Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/793486e5a948d421b9bd53cbdcd760d646cf2836.roa
File:                     793486e5a948d421b9bd53cbdcd760d646cf2836.roa (raw, json)
Hash identifier:          e6L9FV3bVY9cLNIJMh20Elx9UsbazMekSiski06aa3E=
Subject key identifier:   DD:96:EC:9D:BE:1D:AC:1B:F4:DC:29:1B:76:E4:AE:3A:92:89:97:C8
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       137F6D
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/793486e5a948d421b9bd53cbdcd760d646cf2836.roa
Signing time:             Fri 14 Apr 2023 08:30:04 +0000
ROA not before:           Thu 13 Apr 2023 08:30:04 +0000
ROA not after:            Sat 12 Apr 2025 08:30:04 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277805 (0x137f6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 13 08:30:04 2023 GMT
            Not After : Apr 12 08:30:04 2025 GMT
        Subject: CN=793486e5a948d421b9bd53cbdcd760d646cf2836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:e1:da:2f:cd:6d:e5:ee:69:59:3a:b3:7e:
                    c8:d3:54:18:2a:aa:ab:18:80:f1:2b:0a:9a:e6:9e:
                    ef:76:fb:2b:22:35:6f:e6:b7:8f:89:58:bc:4f:c6:
                    e1:f1:29:2d:3e:b4:0c:6b:33:fa:98:50:4a:4d:94:
                    74:0d:e7:be:04:38:49:a4:9c:01:45:f2:50:f1:f3:
                    9e:5d:4a:4f:fb:0b:68:fb:7a:31:c3:2e:ee:79:99:
                    33:b2:f8:2d:2c:c7:23:73:8b:d7:ba:c8:47:23:c1:
                    d7:b2:71:c1:97:38:ad:34:86:5e:d0:dc:bd:56:5c:
                    a7:7b:77:98:8e:62:5f:61:49:f4:cb:3f:ec:98:f7:
                    12:cc:bc:cb:d4:77:3c:d7:b1:4c:a9:a8:09:a7:5e:
                    bf:87:58:f6:d3:af:87:b5:6f:36:0e:d3:98:4c:9b:
                    b1:d5:46:40:7e:9d:dd:21:d1:e2:fe:87:72:09:17:
                    5e:c3:01:d9:b6:65:f7:cf:64:35:33:4f:67:e6:45:
                    7b:3a:40:a2:c2:6d:9f:94:91:cb:d1:91:2d:35:e6:
                    bd:25:d9:71:06:22:11:27:40:f9:ca:e8:e6:17:1d:
                    49:df:b0:13:d0:87:32:72:55:60:75:9b:2c:6f:c8:
                    a2:11:b4:a9:f1:34:cb:e2:1c:b0:65:3a:4a:0a:37:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:EC:9D:BE:1D:AC:1B:F4:DC:29:1B:76:E4:AE:3A:92:89:97:C8
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/793486e5a948d421b9bd53cbdcd760d646cf2836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:fd:27:ca:b0:44:fa:56:b0:b0:de:67:0c:e0:78:ae:db:
         e5:6c:e8:64:fc:86:3e:54:0c:91:b6:9e:78:f3:a2:51:f0:48:
         6b:f0:87:f8:4e:d7:0c:4a:2a:e6:08:5c:c3:3d:fd:6c:c1:1b:
         d0:fd:e3:48:31:36:5b:91:a8:12:74:e4:4f:c2:2a:3e:a1:df:
         6f:3c:72:52:45:e5:db:77:b5:b4:71:c2:11:0e:fd:86:69:27:
         22:6e:62:2c:d9:d5:0e:a3:14:e6:90:1c:17:41:3f:3b:6c:7d:
         1f:c2:e3:71:45:e9:73:be:c6:08:bc:13:98:a9:9f:dc:be:13:
         7c:95:9f:94:4f:cb:7d:60:a8:05:aa:79:25:e7:5b:83:21:eb:
         bd:50:b9:4d:59:da:2d:74:c5:71:f3:ae:2e:77:e4:46:b8:53:
         ed:44:75:16:50:3f:11:81:af:1b:e9:63:ab:b5:06:78:36:89:
         e1:76:f9:5a:64:05:8b:16:68:90:a0:a1:c9:2b:e6:56:bd:3d:
         02:36:c9:37:9f:f5:86:32:f7:fb:a9:a6:3b:8f:a1:7a:7f:be:
         17:d6:e8:c7:1d:21:21:bd:99:e6:ea:c6:de:f6:e1:87:b0:af:
         25:39:f1:12:f9:15:16:51:c3:e5:77:4b:f8:bc:2a:c4:2c:72:
         05:bd:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org