Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/6544ad2bd223050a29d3dc24f7106f7921198ef2.roa
File:                     6544ad2bd223050a29d3dc24f7106f7921198ef2.roa (raw, json)
Hash identifier:          umnfuLwamqdgEOMlee61Hxt2x9kNtG0wxlK/4GRqWZc=
Subject key identifier:   5F:56:99:BF:2E:A9:3C:D4:D7:86:42:F9:A3:19:63:E5:FD:E5:3E:72
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       21D181
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/6544ad2bd223050a29d3dc24f7106f7921198ef2.roa
Signing time:             Fri 16 Jun 2023 17:17:42 +0000
ROA not before:           Thu 15 Jun 2023 17:17:42 +0000
ROA not after:            Mon 16 Jun 2025 17:17:42 +0000
asID:                     262186
IP address blocks:        45.65.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216321 (0x21d181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Jun 15 17:17:42 2023 GMT
            Not After : Jun 16 17:17:42 2025 GMT
        Subject: CN=6544ad2bd223050a29d3dc24f7106f7921198ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:ca:f3:4a:bb:16:c5:9d:72:05:82:1e:2e:
                    1c:63:a6:1b:b8:78:83:e0:c1:36:6f:56:c8:62:44:
                    d1:ac:ee:5c:e3:00:cb:58:52:06:b1:7d:d8:f8:64:
                    99:dc:b8:5e:49:2c:43:d1:32:46:fc:74:66:81:7b:
                    84:47:2e:54:9b:3f:87:d2:58:d0:3c:4a:59:f7:87:
                    b2:13:30:0e:28:31:73:a0:b8:ac:20:e8:0f:d1:36:
                    39:56:83:ef:3e:95:2e:a0:da:b5:df:0c:83:9d:63:
                    f0:b0:4e:bb:d6:5c:37:49:7d:e8:e8:44:4f:b0:0e:
                    b2:c3:09:af:67:32:f3:65:54:5f:22:9d:c2:21:48:
                    44:a7:4a:ea:ac:7c:85:44:b2:35:b8:10:b4:4e:33:
                    f6:7e:42:b7:fd:f8:aa:07:a0:72:88:69:30:83:af:
                    17:d2:98:c7:11:14:a1:3e:69:b3:91:ef:cf:8f:bc:
                    3a:4b:48:c0:85:9c:15:18:e2:93:a3:7b:c0:0e:87:
                    aa:67:75:07:f4:8a:bb:07:7a:09:d8:e4:3d:39:e8:
                    8d:d0:95:ba:17:38:a6:d1:9c:8c:cf:53:2e:fb:2b:
                    f1:2d:70:d9:9f:42:0f:87:b7:1b:e4:c6:04:c6:95:
                    5a:03:c9:c3:b3:1a:94:46:5d:7c:2a:9f:d4:46:17:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:56:99:BF:2E:A9:3C:D4:D7:86:42:F9:A3:19:63:E5:FD:E5:3E:72
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/6544ad2bd223050a29d3dc24f7106f7921198ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:48:a5:42:bc:29:b9:c2:7a:59:45:d1:b8:50:4b:10:2a:59:
         9f:76:bd:b2:43:bb:47:cb:8c:81:cb:0c:76:3c:ad:38:d4:02:
         ab:82:8b:ee:87:51:31:3d:08:76:c3:6a:9c:c1:55:b8:f7:5d:
         a6:9a:18:95:64:de:0d:d5:93:1e:ad:85:cc:ae:6f:93:ab:b0:
         7f:a1:de:c5:2b:5e:03:ac:48:bb:3c:f4:17:d0:17:aa:84:5f:
         b8:22:2c:9a:92:c1:3e:67:6e:ec:78:35:6a:03:41:53:b7:31:
         d3:0f:46:8d:0d:bf:07:95:5c:cd:dc:9f:54:e1:15:d2:5c:b1:
         83:21:ff:ff:33:03:cf:ae:0e:3a:77:0a:dc:94:93:c5:f7:0b:
         2e:49:2b:f7:76:8e:c7:72:73:a1:7b:0f:ac:0e:fc:cc:41:79:
         ea:04:87:52:06:ba:07:7a:ae:0e:d4:5e:e0:14:39:a6:a0:29:
         b2:cb:8b:c5:db:91:34:e9:27:6d:29:23:9a:12:9c:7d:1e:c5:
         ed:75:bb:b8:50:3b:d1:b1:d3:d6:a4:2b:e6:2b:da:69:b6:16:
         3f:6a:75:cc:c3:f5:09:c7:a0:a5:99:84:f9:4b:80:46:31:8e:
         23:fd:37:c2:06:c8:0d:ba:09:0a:ab:e3:6b:aa:66:70:5c:09:
         f6:d3:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org