Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4595ac6b92c0c4ea96334bc671af80fc52f829f0.roa
File:                     4595ac6b92c0c4ea96334bc671af80fc52f829f0.roa (raw, json)
Hash identifier:          dhYIqzl9U0J4oXGrj1cxL5gaHzi786iM1CHFpzTbRMI=
Subject key identifier:   F8:6D:8A:34:EA:A6:81:42:E6:70:C5:7A:E4:77:E3:2B:D3:0E:31:73
Certificate issuer:       /CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
Certificate serial:       192657
Authority key identifier: D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4595ac6b92c0c4ea96334bc671af80fc52f829f0.roa
Signing time:             Fri 17 Jun 2022 15:06:03 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648215 (0x192657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=4595ac6b92c0c4ea96334bc671af80fc52f829f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:0f:99:d7:90:8d:35:48:a2:57:2d:52:60:
                    46:59:d2:02:67:63:1a:8f:ae:84:1b:89:4b:d7:03:
                    da:22:ec:8a:e3:5f:7e:ff:8b:75:c6:b4:2e:79:3e:
                    2c:84:35:52:83:94:a2:aa:ec:d1:87:05:fd:33:b1:
                    f8:ce:4a:be:0a:3a:1c:f3:e4:70:93:4c:71:1a:ca:
                    07:3e:92:6e:31:d1:1d:0a:fe:15:7c:8c:53:f2:3d:
                    4e:6f:fd:ae:40:46:76:d4:99:f6:93:e9:f7:9f:64:
                    25:3a:dd:40:63:7d:f2:9d:04:1a:75:75:ed:d5:2e:
                    1e:ca:b5:df:e1:e3:1f:2c:e7:c8:f6:6f:b1:15:e2:
                    8f:a1:5b:33:16:88:33:d2:da:de:6b:aa:a8:bd:2e:
                    f4:7c:6a:ff:f9:6c:87:bf:bf:29:ae:30:f6:56:0b:
                    77:9c:ee:3d:05:7a:d8:42:ba:01:15:49:f6:90:d9:
                    9d:b4:42:a0:2c:98:5f:3a:39:e0:60:c6:08:ac:5d:
                    6e:05:f8:5b:75:5a:db:8a:07:00:ee:b1:cb:41:18:
                    7b:f2:ed:c4:81:0a:90:48:18:1d:e5:a0:80:81:4b:
                    3b:66:a4:04:5e:cf:4e:49:2f:66:57:de:53:92:e5:
                    e5:67:3b:fd:c4:b8:b0:90:83:bb:2b:15:e4:22:21:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6D:8A:34:EA:A6:81:42:E6:70:C5:7A:E4:77:E3:2B:D3:0E:31:73
            X509v3 Authority Key Identifier:
                keyid:D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4595ac6b92c0c4ea96334bc671af80fc52f829f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:9d:92:93:d2:f8:7e:c3:e8:03:5d:fd:09:3f:cc:40:f8:
         68:29:25:84:26:0d:ad:0e:b3:91:27:e5:f3:21:8b:56:3f:78:
         3d:d5:83:d3:65:46:fc:61:fb:42:a3:81:f8:34:7e:c3:c9:6b:
         3a:3b:eb:58:80:b9:ff:0c:e7:b2:7d:25:cb:9d:04:c1:1f:d1:
         61:cf:d4:99:6f:99:d7:eb:c5:6c:08:f2:d8:dd:ce:4b:99:e6:
         a2:03:65:e8:f4:0c:dd:f3:29:46:5b:53:bf:00:97:1c:9f:0f:
         77:99:fe:cc:2d:7b:4e:9b:1f:f5:19:e5:1c:3f:b9:12:f4:17:
         15:96:b1:6c:44:39:23:2a:c9:65:f0:6f:0b:ac:ff:78:a2:9e:
         e8:17:ed:19:3f:44:d8:20:54:3c:69:03:a9:b0:ef:fe:ce:8f:
         ba:29:5e:7b:05:13:a9:26:b1:87:19:f6:38:c3:c5:93:d6:1c:
         75:99:ec:4e:1e:f1:5b:f7:e7:ee:2a:ad:c5:b9:6e:eb:51:3e:
         a8:3e:90:3a:ca:99:87:0a:9c:a2:7f:0f:90:09:4b:e7:0c:f9:
         22:72:1d:61:ef:6e:ec:04:c8:8c:c1:79:fb:41:09:8c:54:6f:
         4b:e0:8d:00:b8:5e:e7:59:ba:27:cb:41:c7:45:60:7e:d2:0a:
         b3:07:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org