Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/049722fb7c20e637cafee363a43c4491e190afde.roa
File:                     049722fb7c20e637cafee363a43c4491e190afde.roa (raw, json)
Hash identifier:          ffzaoFhn0rCKehbjR2i9pQzBIxWpRe6xv1FtzrM930I=
Subject key identifier:   41:36:DA:00:6E:A1:5C:DD:53:E0:F9:EA:F8:BC:4B:B7:51:17:0D:9A
Certificate issuer:       /CN=13e36a619c735065b41044b121f1885f2666878d
Certificate serial:       7E14
Authority key identifier: 7B:93:B4:2C:2B:82:40:1B:5C:51:73:0A:0E:E6:AA:F9:22:02:21:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e36a619c735065b41044b121f1885f2666878d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/049722fb7c20e637cafee363a43c4491e190afde.roa
Signing time:             Tue 06 Jun 2023 00:36:55 +0000
ROA not before:           Mon 05 Jun 2023 00:36:54 +0000
ROA not after:            Fri 06 Jun 2025 00:36:54 +0000
asID:                     64150
IP address blocks:        45.68.34.0/23 maxlen: 24
                          2801:17:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32276 (0x7e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e36a619c735065b41044b121f1885f2666878d
        Validity
            Not Before: Jun  5 00:36:54 2023 GMT
            Not After : Jun  6 00:36:54 2025 GMT
        Subject: CN=049722fb7c20e637cafee363a43c4491e190afde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:00:17:1b:01:cd:e6:30:97:9e:77:cc:ec:
                    fe:8e:f3:91:6d:93:fe:75:76:65:8b:26:d3:5c:e4:
                    89:42:a8:b2:82:d1:1f:d8:59:1a:31:ab:84:51:95:
                    90:3f:ec:18:56:55:3f:ef:26:47:47:80:8c:12:5a:
                    80:8f:cb:51:20:67:ed:1d:87:6c:1f:78:6a:78:ab:
                    6d:42:99:69:84:16:7f:49:17:10:ce:ed:04:e3:84:
                    ee:64:cb:ed:a1:a1:13:60:b6:2f:9e:3f:e8:77:f4:
                    e1:23:75:83:cd:0e:72:04:3a:0c:9a:c9:58:1f:e1:
                    70:80:fc:5e:b6:b5:34:f8:ec:d2:5d:d8:1a:0c:1a:
                    41:9f:8a:03:78:b5:4d:af:9e:84:3b:97:75:44:93:
                    54:18:49:56:d1:90:cd:67:dd:b2:38:df:c0:e6:c8:
                    13:5f:35:e7:d9:f9:86:6c:fc:95:13:e5:60:a2:01:
                    96:2f:8a:05:50:86:e9:0b:eb:9f:aa:70:2f:f1:23:
                    28:11:89:84:54:67:ad:49:dd:2b:93:0d:d5:d2:7f:
                    e5:29:9b:be:a8:dc:f2:b8:d0:ec:f6:28:27:03:75:
                    3f:a0:e7:ce:f3:56:61:9e:48:9e:bf:13:7d:61:17:
                    ed:34:5e:66:53:36:de:17:76:55:ea:98:10:88:e2:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:DA:00:6E:A1:5C:DD:53:E0:F9:EA:F8:BC:4B:B7:51:17:0D:9A
            X509v3 Authority Key Identifier:
                keyid:7B:93:B4:2C:2B:82:40:1B:5C:51:73:0A:0E:E6:AA:F9:22:02:21:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e36a619c735065b41044b121f1885f2666878d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/049722fb7c20e637cafee363a43c4491e190afde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/13e36a619c735065b41044b121f1885f2666878d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.34.0/23
                IPv6:
                  2801:17:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:5c:5b:ee:40:50:d7:63:6c:ab:23:e9:15:f0:dd:18:31:
         e7:8e:8d:eb:09:1a:ac:72:00:88:61:45:1a:3f:32:c3:56:65:
         85:64:03:2c:1b:07:28:6d:02:79:df:0e:fb:93:23:23:ac:f4:
         7f:6e:ba:e2:f4:3b:10:55:28:2b:18:fe:66:75:76:2b:b8:a5:
         d0:62:97:62:24:af:23:ba:db:15:61:0d:87:70:42:28:f7:f9:
         34:f6:9d:fe:79:32:37:bb:05:e4:19:fc:21:25:86:30:ba:b5:
         ab:be:27:29:0b:f0:b4:9f:67:c8:4d:00:f5:54:7e:f9:d2:31:
         50:23:2a:c8:6c:41:8b:8c:fc:74:46:3b:d3:a7:d7:fd:a5:64:
         cc:42:44:fa:c3:08:33:f3:85:40:01:24:c1:d1:3d:30:12:85:
         57:ce:d6:c4:8d:44:46:d1:3e:9b:a8:80:33:9f:64:1c:f3:16:
         86:8d:09:84:19:f9:3b:b7:39:aa:5c:96:7e:a8:4d:88:2b:73:
         cb:16:66:73:19:04:fb:3e:e5:7e:b7:8f:3c:37:bc:4a:b3:34:
         f5:26:6a:f8:5c:74:ec:fd:15:ce:5f:22:1c:50:d8:98:35:f5:
         30:d9:7e:55:2c:d1:d1:77:39:57:a9:ca:4e:2b:b2:08:68:6d:
         92:c2:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org