Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/b3a6813a8e88400ed3fc45976170033a6417b469.roa
File:                     b3a6813a8e88400ed3fc45976170033a6417b469.roa (raw, json)
Hash identifier:          v1mWPCMCJhpsbWbV7bZFhnKpA6n4huzaYq2rLafAeac=
Subject key identifier:   0E:C8:6C:79:D3:57:B8:21:AA:EF:20:32:E9:AB:F8:D9:56:75:81:F1
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       235ACC
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/b3a6813a8e88400ed3fc45976170033a6417b469.roa
Signing time:             Wed 20 Sep 2023 08:30:01 +0000
ROA not before:           Tue 19 Sep 2023 08:30:01 +0000
ROA not after:            Thu 18 Sep 2025 08:30:01 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317004 (0x235acc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Sep 19 08:30:01 2023 GMT
            Not After : Sep 18 08:30:01 2025 GMT
        Subject: CN=b3a6813a8e88400ed3fc45976170033a6417b469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:67:ce:30:95:f4:e0:72:d8:78:f0:fe:c4:
                    2e:84:ca:c0:e4:8d:52:1f:a5:11:d4:3b:71:e6:ec:
                    91:52:f7:5f:37:7b:55:ce:7b:49:32:67:98:4c:b7:
                    94:14:be:f2:c0:2e:31:31:74:33:21:ef:7a:1a:ab:
                    20:a6:4f:50:42:c4:bd:ab:1b:65:50:eb:da:e1:4f:
                    5f:83:d9:47:2c:5b:57:82:3a:92:54:c5:54:71:83:
                    f1:57:75:c3:7e:e2:a0:16:2b:50:bd:56:58:5f:9b:
                    7e:e7:c7:ee:8f:39:84:9c:eb:e4:19:57:cd:de:e5:
                    e9:42:cc:d0:51:5e:cd:f5:01:b0:48:1a:3f:22:7f:
                    e8:38:a8:41:6b:83:0c:2b:70:9d:d2:e1:00:6c:b0:
                    2a:40:ce:aa:67:93:01:64:d9:5a:da:36:f0:dd:e0:
                    2c:eb:dd:fa:6f:a3:56:80:45:6d:9e:9b:be:aa:81:
                    cc:69:2c:d3:f5:39:30:bd:fb:c8:0e:91:dd:6a:a0:
                    ad:4f:2a:95:fb:ca:e5:53:28:bb:48:78:16:bf:37:
                    98:bd:7b:82:84:6d:3a:21:2d:16:91:d3:d2:66:f9:
                    18:fe:08:ce:4d:b7:96:5c:e7:35:58:9b:0e:df:01:
                    1e:45:ed:9f:dc:0a:b2:10:85:33:2a:c1:c2:83:48:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C8:6C:79:D3:57:B8:21:AA:EF:20:32:E9:AB:F8:D9:56:75:81:F1
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/b3a6813a8e88400ed3fc45976170033a6417b469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e8:25:75:1f:1f:b8:90:ac:98:fc:91:af:4a:8f:c1:af:fe:
         a2:f1:c1:0d:d5:42:69:8c:2d:cc:76:d4:de:bc:d3:6f:0a:ea:
         e6:c2:86:6f:f5:02:37:c0:40:c8:64:1c:fe:0b:6f:24:1e:52:
         c3:72:a6:07:1d:50:fa:a3:0c:48:3a:35:16:c5:49:76:13:fd:
         82:0e:4d:8e:62:77:29:c2:91:44:78:64:00:da:d7:e9:8a:4b:
         70:50:c1:79:31:64:bf:a0:39:8a:8e:f9:7e:94:c4:4f:17:ad:
         0a:d1:c1:e9:66:bd:1c:c3:92:15:e1:df:a0:5f:a5:95:da:bb:
         01:32:78:af:5d:82:c6:e0:68:78:30:6c:4b:4c:02:d5:62:a5:
         60:46:6a:ac:27:1a:b8:65:8f:0d:f4:56:24:f8:b1:b7:7a:5c:
         0e:da:ab:af:af:4f:78:15:a3:2e:78:2b:a6:28:28:92:96:bc:
         27:50:22:f4:56:24:3c:4d:e0:c0:5f:34:d1:b1:7a:dc:72:48:
         26:1f:6b:1f:09:35:bd:66:cb:89:81:25:63:0e:a0:df:f1:44:
         19:a0:9f:ee:5c:75:a1:7a:44:17:59:73:d8:64:12:51:af:32:
         20:f5:54:63:12:fe:3c:a0:58:43:49:05:44:5b:e9:95:fd:c3:
         f1:96:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org