Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/f7641c90af3a224d82640318de0310ab5722625f.roa
File:                     f7641c90af3a224d82640318de0310ab5722625f.roa (raw, json)
Hash identifier:          jt+jZFMPYWwW0mF2j1dVu5njg7snrzpnjzBLNXBMUEs=
Subject key identifier:   E9:CE:02:96:C2:73:8B:E7:88:66:34:50:C7:7F:69:2A:9D:F2:71:A1
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       23400D
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/f7641c90af3a224d82640318de0310ab5722625f.roa
Signing time:             Thu 06 Jul 2023 04:30:18 +0000
ROA not before:           Wed 05 Jul 2023 04:30:18 +0000
ROA not after:            Sun 06 Jul 2025 04:30:18 +0000
asID:                     52468
IP address blocks:        45.225.46.0/24 maxlen: 24
                          45.225.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310157 (0x23400d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Jul  5 04:30:18 2023 GMT
            Not After : Jul  6 04:30:18 2025 GMT
        Subject: CN=f7641c90af3a224d82640318de0310ab5722625f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:7d:8a:11:62:f3:86:77:c7:17:b7:bb:0d:
                    24:d2:31:a5:ee:80:46:3f:2a:aa:ca:ba:c6:32:99:
                    8e:d0:7a:7f:50:ac:77:a0:cb:17:53:4b:61:3b:e2:
                    ac:a4:80:b6:5b:0e:03:db:a6:53:25:f0:3c:d2:f4:
                    42:fc:a0:0f:0b:ff:00:25:d2:3f:52:0f:62:95:a3:
                    5f:56:04:63:bb:0e:cd:cb:bc:26:9a:6a:4b:18:2f:
                    a0:8e:ba:a5:a4:09:04:33:1b:ce:79:0e:35:ec:d8:
                    a4:c9:47:12:d1:b6:4a:90:f0:17:8d:53:18:20:11:
                    f2:44:d5:b3:fc:1d:6c:08:b0:0d:69:d9:40:d6:fc:
                    04:a3:e6:db:9d:85:aa:23:38:64:86:31:5c:f5:fe:
                    44:97:db:bb:2a:35:91:b4:f9:ad:36:db:d5:5c:10:
                    53:55:e3:c0:69:33:fb:19:8e:ef:9d:df:6b:10:b9:
                    b8:19:5d:fb:40:e1:08:40:e1:3f:aa:f0:b8:69:c3:
                    c3:a6:e8:3d:68:ea:02:b4:f3:c8:1b:dc:7e:ef:5c:
                    aa:d8:a3:ad:97:a8:5d:f6:67:c9:c2:73:59:19:87:
                    ff:31:4b:61:2d:22:20:7b:f2:7d:e6:7f:77:5e:9b:
                    19:52:92:8d:2b:cf:d2:d1:0b:23:93:d9:4b:18:12:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:02:96:C2:73:8B:E7:88:66:34:50:C7:7F:69:2A:9D:F2:71:A1
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/f7641c90af3a224d82640318de0310ab5722625f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:f8:c6:1f:6d:ac:ce:98:0f:64:44:2e:c5:60:ea:0a:9d:
         37:47:0c:61:d1:43:73:7d:5e:09:71:ce:30:82:d0:12:03:cb:
         e7:c9:53:7a:f0:b5:ad:43:b1:dc:c6:36:b1:29:cc:23:b2:12:
         e7:07:89:af:20:fc:c0:e6:52:fd:8c:ce:85:d7:5f:fb:bd:a5:
         1f:09:18:f2:e3:61:2d:ef:9f:d3:c7:33:f6:9e:0f:3c:63:59:
         70:c3:e8:37:25:31:be:9a:9e:e1:7e:d8:27:4f:6c:01:02:d9:
         4c:d3:27:5d:4e:5c:f5:79:11:19:69:e2:e1:ec:27:12:0e:a5:
         ec:c2:45:1a:d7:ac:54:39:4a:59:8e:57:84:fe:22:7c:ec:4b:
         41:3f:47:9a:f2:a5:90:78:40:4e:fe:58:7f:5b:0a:18:0b:fc:
         dc:e9:47:2f:06:04:28:07:6a:4a:90:57:45:2e:34:f7:32:83:
         c3:4e:1a:c7:65:0f:08:57:6e:e9:d1:05:18:a4:1e:cf:4a:a5:
         8b:52:74:c6:07:6a:2b:e3:f7:1b:5c:35:ca:eb:42:8c:f0:bf:
         24:d5:af:95:59:9d:67:67:d3:a0:6a:e3:35:80:c8:63:d8:9f:
         26:b9:dd:96:cc:9b:1c:1e:b3:10:5b:55:a7:2a:b3:ab:67:85:
         d2:f8:ac:74
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI0ANMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
M2ExZDdmZmUyYTU0M2I2NjE3NTljNzI4ZDkyNzRjZmFhNDA2MWYwHhcNMjMwNzA1
MDQzMDE4WhcNMjUwNzA2MDQzMDE4WjAzMTEwLwYDVQQDEyhmNzY0MWM5MGFmM2Ey
MjRkODI2NDAzMThkZTAzMTBhYjU3MjI2MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0WV9ihFi84Z3xxe3uw0k0jGl7oBGPyqqyrrGMpmO0Hp/UKx3
oMsXU0thO+KspIC2Ww4D26ZTJfA80vRC/KAPC/8AJdI/Ug9ilaNfVgRjuw7Ny7wm
mmpLGC+gjrqlpAkEMxvOeQ417NikyUcS0bZKkPAXjVMYIBHyRNWz/B1sCLANadlA
1vwEo+bbnYWqIzhkhjFc9f5El9u7KjWRtPmtNtvVXBBTVePAaTP7GY7vnd9rELm4
GV37QOEIQOE/qvC4acPDpug9aOoCtPPIG9x+71yq2KOtl6hd9mfJwnNZGYf/MUth
LSIge/J95n93XpsZUpKNK8/S0Qsjk9lLGBJsxwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOnOApbCc4vniGY0UMd/aSqd8nGhMB8GA1UdIwQYMBaAFBiUvFB4+kwxapCu
YsWCAjD1oR5cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDEzYTFk
N2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZhNGE0ODktYWNlYS00YzYwLThmNGUtMzQ5YzYz
ODdlZWViL2Y3NjQxYzkwYWYzYTIyNGQ4MjY0MDMxOGRlMDMxMGFiNTcyMjYyNWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmE0YTQ4OS1hY2VhLTRjNjAtOGY0ZS0zNDlj
NjM4N2VlZWIvNDEzYTFkN2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS3hLjANBgkqhkiG9w0BAQsFAAOCAQEAeg74xh9trM6YD2RE
LsVg6gqdN0cMYdFDc31eCXHOMILQEgPL58lTevC1rUOx3MY2sSnMI7IS5weJryD8
wOZS/YzOhddf+72lHwkY8uNhLe+f08cz9p4PPGNZcMPoNyUxvpqe4X7YJ09sAQLZ
TNMnXU5c9XkRGWni4ewnEg6l7MJFGtesVDlKWY5XhP4ifOxLQT9HmvKlkHhATv5Y
f1sKGAv83OlHLwYEKAdqSpBXRS409zKDw04ax2UPCFdu6dEFGKQez0qli1J0xgdq
K+P3G1w1yutCjPC/JNWvlVmdZ2fToGrjNYDIY9ifJrndlsybHB6zEFtVpyqzq2eF
0visdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org