Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/c95675119e6b244e1c09b3135ea905413453e928.roa
File:                     c95675119e6b244e1c09b3135ea905413453e928.roa (raw, json)
Hash identifier:          v2jyAq0v2/9B/Vc8fY3JMdbMjuI4Y4MBAQBNmRAOytc=
Subject key identifier:   C4:B2:A4:D5:A5:DA:01:AF:7E:D1:41:79:38:BF:B1:D4:66:12:0C:A8
Certificate issuer:       /CN=1ff19a587cf1d895ff1421bb064598306e517ca7
Certificate serial:       150CBC
Authority key identifier: 6D:6C:45:63:97:90:99:6E:7E:BD:65:5E:FB:C5:4A:F2:88:44:C5:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff19a587cf1d895ff1421bb064598306e517ca7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/c95675119e6b244e1c09b3135ea905413453e928.roa
Signing time:             Mon 14 Feb 2022 21:15:22 +0000
ROA not before:           Mon 14 Feb 2022 03:00:00 +0000
ROA not after:            Wed 14 Feb 2024 03:00:00 +0000
asID:                     266828
IP address blocks:        45.237.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379516 (0x150cbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff19a587cf1d895ff1421bb064598306e517ca7
        Validity
            Not Before: Feb 14 03:00:00 2022 GMT
            Not After : Feb 14 03:00:00 2024 GMT
        Subject: CN=c95675119e6b244e1c09b3135ea905413453e928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:a8:4d:12:48:c2:0a:1c:b1:cf:9c:2d:bd:
                    22:da:e2:40:6c:05:22:8c:f1:03:96:55:54:c1:f3:
                    4f:03:f0:09:ac:7a:86:07:bb:fb:ad:0e:47:62:3e:
                    87:b0:4e:b5:fe:67:44:e8:9d:26:fe:be:1c:4d:ac:
                    4f:d8:4c:81:35:8b:23:ba:a9:ed:4b:72:d0:69:02:
                    1d:46:72:a1:73:3a:78:ec:8e:cb:87:a3:99:03:4e:
                    c6:9a:e4:98:ba:0d:c9:c0:17:b4:14:29:ae:07:52:
                    a2:2d:c6:ba:79:cf:11:1c:3b:78:2f:da:92:cc:3b:
                    92:2a:7a:63:a5:da:77:be:4f:c4:a4:f9:4a:7b:e0:
                    3d:5a:fb:03:b1:f0:9c:73:52:24:cc:6c:90:85:9b:
                    1c:ed:f7:71:f7:51:a3:8b:ae:ae:2e:42:50:0f:e5:
                    c1:ec:21:86:08:a7:e9:8f:31:41:45:a4:34:e0:f9:
                    71:0b:12:89:7b:90:70:a1:25:99:83:b7:0e:10:20:
                    58:12:fa:d8:49:05:4a:49:2a:ff:f8:84:d7:4f:5d:
                    3e:d5:34:f9:aa:8d:47:f4:42:a9:f8:4f:8f:75:3c:
                    f1:51:07:0f:18:91:08:ef:af:53:cc:c4:8e:8f:9d:
                    bc:b6:76:d9:4e:22:1c:73:2f:83:23:1d:87:af:98:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B2:A4:D5:A5:DA:01:AF:7E:D1:41:79:38:BF:B1:D4:66:12:0C:A8
            X509v3 Authority Key Identifier:
                keyid:6D:6C:45:63:97:90:99:6E:7E:BD:65:5E:FB:C5:4A:F2:88:44:C5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff19a587cf1d895ff1421bb064598306e517ca7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/c95675119e6b244e1c09b3135ea905413453e928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a248da5-4683-41b0-9277-62033a8691f9/1ff19a587cf1d895ff1421bb064598306e517ca7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6f:8a:63:1a:b0:17:b9:00:23:5d:30:22:dc:5e:84:52:ba:
         a0:f8:4c:1b:ac:1c:16:96:92:ab:30:9e:ca:df:1e:5f:e5:dd:
         ea:f7:e9:b2:eb:b9:9d:5d:cb:bc:71:34:44:4a:83:0a:08:89:
         36:28:34:90:8e:7c:dd:b1:da:9e:2f:57:3a:87:34:a1:1e:37:
         08:07:a1:e0:c8:e6:42:c1:59:ba:a1:cf:cf:37:8c:07:e6:d7:
         93:1f:41:85:83:9e:69:f8:de:fd:e9:ed:b5:fa:83:1e:d8:2d:
         0a:46:f1:16:73:fd:64:39:93:7b:7b:50:07:1d:66:0e:3e:71:
         7c:12:26:32:18:15:55:39:dd:7c:41:75:bd:eb:88:57:59:39:
         03:51:18:df:e7:37:97:7c:39:f6:1b:a7:f1:d6:86:c8:88:53:
         7a:b9:7e:10:56:d7:a3:0a:44:21:85:fb:8f:dc:1c:b7:13:fe:
         6f:5e:40:4c:92:68:28:2b:8b:e9:eb:2e:c8:74:fa:1d:2d:45:
         4b:97:6e:60:83:29:5d:6d:e7:17:b5:3d:09:c6:8c:21:ca:5d:
         c6:a8:1c:e9:7f:70:e5:be:98:6c:cb:12:a8:60:06:66:0d:3f:
         d4:fa:bc:ae:75:5f:f0:59:a2:7a:de:58:78:fb:8b:9b:02:22:
         d8:64:32:df
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFQy8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
ZjE5YTU4N2NmMWQ4OTVmZjE0MjFiYjA2NDU5ODMwNmU1MTdjYTcwHhcNMjIwMjE0
MDMwMDAwWhcNMjQwMjE0MDMwMDAwWjAzMTEwLwYDVQQDEyhjOTU2NzUxMTllNmIy
NDRlMWMwOWIzMTM1ZWE5MDU0MTM0NTNlOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgeaoTRJIwgocsc+cLb0i2uJAbAUijPEDllVUwfNPA/AJrHqG
B7v7rQ5HYj6HsE61/mdE6J0m/r4cTaxP2EyBNYsjuqntS3LQaQIdRnKhczp47I7L
h6OZA07GmuSYug3JwBe0FCmuB1KiLca6ec8RHDt4L9qSzDuSKnpjpdp3vk/EpPlK
e+A9WvsDsfCcc1IkzGyQhZsc7fdx91Gji66uLkJQD+XB7CGGCKfpjzFBRaQ04Plx
CxKJe5BwoSWZg7cOECBYEvrYSQVKSSr/+ITXT10+1TT5qo1H9EKp+E+PdTzxUQcP
GJEI769TzMSOj528tnbZTiIccy+DIx2Hr5g0eQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMSypNWl2gGvftFBeTi/sdRmEgyoMB8GA1UdIwQYMBaAFG1sRWOXkJlufr1l
XvvFSvKIRMXbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWZmMTlh
NTg3Y2YxZDg5NWZmMTQyMWJiMDY0NTk4MzA2ZTUxN2NhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2EyNDhkYTUtNDY4My00MWIwLTkyNzctNjIwMzNh
ODY5MWY5L2M5NTY3NTExOWU2YjI0NGUxYzA5YjMxMzVlYTkwNTQxMzQ1M2U5Mjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYTI0OGRhNS00NjgzLTQxYjAtOTI3Ny02MjAz
M2E4NjkxZjkvMWZmMTlhNTg3Y2YxZDg5NWZmMTQyMWJiMDY0NTk4MzA2ZTUxN2Nh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3tuTANBgkqhkiG9w0BAQsFAAOCAQEAZm+KYxqwF7kAI10w
ItxehFK6oPhMG6wcFpaSqzCeyt8eX+Xd6vfpsuu5nV3LvHE0REqDCgiJNig0kI58
3bHani9XOoc0oR43CAeh4MjmQsFZuqHPzzeMB+bXkx9BhYOeafje/enttfqDHtgt
CkbxFnP9ZDmTe3tQBx1mDj5xfBImMhgVVTndfEF1veuIV1k5A1EY3+c3l3w59hun
8daGyIhTerl+EFbXowpEIYX7j9wctxP+b15ATJJoKCuL6esuyHT6HS1FS5duYIMp
XW3nF7U9CcaMIcpdxqgc6X9w5b6YbMsSqGAGZg0/1Pq8rnVf8Fmiet5YePuLmwIi
2GQy3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org