Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/6fabfd9e4261f638bc5ebbfde0215609722e1893.roa
File:                     6fabfd9e4261f638bc5ebbfde0215609722e1893.roa (raw, json)
Hash identifier:          tWsj5p9PdM33ao8Wt6G2UpXI0q6kXjveAsrhTjcqFkI=
Subject key identifier:   2F:3B:50:AD:E6:17:DA:3C:1B:FB:A4:71:9A:B9:BC:1B:77:21:6B:19
Certificate issuer:       /CN=222a52d30ba3eec506c4b1db1e0d991b13603988
Certificate serial:       21829A
Authority key identifier: AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/6fabfd9e4261f638bc5ebbfde0215609722e1893.roa
Signing time:             Wed 05 Jul 2023 13:48:15 +0000
ROA not before:           Tue 04 Jul 2023 13:48:14 +0000
ROA not after:            Sat 05 Jul 2025 13:48:14 +0000
asID:                     52468
IP address blocks:        45.70.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196122 (0x21829a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222a52d30ba3eec506c4b1db1e0d991b13603988
        Validity
            Not Before: Jul  4 13:48:14 2023 GMT
            Not After : Jul  5 13:48:14 2025 GMT
        Subject: CN=6fabfd9e4261f638bc5ebbfde0215609722e1893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:1c:3c:32:12:bb:c6:4a:3f:c2:9e:10:ea:
                    60:94:f2:50:88:ed:b8:ad:bf:c1:c6:20:4f:fa:2a:
                    9c:fb:5f:1b:f2:57:ff:c3:19:e1:4c:87:ea:bf:b8:
                    1f:79:3a:c2:05:3d:c7:a5:bf:8a:25:a9:97:85:82:
                    24:f8:91:85:de:a2:bf:90:91:91:c7:7c:6e:34:29:
                    fb:80:72:b1:8c:c1:94:36:92:4f:94:56:35:e3:1d:
                    62:17:3b:e6:8a:09:5d:3f:6a:72:4d:b4:8e:dd:09:
                    53:df:e4:14:c0:c7:fb:3d:09:de:e9:5d:8a:96:bb:
                    31:f8:e1:dc:44:07:c9:38:8d:9c:5a:76:bd:38:eb:
                    0f:26:56:37:89:a7:28:af:5f:6d:a6:79:9f:e1:9e:
                    6d:f2:2f:e8:64:1e:04:d5:8e:8e:9e:1e:47:4c:4c:
                    0c:ba:01:6a:d5:bb:00:ab:1e:3a:a5:31:4e:60:2e:
                    24:73:6b:a3:1f:a6:ee:e6:54:47:99:7b:0d:38:a1:
                    dd:55:a9:ac:a6:d9:28:5e:19:da:90:0e:1a:de:60:
                    7c:69:84:ae:4e:8f:d6:a7:44:b3:9e:28:d6:a4:8d:
                    29:30:b9:d3:50:47:13:0a:0a:84:7b:3c:90:22:b5:
                    9f:d3:75:b2:10:58:a5:14:e8:d1:4e:ef:fa:ff:fa:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3B:50:AD:E6:17:DA:3C:1B:FB:A4:71:9A:B9:BC:1B:77:21:6B:19
            X509v3 Authority Key Identifier:
                keyid:AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/6fabfd9e4261f638bc5ebbfde0215609722e1893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/222a52d30ba3eec506c4b1db1e0d991b13603988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:8c:2a:d0:5d:ce:94:b4:f3:ac:69:a9:eb:87:fe:fb:84:
         cb:a6:b2:b8:8b:e1:b4:59:b0:1b:a8:ce:d8:aa:86:23:29:67:
         83:c7:86:f7:e2:4d:98:82:ad:e2:9a:57:51:62:d2:ee:f3:00:
         8b:56:92:05:45:0c:66:06:5d:91:ef:bf:e9:01:2a:c3:c1:3f:
         b0:db:36:3e:5b:ea:36:da:1f:9a:61:1a:a0:cc:b8:18:f5:5c:
         96:ec:f3:ab:5a:0e:d8:19:c7:72:e5:1c:2f:12:dd:97:45:77:
         15:6a:ee:bc:1c:67:52:e2:d5:51:71:53:04:3d:f5:48:c8:4a:
         d6:5e:93:f5:78:79:dd:33:b3:8d:29:9d:b2:15:56:04:98:cf:
         7f:2e:ea:04:6c:c9:58:0d:ce:49:a5:37:41:3f:78:eb:b9:a0:
         7c:3a:9b:a9:21:cd:b5:3b:95:ef:83:1b:7b:87:0c:92:84:cc:
         dc:57:ed:bd:61:f8:01:d3:9e:c4:f2:36:01:d2:74:50:e6:35:
         b4:25:7f:a9:3a:d6:c0:c4:2d:f5:6a:e9:60:70:c1:eb:dc:04:
         6a:05:fd:c4:ff:20:18:24:c0:dd:49:05:99:2c:44:eb:e9:40:
         3a:75:24:5b:20:68:71:41:2b:4e:4f:44:53:3d:4c:1c:f0:c9:
         5f:0e:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org