Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/6e9107e5ea66c3c506ebe122fa96d58eab03c4a7.roa
File:                     6e9107e5ea66c3c506ebe122fa96d58eab03c4a7.roa (raw, json)
Hash identifier:          gC4PW9SzmcjeCE0QFoHwKPlGSqnmA6fHdVtL8dy39iY=
Subject key identifier:   B5:1A:8F:10:78:17:B9:19:82:D3:3D:66:42:BC:64:95:40:94:92:40
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       138D3C
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/6e9107e5ea66c3c506ebe122fa96d58eab03c4a7.roa
Signing time:             Fri 14 Apr 2023 08:30:09 +0000
ROA not before:           Thu 13 Apr 2023 08:30:09 +0000
ROA not after:            Sat 12 Apr 2025 08:30:09 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281340 (0x138d3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 13 08:30:09 2023 GMT
            Not After : Apr 12 08:30:09 2025 GMT
        Subject: CN=6e9107e5ea66c3c506ebe122fa96d58eab03c4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:ba:b9:c8:5c:6d:67:83:65:3f:d7:a3:81:
                    7b:47:a7:f0:70:c0:bd:ac:ce:61:29:58:16:d4:b3:
                    7c:73:f6:20:6e:df:5c:86:d3:06:de:58:d1:8c:88:
                    6a:b8:93:3b:6c:b1:fa:fb:3f:11:07:8f:24:32:e7:
                    8e:95:c2:3c:81:51:1e:3f:25:53:d9:4f:d9:03:38:
                    ec:d3:18:28:90:b2:bf:6f:23:41:c6:62:7c:30:df:
                    cb:ae:e7:72:2c:15:76:4a:ea:7c:93:08:8c:73:01:
                    0d:27:12:49:12:45:8a:67:0f:92:25:1b:d3:9f:fe:
                    13:08:f7:3a:6f:f7:36:d0:8d:df:d7:b4:65:9b:46:
                    29:b7:28:ce:e0:46:3e:ed:c8:74:46:90:5d:9c:81:
                    f6:cf:e2:1f:51:88:cd:8f:4d:65:83:9a:27:61:d2:
                    08:6b:58:7c:02:ab:07:98:77:5e:51:5f:13:0a:3e:
                    57:a2:e6:1c:97:b3:e3:17:10:43:83:b1:fe:bf:19:
                    e4:76:d2:9b:2b:3b:7d:39:6d:58:f9:b5:c0:c1:56:
                    48:6c:22:ca:3f:b6:d3:0c:72:33:ae:8a:14:c7:ca:
                    f8:20:fd:ff:9c:25:bc:05:df:0f:92:78:b6:47:50:
                    dc:0d:06:f9:73:99:3b:78:96:7c:60:ca:23:dd:d5:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1A:8F:10:78:17:B9:19:82:D3:3D:66:42:BC:64:95:40:94:92:40
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/6e9107e5ea66c3c506ebe122fa96d58eab03c4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:52:0d:d5:f6:a8:70:34:d9:e1:09:ff:e1:78:97:e3:97:
         b8:6d:62:29:03:b2:3c:8e:ee:16:ad:59:e2:16:95:68:31:5e:
         0e:5b:ee:60:06:29:9c:1e:9f:d9:6d:bf:28:1d:cf:6f:3c:d0:
         3f:66:02:af:04:67:aa:1b:36:02:48:30:fa:d1:e0:f3:9c:8c:
         44:dd:f4:04:69:56:8f:14:c9:6d:bd:d8:3b:49:ef:6c:5d:c4:
         9a:1c:ed:33:4b:cb:0f:d1:ba:ca:9f:d5:50:f9:da:8b:7c:e9:
         55:a2:c2:05:77:e7:b0:b8:1d:35:3e:e1:70:da:2e:a8:81:c3:
         8e:32:14:70:2c:7c:54:c5:63:8d:e0:4a:f8:90:40:b6:a7:92:
         4d:3b:8a:9c:e4:62:9f:e3:60:0a:1d:74:52:2d:1b:8c:97:bd:
         65:47:49:38:4f:65:3f:44:b2:dd:f5:ce:29:d2:87:8d:70:21:
         81:b7:64:d4:f0:d2:1a:67:10:b5:37:3f:69:37:ce:bd:96:03:
         c4:d2:58:18:56:99:99:dd:76:7f:60:7b:f4:d1:90:68:6e:74:
         85:48:91:a0:64:7b:44:92:0d:60:8f:68:be:1a:79:7b:2a:a5:
         00:df:de:26:f5:ee:8d:85:84:37:7d:2e:92:06:24:11:41:39:
         f8:cf:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org