Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/7a22f1353aea9e617de580b5cb8123673102a6bf.roa
File:                     7a22f1353aea9e617de580b5cb8123673102a6bf.roa (raw, json)
Hash identifier:          MKGyJYax1zdO8Sp8tswojENhclEGIyQ1IX5XqvccMRg=
Subject key identifier:   CA:62:2D:BD:C5:1B:36:C2:73:86:A5:24:48:A4:8A:1A:3D:42:E0:49
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       16C2BB
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/7a22f1353aea9e617de580b5cb8123673102a6bf.roa
Signing time:             Tue 15 Aug 2023 14:11:11 +0000
ROA not before:           Mon 14 Aug 2023 14:11:11 +0000
ROA not after:            Fri 15 Aug 2025 14:11:11 +0000
asID:                     262191
IP address blocks:        45.173.6.0/23 maxlen: 24
                          45.173.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491643 (0x16c2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Aug 14 14:11:11 2023 GMT
            Not After : Aug 15 14:11:11 2025 GMT
        Subject: CN=7a22f1353aea9e617de580b5cb8123673102a6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:b9:d2:ab:d5:72:91:de:b2:b5:ea:24:81:
                    c6:8f:e2:bc:ba:e9:eb:99:52:06:25:cd:e0:aa:05:
                    f1:23:da:bf:11:35:ed:59:47:94:0f:c9:5d:0d:b0:
                    fb:12:3b:0e:27:72:31:fc:a2:46:8e:5e:34:0e:5c:
                    7a:41:50:ea:99:42:34:dd:73:6a:c4:aa:2f:a2:82:
                    92:3d:c5:0f:1c:97:99:98:6f:6c:c6:be:5e:2a:93:
                    69:7c:9c:09:d8:8b:46:61:4b:3e:bd:99:18:c9:ab:
                    06:91:55:86:97:e8:ca:6b:9d:f2:82:b1:9a:3f:f2:
                    95:31:06:f9:3d:73:7c:c3:3d:61:fb:50:0d:b9:1e:
                    1b:17:4a:1d:a5:6d:78:85:df:e7:00:4b:59:da:ad:
                    9a:43:92:fd:b1:fe:8b:54:c7:00:a1:8a:80:c8:0e:
                    6c:65:a5:3b:29:62:10:10:cb:c8:66:21:06:13:bf:
                    37:87:48:53:dc:b2:03:75:11:9c:1a:72:de:59:1f:
                    b9:bb:8d:1f:ea:e4:8d:cd:b8:db:b0:f2:9b:e5:7b:
                    dc:6f:2c:ce:0b:b7:10:8e:cf:bc:e2:da:7b:eb:8e:
                    a4:00:a9:11:e3:20:f4:37:5e:17:0c:e5:9e:ad:8a:
                    f8:26:3f:ce:e6:8b:9c:e9:29:bb:77:40:b1:d9:6b:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:62:2D:BD:C5:1B:36:C2:73:86:A5:24:48:A4:8A:1A:3D:42:E0:49
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/7a22f1353aea9e617de580b5cb8123673102a6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:24:c4:17:55:33:83:8b:4e:c6:33:d9:aa:9c:5c:b2:33:d6:
         51:cc:d6:9a:c0:25:d9:5b:63:ca:9f:4a:a6:8e:de:69:12:d9:
         99:a1:82:9e:24:7f:72:f6:c9:e3:73:d5:04:aa:03:85:73:b6:
         5c:60:70:78:95:03:26:e4:c5:e0:c2:d0:c4:60:3a:fa:6b:e8:
         0d:3e:57:50:f7:ce:c7:62:81:e4:6e:eb:3e:c2:86:72:bd:02:
         ea:8b:79:37:fe:9e:74:e1:53:0c:96:43:65:eb:8b:44:ca:d2:
         f6:53:ce:bb:29:82:b7:14:f2:f3:7c:e5:15:e3:d3:c9:c5:1b:
         2e:7e:de:c9:e0:6e:5b:28:b2:f2:15:17:df:df:05:b5:8a:d8:
         d8:67:bc:cd:f7:c5:dc:5c:be:c2:44:8a:9f:71:43:ae:98:b2:
         53:57:ae:81:a8:59:e5:57:cd:27:48:61:08:12:34:c5:e8:30:
         f6:49:3a:c0:42:a4:f9:e3:c3:83:af:11:c5:f2:82:dc:2d:a0:
         03:9f:81:1a:be:41:f5:cb:ed:f0:91:66:8b:83:55:be:44:1d:
         a9:66:a9:45:19:04:b5:8e:03:8a:fc:bf:14:8c:27:07:f8:8e:
         84:8b:12:f3:2d:b6:0f:a5:d9:41:e6:06:5e:0c:10:ca:db:5c:
         90:6b:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org