Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/6a24bf0b83926409d96b1589ecc1fd34184d7812.roa
File:                     6a24bf0b83926409d96b1589ecc1fd34184d7812.roa (raw, json)
Hash identifier:          o5bevWFdTUfFCB42+sjxunf7Rx2/iHC3KrZch5+HEeQ=
Subject key identifier:   AC:F3:A9:26:34:CE:81:22:71:07:F7:44:20:10:41:7C:CA:A7:52:5E
Certificate issuer:       /CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
Certificate serial:       209336
Authority key identifier: 38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/6a24bf0b83926409d96b1589ecc1fd34184d7812.roa
Signing time:             Fri 26 May 2023 20:02:51 +0000
ROA not before:           Thu 25 May 2023 20:02:51 +0000
ROA not after:            Mon 26 May 2025 20:02:51 +0000
asID:                     265833
IP address blocks:        45.70.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134838 (0x209336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
        Validity
            Not Before: May 25 20:02:51 2023 GMT
            Not After : May 26 20:02:51 2025 GMT
        Subject: CN=6a24bf0b83926409d96b1589ecc1fd34184d7812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:c7:cf:d1:18:f3:12:81:4a:9b:fc:25:f0:
                    3e:80:a5:b5:83:1e:b4:fc:65:2e:f6:3a:65:f2:14:
                    41:ef:03:1a:e9:74:21:65:e7:27:53:35:6c:76:f8:
                    3f:8d:95:8b:16:41:4d:0e:81:2e:6a:e7:ee:49:fe:
                    e8:3a:4c:ca:18:d1:59:8f:26:eb:6b:fd:04:83:14:
                    62:5a:81:9a:66:6b:b1:29:2e:e1:26:b5:8b:ad:78:
                    b5:47:4a:51:de:3a:e6:61:59:f5:66:87:f5:54:28:
                    5d:6b:b8:63:cf:98:14:2d:26:85:df:1e:f7:02:6a:
                    be:40:39:0b:a4:cf:5f:b5:51:e7:2c:10:33:df:4d:
                    63:52:fa:8e:df:bf:f9:f8:c8:e2:10:73:88:b1:0f:
                    ee:d9:cf:6f:5e:e9:c9:06:07:6c:eb:09:3f:7c:dc:
                    ab:ee:5d:2b:ce:30:52:75:27:d2:23:18:99:de:51:
                    e6:bc:0b:b9:fe:d8:b9:4b:4c:9c:ab:20:db:01:b5:
                    61:5f:fc:d4:37:fa:0b:0f:77:79:64:0f:59:16:99:
                    48:e2:69:30:36:e6:61:b0:49:95:67:02:b5:0b:aa:
                    e5:35:b7:ec:a0:77:f7:87:0c:2a:65:f4:c5:87:69:
                    9e:83:2a:2d:d8:bb:6c:57:11:e4:2e:a9:aa:3c:9c:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F3:A9:26:34:CE:81:22:71:07:F7:44:20:10:41:7C:CA:A7:52:5E
            X509v3 Authority Key Identifier:
                keyid:38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/6a24bf0b83926409d96b1589ecc1fd34184d7812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:43:fa:32:e3:23:00:6c:24:f5:4b:d5:8a:f2:77:ec:1c:
         ca:a9:96:9c:3e:e6:5f:db:be:1e:53:08:05:9e:97:f8:fa:5d:
         85:de:87:82:26:da:66:41:fc:9e:e8:77:a2:2e:b2:a9:d7:96:
         91:8b:89:e0:78:68:d3:c7:ce:c9:d9:1e:46:37:de:e2:04:b4:
         8c:7e:d6:2c:39:26:31:94:eb:2f:bf:45:82:18:6e:f2:e1:fe:
         cf:d5:ec:4a:29:20:5a:36:7e:29:60:b6:a7:09:38:11:c6:e2:
         cc:8d:7f:8f:63:51:2a:af:9a:ba:84:3d:f0:98:ab:43:e0:e9:
         2f:a3:4c:36:64:4a:12:55:f8:6a:e6:3b:39:8e:7d:bd:d2:d1:
         ab:3c:6c:f8:42:4a:85:c4:62:f5:c6:e6:f8:d0:a9:cd:72:28:
         1b:9e:1f:e1:e0:5a:b9:5a:1f:32:24:27:f8:0e:0e:8a:12:54:
         c9:f0:1e:8c:ef:07:cf:ba:07:cc:eb:70:80:17:00:b4:5e:72:
         b0:0c:d9:83:65:75:2a:1e:a7:e3:bd:1d:da:6d:cc:c3:d6:be:
         d1:75:bb:14:50:0b:42:d9:14:56:31:c3:ed:d2:cc:8b:55:4b:
         7c:a7:43:05:97:d8:a3:a1:c1:86:b9:90:dc:9a:73:09:66:a6:
         73:5d:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org