Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/d6e6055d04d28f8b246916020e0e2d68360711c4.roa
File:                     d6e6055d04d28f8b246916020e0e2d68360711c4.roa (raw, json)
Hash identifier:          uHZ2j2AB/sR9iWUUSUz+pu988wXvpbcpLkppYWk0+jw=
Subject key identifier:   36:B4:20:EB:A1:87:82:E9:CD:23:AF:12:68:45:49:97:78:C2:A3:A9
Certificate issuer:       /CN=4da24f95f9e14009eadf64141dc9a803fece4656
Certificate serial:       145D82
Authority key identifier: 03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/d6e6055d04d28f8b246916020e0e2d68360711c4.roa
Signing time:             Thu 07 Sep 2023 19:20:58 +0000
ROA not before:           Wed 06 Sep 2023 19:20:58 +0000
ROA not after:            Sun 07 Sep 2025 19:20:58 +0000
asID:                     264758
IP address blocks:        45.173.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334658 (0x145d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Validity
            Not Before: Sep  6 19:20:58 2023 GMT
            Not After : Sep  7 19:20:58 2025 GMT
        Subject: CN=d6e6055d04d28f8b246916020e0e2d68360711c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:c5:aa:75:04:b6:d8:42:7b:b6:da:16:c1:
                    4a:66:64:8f:9a:24:3d:80:62:9d:fc:c7:cf:e2:30:
                    9d:b9:be:8c:40:85:2e:bb:ff:5e:2b:1f:c4:2b:6f:
                    35:58:3c:eb:ab:95:6f:d5:6d:63:61:9e:42:79:3b:
                    61:e0:5f:40:ec:fa:0d:5d:e2:a4:28:d8:9f:f6:82:
                    b4:1f:7a:ca:61:c8:69:32:4a:22:9c:46:48:66:25:
                    57:ef:26:ee:0c:63:b8:14:4e:24:f4:2d:8a:da:bc:
                    a3:2e:0a:cb:65:cf:a0:4f:5a:c9:dc:ba:d5:ca:29:
                    16:0d:eb:6b:93:7b:78:e9:6b:2d:32:8d:76:30:7b:
                    1c:56:e9:59:49:b1:74:c3:6c:35:41:fa:5b:f5:33:
                    74:a7:5a:ed:b1:8b:cb:2b:e3:89:5d:bf:31:30:99:
                    03:54:1f:16:b7:1c:54:61:fc:4b:1b:f9:6c:32:d6:
                    08:92:b9:e0:fb:39:19:d0:86:0f:6d:12:b7:ce:c7:
                    61:53:9a:27:0c:3a:fe:4b:21:4f:ac:a0:1f:4c:28:
                    29:6e:f9:79:d5:89:be:dc:50:20:9e:35:65:c4:38:
                    bf:2d:b8:88:53:bb:e5:33:68:65:49:ce:0d:b7:75:
                    5a:12:35:4b:78:e1:75:17:d3:11:bb:47:5a:97:cb:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B4:20:EB:A1:87:82:E9:CD:23:AF:12:68:45:49:97:78:C2:A3:A9
            X509v3 Authority Key Identifier:
                keyid:03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/d6e6055d04d28f8b246916020e0e2d68360711c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:ce:2d:b2:1e:a0:51:a9:98:fe:d6:e2:c8:06:7c:e9:85:
         9a:f1:ff:ed:af:eb:22:6a:8c:4c:8d:c1:62:c4:27:37:99:fc:
         ef:0c:2e:ee:23:d0:f9:37:57:43:d1:c4:27:2a:59:b3:67:f4:
         d5:88:dd:1d:fa:9a:0d:0b:7d:f7:29:ea:7f:10:e2:96:d3:7a:
         be:54:54:ab:40:8f:e1:a1:0b:fe:a0:3e:06:69:36:26:ab:13:
         e4:32:75:96:14:43:35:d3:b3:a4:3e:48:0a:ee:ce:d3:da:8c:
         46:68:12:b7:eb:50:2f:3d:e3:23:46:a7:69:3a:ed:b1:cc:00:
         9f:8d:e0:e9:8d:f5:e1:cc:e0:a9:bc:91:59:2b:f7:b9:67:0b:
         69:f2:89:35:e2:df:65:7a:b7:a8:df:52:33:7f:bf:5d:99:61:
         a4:84:94:f6:d6:57:f7:2a:93:7b:ae:fe:f6:d4:30:02:fa:07:
         0d:13:6b:4a:14:f4:90:11:2a:1f:2e:4b:f0:2a:fc:be:af:25:
         4a:4d:d8:ac:16:fe:8a:38:99:ee:68:1d:61:68:00:93:51:4c:
         76:a4:68:1c:47:7c:fa:d0:e6:93:cc:3b:07:d5:d3:31:9c:62:
         d5:15:02:34:32:62:58:f0:16:95:75:8c:2e:7c:7b:ff:a7:fe:
         ca:64:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org