Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/6a6307d87526b57da4ce8c21a44baaa01748a787.roa
File:                     6a6307d87526b57da4ce8c21a44baaa01748a787.roa (raw, json)
Hash identifier:          2vwX30BayHhik5ZDkqp5QRMxPlp3Lt9ojS1lGnJrmOI=
Subject key identifier:   35:1D:30:64:F5:36:03:B3:D5:A7:92:40:CF:E9:EB:B5:31:2E:4D:F2
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       116F4E
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/6a6307d87526b57da4ce8c21a44baaa01748a787.roa
Signing time:             Thu 26 Jan 2023 20:00:08 +0000
ROA not before:           Wed 25 Jan 2023 20:00:03 +0000
ROA not after:            Sun 26 Jan 2025 20:00:03 +0000
asID:                     262186
IP address blocks:        45.173.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142606 (0x116f4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Jan 25 20:00:03 2023 GMT
            Not After : Jan 26 20:00:03 2025 GMT
        Subject: CN=6a6307d87526b57da4ce8c21a44baaa01748a787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:ff:6d:34:a6:62:d0:7c:5f:b8:20:fa:74:
                    d4:fd:b3:56:c2:8c:57:38:0e:44:45:ce:59:81:78:
                    6a:5e:3d:42:87:54:db:54:f3:a3:2a:d0:18:2d:6d:
                    9a:50:7e:08:43:32:ca:93:37:a3:d7:30:d5:17:78:
                    c3:80:2b:3b:3a:02:9c:5a:e1:8f:23:35:fb:67:e1:
                    a1:c1:5b:18:71:23:3b:38:bc:43:8f:2e:2f:05:33:
                    1f:7e:d8:19:98:c7:f5:72:fd:c5:af:7c:8d:92:66:
                    54:23:42:dc:57:5f:b9:77:d6:08:d6:fc:52:a6:6d:
                    44:86:a9:b4:ad:e2:ca:f2:ce:ea:82:3a:a1:4b:c5:
                    d1:d0:3c:f0:78:66:75:7c:22:b6:14:cd:26:6b:a4:
                    0c:d5:a7:c3:fb:ff:e1:b3:86:37:e4:0c:11:62:96:
                    ae:ed:e2:4c:4c:52:65:9f:d1:5c:5a:70:72:52:58:
                    e2:fe:8f:5b:aa:e9:c6:fa:c0:4e:90:79:d0:06:42:
                    1d:b0:e7:c5:a0:97:1e:21:a2:83:1b:47:df:4b:a3:
                    e1:dc:5f:e9:ce:d3:cd:a0:cc:c3:f0:c8:b3:96:1a:
                    27:59:22:d1:76:36:a9:3d:3b:4a:33:71:dd:c8:aa:
                    9d:6f:0d:aa:ca:28:d7:f5:20:2d:57:b5:c5:3a:fa:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1D:30:64:F5:36:03:B3:D5:A7:92:40:CF:E9:EB:B5:31:2E:4D:F2
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/6a6307d87526b57da4ce8c21a44baaa01748a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:39:06:5a:fd:6c:26:33:1b:d1:2e:04:17:52:74:ff:08:04:
         6e:c9:b7:97:81:7f:e7:40:aa:f8:9f:49:39:05:e0:df:6c:9a:
         5b:55:38:9c:4c:7a:f0:6d:16:96:26:e0:cf:0d:41:5f:ae:26:
         55:e0:06:c9:20:cc:77:29:5d:f8:8d:4d:a3:48:80:86:8f:64:
         86:db:b0:be:87:83:8a:00:1f:81:87:58:4f:eb:c4:9d:81:d7:
         49:7d:55:23:f8:59:d5:f6:34:f1:ce:4b:e5:6c:c3:1c:2f:e8:
         f6:1b:49:27:66:46:c8:5c:9a:e5:cc:ee:1f:e7:c1:76:09:89:
         06:7e:db:bd:91:d8:bf:16:70:c8:b6:68:f8:28:3f:6e:56:c0:
         a5:dc:4e:a7:bf:86:a5:04:3e:be:88:0f:7e:4e:c5:50:53:c2:
         fb:d7:73:e5:5f:be:3d:62:cf:de:f4:74:21:74:f1:f2:3b:79:
         06:20:34:c0:7c:2f:71:a5:dd:20:95:e8:fd:e7:5c:ce:89:6f:
         67:e6:d0:5e:f0:64:cf:30:01:ef:e4:f1:84:0b:8b:11:8a:f8:
         13:68:f1:54:78:f1:23:02:b3:d8:24:a5:61:2f:4b:a5:11:e4:
         3d:26:62:68:7e:24:ce:b9:67:f3:d3:23:a5:f2:56:5f:7b:0a:
         39:7a:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org