Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/46e7cdc195a3d4475d67b4adeaf989f244ba5ae4.roa
File:                     46e7cdc195a3d4475d67b4adeaf989f244ba5ae4.roa (raw, json)
Hash identifier:          wO/AhE22loH/3MVnOAbwf4t2Kyx5cvEejgj0ld338Lk=
Subject key identifier:   37:49:CA:4D:BF:35:38:90:70:A9:C9:20:A8:EF:68:33:E6:FD:66:0A
Certificate issuer:       /CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
Certificate serial:       2098D6
Authority key identifier: 38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/46e7cdc195a3d4475d67b4adeaf989f244ba5ae4.roa
Signing time:             Fri 26 May 2023 20:02:52 +0000
ROA not before:           Thu 25 May 2023 20:02:51 +0000
ROA not after:            Mon 26 May 2025 20:02:51 +0000
asID:                     27951
IP address blocks:        45.70.168.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136278 (0x2098d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
        Validity
            Not Before: May 25 20:02:51 2023 GMT
            Not After : May 26 20:02:51 2025 GMT
        Subject: CN=46e7cdc195a3d4475d67b4adeaf989f244ba5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:32:7b:41:53:b1:15:a1:00:4b:9e:be:4d:
                    34:88:9c:b4:d2:24:cf:63:f3:dc:ae:6a:1f:ac:a6:
                    55:1c:09:f4:50:29:90:7e:20:f9:b3:28:ee:5e:bb:
                    3b:0e:bf:91:dc:27:4b:43:5f:10:2f:48:e7:e7:ec:
                    19:96:dc:bd:7d:91:85:66:44:d7:6e:7c:48:8b:d9:
                    1c:df:a4:c6:12:d8:bb:c8:72:1f:78:9a:13:78:d2:
                    79:e8:10:de:28:3d:46:72:9f:38:1f:b4:30:83:94:
                    19:64:7e:1f:d0:cd:96:a0:e9:6b:97:45:f7:aa:05:
                    99:48:15:63:5c:bc:e8:eb:d8:11:6c:e5:84:50:e0:
                    81:df:c5:83:04:cb:d3:12:3d:8c:a2:94:23:00:4e:
                    20:22:ae:c5:2c:e6:76:67:0f:cb:d4:41:49:d9:8e:
                    63:0f:25:fc:bd:76:97:c4:c7:a4:14:ea:ff:38:14:
                    af:c2:9b:7c:8b:5a:28:7c:21:8e:7f:73:28:e0:d7:
                    d9:f2:74:03:44:f7:ec:b2:98:79:d4:4e:69:f6:d4:
                    50:b1:31:5a:cc:6e:44:01:22:59:b4:63:85:4c:37:
                    0f:58:20:a0:2b:8b:9c:34:a5:8a:9e:ce:5f:35:49:
                    19:f6:6a:f3:1f:11:a7:25:76:a8:b9:d5:6a:7f:63:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:49:CA:4D:BF:35:38:90:70:A9:C9:20:A8:EF:68:33:E6:FD:66:0A
            X509v3 Authority Key Identifier:
                keyid:38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/46e7cdc195a3d4475d67b4adeaf989f244ba5ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:b2:fd:3a:d2:d7:0a:f9:5a:d8:3c:41:f9:38:a3:ff:fb:
         85:59:e5:03:dc:36:b3:e4:9e:42:97:6e:78:4a:70:a9:6e:6a:
         6d:37:51:f3:16:c4:0c:8a:df:5b:1a:c3:35:2e:3a:57:dd:fe:
         cd:2b:2e:80:11:6c:72:1e:0b:d1:16:eb:a3:83:07:17:da:c1:
         61:f3:ff:e4:95:65:23:4c:fb:c2:6c:53:63:e0:24:98:5d:54:
         87:19:0a:0d:ab:15:8c:e1:f3:6b:79:9d:db:13:ec:40:ba:30:
         66:2d:6b:22:00:03:ee:4f:3a:6c:e6:7e:a7:a0:b9:b7:68:82:
         25:45:94:13:2e:25:e0:91:5c:fb:24:7f:e1:5a:9b:02:3d:90:
         46:a0:48:65:16:0c:32:68:c7:0b:1c:f2:6c:36:76:5c:74:e3:
         32:e9:dd:dd:e1:4f:ae:ff:0f:63:92:e9:5f:7d:61:9d:b6:fb:
         b8:6f:75:ed:fd:59:fb:5c:51:27:f4:94:27:91:6a:05:d0:fd:
         23:a1:a7:84:c3:bf:29:24:78:57:c5:8f:17:04:e6:69:9c:d7:
         8f:38:1c:57:e6:16:d1:34:36:df:6c:36:ca:37:ee:0e:ef:40:
         78:16:71:41:10:50:d3:7a:a1:d6:71:08:c9:66:48:b4:5e:c3:
         3a:25:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org