Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/6ccf329afc39fad7d02a76c319dad32ed570b75f.roa
File:                     6ccf329afc39fad7d02a76c319dad32ed570b75f.roa (raw, json)
Hash identifier:          L4y/Sn0ZPp/GK6Br9pq8BO2BnmeKCPpR7P+xQK8gWF8=
Subject key identifier:   F7:98:6A:F0:0D:55:20:8E:0B:44:B7:26:8B:68:E7:66:C8:77:BD:35
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       0E4732
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/6ccf329afc39fad7d02a76c319dad32ed570b75f.roa
Signing time:             Wed 24 Mar 2021 14:40:14 +0000
ROA not before:           Wed 24 Mar 2021 14:40:13 +0000
ROA not after:            Tue 24 Mar 2026 14:40:13 +0000
asID:                     264668
IP address blocks:        45.225.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935730 (0xe4732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Mar 24 14:40:13 2021 GMT
            Not After : Mar 24 14:40:13 2026 GMT
        Subject: CN=6ccf329afc39fad7d02a76c319dad32ed570b75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:0b:ce:df:99:ab:ff:38:7f:83:e0:6c:aa:
                    e3:07:42:70:cb:0f:c0:83:8f:ff:0c:b4:41:ae:7e:
                    36:db:77:cf:db:6d:b5:d0:67:31:c6:5d:0c:b7:05:
                    4b:ed:b4:f0:ee:01:44:70:f2:1e:ae:f0:dc:02:22:
                    7b:71:90:51:02:d5:25:5a:49:b7:22:b8:e2:56:bf:
                    f2:84:cb:8f:69:45:c7:ae:91:21:07:cd:e3:36:d8:
                    c8:67:b2:86:05:22:91:d5:a8:f6:f3:17:49:95:fa:
                    f0:cd:7b:95:c9:2a:59:b4:01:e2:46:26:d6:60:69:
                    bf:b3:80:00:8e:8b:28:fe:da:b3:59:43:85:ec:97:
                    43:14:a8:a3:b5:0d:de:f0:1c:e7:30:2c:2c:bd:fb:
                    c1:13:bb:e8:42:2a:d3:09:82:92:29:6f:63:d1:2c:
                    9c:9e:38:39:54:5d:50:2f:9e:33:90:14:cf:99:22:
                    10:b3:ff:72:5f:65:ea:5e:e8:0f:a2:5f:d5:22:ed:
                    6e:99:dd:db:f7:7d:aa:ed:c2:5d:e0:40:b2:34:96:
                    0d:11:66:dd:4b:26:f3:97:67:8d:89:28:da:b2:38:
                    94:44:2e:0b:bc:aa:f9:44:69:7c:d6:03:86:8b:ee:
                    bd:fc:ec:f5:5c:78:5a:68:99:fa:99:3f:de:75:59:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:98:6A:F0:0D:55:20:8E:0B:44:B7:26:8B:68:E7:66:C8:77:BD:35
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/6ccf329afc39fad7d02a76c319dad32ed570b75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:08:c7:8f:c1:2c:ba:f9:cf:3e:cc:66:24:b9:c6:c2:41:
         b3:76:03:88:83:96:53:6c:d1:35:79:54:d5:77:5f:6b:50:12:
         d8:7f:ed:b3:e0:5e:90:75:d2:ea:2d:f9:ff:98:1e:51:32:b7:
         ae:0d:ed:ab:5c:93:51:fd:20:97:71:a4:da:3d:4b:9f:c4:bc:
         d5:aa:a3:6f:2f:83:0e:b4:73:f1:d8:58:da:f0:6b:a6:48:bb:
         d4:cb:77:6d:e5:28:8f:16:62:e5:97:1b:57:33:d1:b3:54:53:
         d0:8a:62:ba:4f:d9:85:ec:47:c3:db:2f:78:0d:06:98:93:e6:
         4d:7d:12:dc:2c:f6:c8:64:14:51:b7:84:2d:8c:a3:9c:ce:37:
         00:d5:c2:ff:32:1d:27:9a:68:0d:82:a8:d6:53:95:43:50:7f:
         52:35:9d:fc:31:f4:71:8d:f0:be:46:01:6b:8f:aa:2e:fe:f6:
         9f:76:d0:f0:22:fd:47:30:54:12:6a:7f:5b:66:23:cb:8e:a6:
         fc:6f:ee:8a:69:d1:f9:b8:34:4b:f0:f4:27:3a:75:84:d7:34:
         f0:c3:e0:69:0e:c9:f2:6d:89:06:2e:0e:14:33:e2:1b:a1:47:
         12:f1:82:e2:f6:73:0b:91:81:08:3f:7a:c7:88:81:f3:55:9c:
         e3:32:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org