Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/b9d9fd2c6f4ee490a0de755980163eada6022098.roa
File:                     b9d9fd2c6f4ee490a0de755980163eada6022098.roa (raw, json)
Hash identifier:          MK9Ua4FEkRkbMXLtTSDcI2ioiKCugEORFthMWv9QCJQ=
Subject key identifier:   3C:71:AC:60:2A:52:C6:7B:CD:23:B5:B5:D4:2E:42:5E:D9:97:6D:CA
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       23674A
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/b9d9fd2c6f4ee490a0de755980163eada6022098.roa
Signing time:             Thu 06 Jul 2023 04:47:58 +0000
ROA not before:           Wed 05 Jul 2023 04:47:56 +0000
ROA not after:            Sun 06 Jul 2025 04:47:56 +0000
asID:                     264668
IP address blocks:        45.225.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320202 (0x23674a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Jul  5 04:47:56 2023 GMT
            Not After : Jul  6 04:47:56 2025 GMT
        Subject: CN=b9d9fd2c6f4ee490a0de755980163eada6022098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:9c:8f:46:cb:89:c1:43:b3:31:42:66:21:
                    db:3b:02:ff:75:9f:c1:5d:40:05:9e:70:74:cc:62:
                    c2:a8:f8:7c:f6:f9:1d:73:bb:40:7c:00:56:73:e0:
                    20:c4:5f:2f:15:b2:25:ff:5c:70:77:d7:36:f8:bd:
                    47:be:e7:60:a2:d3:8b:5a:fb:16:23:31:a4:ed:45:
                    ee:fc:08:72:38:7f:1e:92:7b:c0:d0:77:1d:2d:3b:
                    26:c9:f1:f8:cd:8e:7a:08:12:12:ac:a0:c7:ff:fe:
                    4f:8c:91:8a:8c:17:52:45:6a:e7:ba:a3:03:25:d2:
                    ac:1f:7d:dc:8d:4a:70:d5:80:e8:8b:f8:c9:a5:68:
                    2e:ce:29:38:4e:e9:de:75:c4:d1:21:bb:b9:96:d2:
                    36:da:30:bd:e3:c7:af:ae:68:23:24:80:ad:80:d2:
                    89:a1:fb:48:8b:89:e0:2d:a9:ee:80:e6:f2:1a:f0:
                    32:b2:26:24:4d:94:bc:fe:83:28:6e:1a:67:5c:fe:
                    18:f3:06:74:d4:10:21:1a:fc:36:e2:33:25:f8:11:
                    8a:42:ad:bf:95:20:47:d5:45:60:cc:61:b5:a7:16:
                    46:81:3b:6b:d6:6f:69:26:0a:84:24:27:5c:11:fa:
                    8e:da:29:48:e9:4e:0d:1f:b8:68:ba:df:74:0c:da:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:71:AC:60:2A:52:C6:7B:CD:23:B5:B5:D4:2E:42:5E:D9:97:6D:CA
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/b9d9fd2c6f4ee490a0de755980163eada6022098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:a5:5b:a3:2d:82:a5:3f:57:3d:79:90:7c:c8:94:1e:93:
         74:0d:7a:e1:a0:09:6b:46:a3:d9:e3:41:2b:10:0b:3f:46:44:
         6e:28:78:e9:8c:36:b6:f7:0c:25:32:af:85:a0:f2:a3:b6:5f:
         61:17:bc:17:c9:b2:6f:7e:f0:d9:ba:4a:47:9e:ff:6d:30:ed:
         a3:16:db:58:45:d4:c1:96:25:9f:d9:08:93:39:12:65:d0:cf:
         97:12:7c:27:5d:03:0f:90:ee:68:65:cf:47:c7:4b:fb:99:7f:
         95:df:87:d9:cc:c6:44:5b:d7:b0:59:f4:59:be:c0:23:9e:c6:
         3b:4d:25:7a:4b:36:aa:1e:46:6d:8b:b4:9f:58:f5:16:49:9d:
         cb:03:5d:b1:87:63:8b:6c:90:f0:a6:91:e3:50:36:74:0b:84:
         e7:09:5b:9c:d1:53:1a:60:79:88:a1:a2:a4:37:91:49:e3:77:
         a4:d8:57:df:cc:c6:f4:da:05:cd:f0:41:82:d0:44:84:22:62:
         93:9a:e0:93:04:9b:db:86:d3:f6:d2:16:6b:00:d8:09:bc:1e:
         1d:3c:13:b6:be:43:6b:51:dc:9a:6c:6f:da:c9:49:22:92:9a:
         1f:3a:62:33:54:b0:04:63:74:ea:ca:25:1c:ae:80:60:7c:87:
         e6:42:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org