Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/fe4b769dc06531d2055960030eaaf3422f12d6ba.roa
File:                     fe4b769dc06531d2055960030eaaf3422f12d6ba.roa (raw, json)
Hash identifier:          ucJvquT9j9d1e0fhgcYJY/Kib3MteF/87rhA15ebjNM=
Subject key identifier:   06:2A:6B:6E:62:6D:D1:2B:0E:8D:C9:46:01:56:89:4B:89:62:35:1F
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       236FC8
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/fe4b769dc06531d2055960030eaaf3422f12d6ba.roa
Signing time:             Thu 06 Jul 2023 04:48:06 +0000
ROA not before:           Wed 05 Jul 2023 04:48:05 +0000
ROA not after:            Sun 06 Jul 2025 04:48:05 +0000
asID:                     52468
IP address blocks:        45.225.46.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322376 (0x236fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Jul  5 04:48:05 2023 GMT
            Not After : Jul  6 04:48:05 2025 GMT
        Subject: CN=fe4b769dc06531d2055960030eaaf3422f12d6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:90:9d:60:c8:dd:53:0f:da:a1:e5:45:81:
                    79:6d:ce:fd:81:c2:6d:e5:e4:0f:d3:d3:ae:6d:7d:
                    27:3d:8f:c4:8f:7a:ef:70:c6:4e:89:65:70:b3:71:
                    45:24:44:1b:f4:b5:f6:21:3b:cb:46:c5:14:5e:ae:
                    bf:49:f7:44:e6:89:69:6f:e7:95:38:e5:47:29:e7:
                    25:df:20:36:a1:40:60:86:60:ac:54:7d:6a:53:0a:
                    50:ff:c9:52:9a:89:78:fe:ff:cb:ab:c3:ad:0b:1e:
                    2c:50:f7:bd:37:ed:44:08:45:a6:66:d0:bd:b9:c6:
                    29:cf:e5:c8:76:d1:4b:0f:b1:76:bb:a9:e8:aa:6e:
                    a5:c6:7d:99:99:3d:96:22:3a:06:42:21:64:10:88:
                    18:89:7c:9c:5f:a0:f3:86:5c:ae:c4:80:1d:5a:89:
                    78:d4:84:4b:95:90:0f:d0:07:bd:04:5e:6e:a8:7f:
                    a4:c8:9e:b0:da:c6:e6:b3:d1:a2:c5:ab:c0:d4:10:
                    07:92:62:92:6f:01:04:82:00:5c:02:e5:8c:ee:d3:
                    a5:80:0a:8c:81:31:b0:ef:bd:52:1f:9d:e6:a4:52:
                    4a:1c:e4:2f:6b:c7:5c:06:89:4f:8d:31:c3:0b:27:
                    8f:f9:7f:1c:56:35:7c:60:b5:6c:c6:12:53:9d:f1:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:6B:6E:62:6D:D1:2B:0E:8D:C9:46:01:56:89:4B:89:62:35:1F
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/fe4b769dc06531d2055960030eaaf3422f12d6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:d3:78:ba:93:58:45:da:e7:9c:af:d6:35:84:4f:69:b7:
         fb:37:0c:b2:1e:db:17:cc:e1:9e:d0:41:d4:dc:02:e8:50:59:
         9d:0f:10:5b:48:7e:88:7f:68:d8:31:10:a2:52:e1:ff:06:7b:
         23:16:49:85:73:31:6b:71:3f:fe:99:d0:60:bc:e5:9b:99:84:
         a3:0f:94:76:3f:85:11:83:c7:ba:1b:1e:bb:37:46:2a:30:26:
         eb:e6:65:8b:34:14:24:c3:60:fa:d0:50:1f:5b:4a:65:de:27:
         12:b8:eb:b2:d3:8e:ad:85:ee:35:88:9e:28:33:e2:57:40:3d:
         74:87:7d:14:ea:38:c6:12:a4:36:0a:79:62:1f:45:25:98:16:
         57:cf:16:44:27:5b:bc:18:86:c3:83:1d:70:03:85:1b:01:3b:
         30:f0:bb:38:e7:7d:8c:f4:e1:88:e7:25:b4:ab:90:7d:78:c1:
         4d:e0:63:4e:be:c7:d2:c4:84:14:67:f3:28:b8:12:64:eb:b7:
         fa:a0:5f:04:26:04:05:95:e9:48:b7:a5:77:08:0f:2e:63:e7:
         3f:df:8d:53:d5:d0:cc:36:f6:0b:89:a4:06:6d:92:af:77:3c:
         40:96:7d:70:b6:b7:1c:e2:47:03:55:35:e6:16:b4:f5:a6:4f:
         2b:b6:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org