Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/863e9b7f18b07a88f636ca2f911450b9c58e661b.roa
File:                     863e9b7f18b07a88f636ca2f911450b9c58e661b.roa (raw, json)
Hash identifier:          7r1NcCHd2M8dwqzxiZjef/esNYzHe7iN1uh10sM6qfM=
Subject key identifier:   27:1E:B9:BC:CE:93:1B:00:3F:43:91:3C:91:5E:F7:53:EE:11:0B:6A
Certificate issuer:       /CN=cd49ffbffceb593e48cbb0300514f204591edf75
Certificate serial:       0D3393
Authority key identifier: 80:A8:5F:50:8A:BE:35:25:5F:29:77:2B:41:88:82:85:B2:EA:EF:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd49ffbffceb593e48cbb0300514f204591edf75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/863e9b7f18b07a88f636ca2f911450b9c58e661b.roa
Signing time:             Wed 24 Mar 2021 14:32:53 +0000
ROA not before:           Wed 24 Mar 2021 14:32:53 +0000
ROA not after:            Tue 24 Mar 2026 14:32:53 +0000
asID:                     265814
IP address blocks:        45.70.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865171 (0xd3393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd49ffbffceb593e48cbb0300514f204591edf75
        Validity
            Not Before: Mar 24 14:32:53 2021 GMT
            Not After : Mar 24 14:32:53 2026 GMT
        Subject: CN=863e9b7f18b07a88f636ca2f911450b9c58e661b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:e5:0f:df:ac:ea:57:9f:e9:27:32:05:77:
                    f7:46:6e:29:01:ed:5c:4d:8e:36:cd:b6:04:8f:ad:
                    e4:c6:f0:bc:71:ba:46:08:6a:77:20:e8:1f:73:7d:
                    ee:bc:a7:38:c4:19:84:e9:24:ef:81:26:8d:f5:f6:
                    71:23:3a:83:c9:64:39:9a:5e:a2:8f:fc:2a:8b:0a:
                    b5:ab:88:02:5a:75:1c:6a:04:9c:89:dc:06:d6:0c:
                    84:fc:44:ba:0d:85:44:2e:14:7a:bd:69:d4:94:90:
                    6f:5c:bd:98:d3:22:73:bf:37:a0:5d:09:9e:3f:47:
                    45:9e:89:3c:36:ce:96:82:a6:63:3d:54:ac:fb:92:
                    ba:8c:4d:d8:15:51:04:e0:d7:7c:3f:c4:54:c0:c3:
                    71:63:48:1b:51:60:d0:08:f3:d6:27:87:ab:20:09:
                    cd:d6:a6:b2:1c:c5:d3:d2:c4:9c:19:6a:19:e6:76:
                    49:c8:f5:56:fd:1a:4c:08:50:a8:ac:30:48:b5:51:
                    c2:21:24:42:ab:9e:5d:3a:a7:07:50:c1:ca:4a:63:
                    55:c9:dc:d0:42:51:3d:48:0d:4e:e5:dd:46:8c:01:
                    2e:11:a5:99:21:e5:23:dd:d2:ce:de:cf:f0:0e:90:
                    59:e5:20:92:94:ed:cf:3d:d9:52:c8:29:12:51:09:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1E:B9:BC:CE:93:1B:00:3F:43:91:3C:91:5E:F7:53:EE:11:0B:6A
            X509v3 Authority Key Identifier:
                keyid:80:A8:5F:50:8A:BE:35:25:5F:29:77:2B:41:88:82:85:B2:EA:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd49ffbffceb593e48cbb0300514f204591edf75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/863e9b7f18b07a88f636ca2f911450b9c58e661b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/cd49ffbffceb593e48cbb0300514f204591edf75.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:7c:8d:5d:d5:3e:ec:79:f8:16:90:6d:2e:c4:97:ef:08:
         ee:22:d8:6d:d0:92:86:e2:83:a8:97:fe:5f:df:42:38:a5:d3:
         7d:c5:93:59:79:f2:d2:1e:6c:12:5e:3b:68:3c:06:e8:7e:cc:
         26:1c:02:e2:24:4d:7e:2d:af:e1:3f:d3:e9:e6:d2:9e:0d:80:
         06:1d:3e:0c:65:cf:7a:1e:be:1e:fc:45:c5:76:06:8c:49:12:
         d2:a1:aa:0b:b0:c0:44:22:15:9e:f0:c6:94:af:5a:d3:7c:de:
         5b:3d:ab:8f:98:3a:6e:32:02:4d:de:70:d4:74:1f:e9:10:1b:
         6a:2c:9e:53:b5:8a:67:69:de:63:33:b0:b1:c9:d3:2b:26:ef:
         f4:dc:37:44:9b:cf:f3:46:66:1b:bb:92:40:fa:6d:0b:82:b7:
         e8:0f:7e:66:c1:db:cb:a0:a0:68:6a:9d:4d:3c:ce:75:dc:43:
         65:6d:93:0a:60:a5:2e:90:c8:79:21:75:1a:a8:4f:f0:5e:eb:
         21:15:0e:af:26:e7:72:b3:f4:9b:2c:53:d9:b2:d8:ee:25:82:
         e9:fe:ee:0e:f6:b6:4f:35:ea:ff:b8:c0:d1:6b:52:f0:48:2f:
         36:90:3f:13:68:bd:6d:dd:57:69:75:44:78:7e:3c:0b:77:38:
         0a:47:8b:f7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTOTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
NDlmZmJmZmNlYjU5M2U0OGNiYjAzMDA1MTRmMjA0NTkxZWRmNzUwHhcNMjEwMzI0
MTQzMjUzWhcNMjYwMzI0MTQzMjUzWjAzMTEwLwYDVQQDEyg4NjNlOWI3ZjE4YjA3
YTg4ZjYzNmNhMmY5MTE0NTBiOWM1OGU2NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgwLlD9+s6lef6ScyBXf3Rm4pAe1cTY42zbYEj63kxvC8cbpG
CGp3IOgfc33uvKc4xBmE6STvgSaN9fZxIzqDyWQ5ml6ij/wqiwq1q4gCWnUcagSc
idwG1gyE/ES6DYVELhR6vWnUlJBvXL2Y0yJzvzegXQmeP0dFnok8Ns6WgqZjPVSs
+5K6jE3YFVEE4Nd8P8RUwMNxY0gbUWDQCPPWJ4erIAnN1qayHMXT0sScGWoZ5nZJ
yPVW/RpMCFCorDBItVHCISRCq55dOqcHUMHKSmNVydzQQlE9SA1O5d1GjAEuEaWZ
IeUj3dLO3s/wDpBZ5SCSlO3PPdlSyCkSUQnxtwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCceubzOkxsAP0ORPJFe91PuEQtqMB8GA1UdIwQYMBaAFICoX1CKvjUlXyl3
K0GIgoWy6u9gMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Q0OWZm
YmZmY2ViNTkzZTQ4Y2JiMDMwMDUxNGYyMDQ1OTFlZGY3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzMzOWE2MTMtMGFmOC00OWVkLWI3ZDYtODE4ZWRi
NmQwY2MzLzg2M2U5YjdmMThiMDdhODhmNjM2Y2EyZjkxMTQ1MGI5YzU4ZTY2MWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMzM5YTYxMy0wYWY4LTQ5ZWQtYjdkNi04MThl
ZGI2ZDBjYzMvY2Q0OWZmYmZmY2ViNTkzZTQ4Y2JiMDMwMDUxNGYyMDQ1OTFlZGY3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1GtDANBgkqhkiG9w0BAQsFAAOCAQEADU98jV3VPux5+BaQ
bS7El+8I7iLYbdCShuKDqJf+X99COKXTfcWTWXny0h5sEl47aDwG6H7MJhwC4iRN
fi2v4T/T6ebSng2ABh0+DGXPeh6+HvxFxXYGjEkS0qGqC7DARCIVnvDGlK9a03ze
Wz2rj5g6bjICTd5w1HQf6RAbaiyeU7WKZ2neYzOwscnTKybv9Nw3RJvP80ZmG7uS
QPptC4K36A9+ZsHby6CgaGqdTTzOddxDZW2TCmClLpDIeSF1GqhP8F7rIRUOrybn
crP0myxT2bLY7iWC6f7uDva2TzXq/7jA0WtS8EgvNpA/E2i9bd1XaXVEeH48C3c4
CkeL9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org