maxlen: 22
                          2803:b4e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772272 (0xbc8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
        Validity
            Not Before: Dec 22 03:00:00 2021 GMT
            Not After : Dec 22 03:00:00 2025 GMT
        Subject: CN=6a379583c161ace23fe7bd96e86b98760936a49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:57:b7:0c:e4:6f:d0:0a:c1:d5:e8:b2:ad:20:
                    b3:d3:90:a8:55:9d:d7:e5:85:af:52:4a:8e:b5:9c:
                    02:f9:aa:79:5e:6c:5e:03:84:8c:e4:2e:dd:67:df:
                    f8:b6:e8:b5:b7:23:0f:58:f0:b6:9e:0b:b5:a8:ae:
                    0b:30:fa:74:fc:80:4a:9d:77:1c:43:16:7d:e3:98:
                    df:2c:e8:2a:7f:e5:d3:4e:ba:ad:5a:6e:7d:e7:e6:
                    d0:86:3d:de:a4:56:90:77:19:d6:d2:9b:13:d5:59:
                    48:93:e3:2c:39:65:a4:9b:b5:67:25:21:d5:62:7f:
                    b6:12:f7:53:5f:19:0c:7f:d0:8a:12:a6:0d:d4:f1:
                    fc:e6:c4:76:b7:47:a0:7f:60:69:92:50:5b:28:42:
                    54:3d:ad:dd:c0:e4:73:6d:77:9b:91:ca:15:91:87:
                    1b:56:74:a2:84:22:b7:82:ff:b2:18:00:17:d8:04:
                    9a:a9:52:5b:fe:d8:67:b4:46:c4:7b:d4:e5:c6:74:
                    00:66:60:e1:35:48:aa:5c:02:6e:23:d5:4c:3c:38:
                    15:55:fd:95:6c:57:93:bd:17:18:21:98:50:f9:6b:
                    52:7a:77:e6:97:62:0b:02:4d:c8:ae:1d:ec:7b:27:
                    bd:0f:d1:19:7f:6d:53:c8:15:d7:db:a5:88:30:a3:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:EB:E8:89:2C:6C:D8:FC:71:17:68:11:9E:14:9D:6C:59:47:58
            X509v3 Authority Key Identifier:
                keyid:20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/6a379583c161ace23fe7bd96e86b98760936a49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/ffe64fcbdace0b26df99b62a807cea23c8707e12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.244.0/22
                IPv6:
                  2803:b4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:90:93:b3:66:25:2b:9f:85:c4:6e:20:29:33:75:cd:50:70:
         b4:72:91:fd:e9:29:e1:4f:e9:e4:f0:83:23:10:2a:41:bc:21:
         a5:aa:d1:cd:3f:99:f6:50:ab:50:6b:4c:51:76:0e:cc:bf:82:
         03:09:ac:10:42:d8:e6:4f:0d:f5:b9:8e:28:ab:80:a1:d2:cc:
         7a:03:16:53:b4:15:5d:d6:45:0d:4b:f5:65:7f:62:77:32:57:
         0c:58:8f:ba:21:b4:76:e4:4b:60:71:bd:04:cf:8d:8d:88:d9:
         4d:fb:ad:7f:9a:70:42:a4:91:bc:15:a0:d2:f7:df:62:ad:4c:
         ae:14:0d:e6:03:b0:1e:7a:f4:b1:94:ec:a1:3d:81:11:61:bf:
         91:b1:60:cd:e1:a0:c3:29:c4:39:55:40:cc:47:d2:db:89:0a:
         3a:d2:72:00:3f:15:12:cf:79:8d:c3:87:2d:ff:cc:ec:51:e4:
         8b:85:86:e7:50:0e:34:09:01:a3:69:b7:6d:67:d7:80:f2:a8:
         05:a4:a9:6d:0c:8b:c0:82:e1:48:b1:0e:fb:d5:76:3a:42:c6:
         2a:61:69:39:3e:64:14:08:3d:7a:d0:cf:b8:7e:47:b6:05:c9:
         f0:5d:ce:ca:b6:e3:b3:aa:2b:46:d6:d1:26:c7:1e:8a:63:b9:
         e4:cf:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org