Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/6cf600da11fb75668e28c757f51e421f08d6e692.roa
File:                     6cf600da11fb75668e28c757f51e421f08d6e692.roa (raw, json)
Hash identifier:          Q/2vpR8ftUd64eyLfXc1Ks+QDsSgAHS8PW/T7A9NQSk=
Subject key identifier:   B9:4E:65:86:19:C7:3A:98:42:BC:EA:F4:73:0E:57:70:D7:69:F1:3D
Certificate issuer:       /CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Certificate serial:       259E9E
Authority key identifier: 18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/6cf600da11fb75668e28c757f51e421f08d6e692.roa
Signing time:             Sat 17 Feb 2024 01:04:52 +0000
ROA not before:           Sat 17 Feb 2024 01:04:51 +0000
ROA not after:            Tue 17 Feb 2026 01:04:51 +0000
asID:                     23470
IP address blocks:        45.170.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465438 (0x259e9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Validity
            Not Before: Feb 17 01:04:51 2024 GMT
            Not After : Feb 17 01:04:51 2026 GMT
        Subject: CN=6cf600da11fb75668e28c757f51e421f08d6e692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:19:00:9e:43:2f:4d:bf:f7:37:a7:38:cc:
                    07:88:15:83:83:74:92:e6:8e:b0:31:3e:5b:43:11:
                    7e:5a:92:20:e5:ad:cd:31:44:58:b3:e9:7f:3c:01:
                    fd:61:2e:4a:82:26:19:94:7d:73:26:eb:18:cb:ad:
                    da:d6:bc:8a:3b:00:d4:92:c0:f4:f1:44:4d:10:d4:
                    97:05:49:17:d4:ff:1d:6f:82:4d:00:63:6c:fe:24:
                    f7:82:e1:db:74:28:18:ca:4f:f2:8e:ca:5b:19:f8:
                    20:27:35:f1:23:13:aa:2d:cc:9f:cb:ff:bf:bb:05:
                    b6:8e:f2:05:6d:b2:0e:ec:db:4e:49:56:2e:92:bb:
                    34:f4:e4:57:63:cd:e2:f6:ae:eb:fb:e0:95:91:65:
                    2c:6c:6e:01:9e:f1:ea:2d:5f:d2:d8:87:81:2e:6b:
                    f0:76:f7:c6:3b:cf:fd:36:e9:6e:ea:93:bd:33:dc:
                    11:b3:c6:31:7b:b9:28:b8:d1:6b:42:71:fa:3d:d9:
                    b0:04:b4:85:67:35:fe:84:34:94:80:19:1e:4d:f6:
                    72:cc:b0:29:e4:d3:4a:90:10:be:44:51:1d:47:63:
                    34:96:6b:92:ca:c1:dd:e4:ed:32:7c:eb:a3:39:12:
                    ee:70:6e:9e:e3:77:2b:51:76:3e:d0:18:55:47:86:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:65:86:19:C7:3A:98:42:BC:EA:F4:73:0E:57:70:D7:69:F1:3D
            X509v3 Authority Key Identifier:
                keyid:18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/6cf600da11fb75668e28c757f51e421f08d6e692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:04:0b:58:46:51:66:9c:50:82:df:e3:fd:dc:e1:43:02:d9:
         ea:f5:b4:9e:85:86:38:51:de:94:0e:3c:0b:5d:f3:fc:8a:b0:
         87:84:61:1e:8f:88:d7:f1:fd:ab:bc:a8:a7:1c:2a:84:2d:f3:
         98:db:95:15:5f:4d:3a:9d:c2:de:67:7a:b5:10:31:00:54:0f:
         cd:20:7a:f5:5b:e0:f4:a5:72:8b:9c:ae:7b:64:21:53:08:4d:
         6f:f9:ca:b8:f7:95:1f:10:b5:38:61:18:ee:42:55:4c:50:36:
         b2:0b:e2:f8:76:fd:5d:91:0f:8b:96:13:27:1f:b6:1f:ac:37:
         11:e9:e4:9f:8b:c9:db:b9:ee:87:89:24:7f:51:fe:c3:de:ef:
         f7:d6:87:57:91:77:a6:a8:7c:e2:c3:40:88:85:e5:ca:6d:df:
         83:64:71:1c:f3:10:a0:98:37:98:87:5b:5a:96:08:79:39:c8:
         2c:ee:f8:d6:35:4c:59:5a:fa:8e:86:0c:43:4b:a8:df:98:93:
         f4:e8:58:1d:1b:80:f8:af:0c:89:34:42:b1:d3:6f:b3:37:40:
         da:a0:c7:f6:20:5c:bd:12:d6:22:c2:ea:23:61:bd:1c:ea:d8:
         6d:86:78:fd:2d:f0:97:df:60:43:6d:8e:36:3c:62:12:59:07:
         84:9b:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org