Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/04fa46b7afdd2fb4b9a5ebdb14ac77229b72167a.roa
File:                     04fa46b7afdd2fb4b9a5ebdb14ac77229b72167a.roa (raw, json)
Hash identifier:          k9dSo8b2F95NeEtIJfbaUs6j/IOTRCmtFAYhE5PVBzA=
Subject key identifier:   A6:B6:A6:A9:C0:29:1B:1B:DD:73:18:38:6A:8E:82:58:4F:D2:F9:EF
Certificate issuer:       /CN=46d6d988c871f60a42be60f3a214a580497a2e54
Certificate serial:       B6A0
Authority key identifier: 0E:54:C2:3C:89:92:F5:28:07:22:17:F8:FE:65:C2:C5:52:B5:7A:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d6d988c871f60a42be60f3a214a580497a2e54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/04fa46b7afdd2fb4b9a5ebdb14ac77229b72167a.roa
Signing time:             Mon 08 May 2023 17:09:15 +0000
ROA not before:           Sun 07 May 2023 17:09:15 +0000
ROA not after:            Thu 08 May 2025 17:09:15 +0000
asID:                     265619
IP address blocks:        45.191.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46752 (0xb6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6d988c871f60a42be60f3a214a580497a2e54
        Validity
            Not Before: May  7 17:09:15 2023 GMT
            Not After : May  8 17:09:15 2025 GMT
        Subject: CN=04fa46b7afdd2fb4b9a5ebdb14ac77229b72167a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:20:61:e7:07:c6:8f:32:1e:45:ea:2d:30:
                    39:7b:16:a3:aa:ba:aa:11:fb:4f:b4:4a:b7:f3:6e:
                    52:4d:6d:30:43:e5:5b:08:5c:10:3c:27:5f:3e:a5:
                    87:af:6c:43:51:4d:37:a4:42:33:7f:e6:95:7c:5a:
                    e9:ad:b5:29:19:8a:03:21:e3:79:c9:ea:86:12:93:
                    59:f3:0f:50:03:12:7f:e7:ea:88:86:44:55:7a:de:
                    b0:39:c4:10:45:08:33:cf:1a:8b:03:f6:68:60:ad:
                    16:d4:06:36:09:c5:86:56:36:19:e5:67:9b:9c:8a:
                    c7:91:12:be:97:4a:35:0b:de:16:51:b3:de:94:3a:
                    db:bf:03:a9:5e:f6:7e:45:06:63:7e:86:e4:51:25:
                    55:91:05:ff:ea:01:b8:51:30:73:ed:b7:62:4d:21:
                    ad:c4:86:38:a8:ff:c5:b7:31:81:44:e1:e5:26:76:
                    e6:4a:5e:43:6f:e5:3d:60:68:c7:e6:4f:fc:c4:e2:
                    0f:60:9b:8a:6b:75:11:20:90:a8:1b:2d:15:9f:78:
                    7e:89:6f:d3:20:59:41:d9:ab:38:c8:73:29:14:e6:
                    b4:12:8b:19:1f:af:ed:39:9b:d3:dc:8b:ee:bc:3a:
                    df:e5:cc:40:ba:90:a7:20:38:ca:12:d4:da:b3:5a:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:A6:A9:C0:29:1B:1B:DD:73:18:38:6A:8E:82:58:4F:D2:F9:EF
            X509v3 Authority Key Identifier:
                keyid:0E:54:C2:3C:89:92:F5:28:07:22:17:F8:FE:65:C2:C5:52:B5:7A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d6d988c871f60a42be60f3a214a580497a2e54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/04fa46b7afdd2fb4b9a5ebdb14ac77229b72167a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/46d6d988c871f60a42be60f3a214a580497a2e54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:ee:9e:24:20:ed:aa:d8:92:fa:b0:b2:ed:e9:83:85:ba:
         7d:82:0b:cd:fc:32:a6:54:6d:63:6a:dd:75:87:ae:9c:fa:06:
         40:31:2e:f6:ad:43:32:f2:77:7e:ae:da:82:8e:af:32:b0:08:
         76:9a:7a:64:90:fd:34:11:5a:55:31:20:7d:d1:9b:1a:34:0a:
         4e:01:fd:e6:fe:18:d0:80:0b:cc:63:9e:62:cd:ee:c5:52:8b:
         d0:8d:ad:47:91:28:2b:93:dd:61:1b:dc:40:72:82:01:f0:e5:
         23:45:5a:c4:84:75:c6:6c:2a:85:ab:dc:63:e2:42:1e:40:ec:
         50:99:b1:4e:e7:a1:ab:6d:30:2e:96:fa:ca:bf:da:a1:52:c7:
         7a:2b:3a:df:69:b5:74:48:fa:e9:0b:ea:5d:04:50:0b:bf:cb:
         eb:8f:8c:71:ef:e2:c9:f0:94:70:63:d2:7f:19:0a:cd:9f:d2:
         58:41:31:83:c0:3d:2a:f9:a2:35:60:4a:e2:bc:d2:70:ea:56:
         64:55:8a:54:6e:c7:0d:0a:e8:91:fb:98:86:fd:69:58:41:2a:
         07:f8:00:75:aa:9e:88:aa:38:b3:f2:ba:d5:43:8a:a0:5e:65:
         a4:06:34:19:11:82:a2:73:7f:fc:3c:dc:1f:29:ca:a0:67:66:
         6d:c3:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org