Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/433c3e63edb99efc6b595c9a1bda4f1df175a285.roa
File:                     433c3e63edb99efc6b595c9a1bda4f1df175a285.roa (raw, json)
Hash identifier:          rZ0xW+DjWuGsbFnKBWxSSLZ4/yajIC9/O8LxFasXVN0=
Subject key identifier:   18:AB:B3:7D:86:C7:42:E1:89:AC:AD:08:54:EF:46:22:3C:D9:6C:3A
Certificate issuer:       /CN=8e04677b51c6fee610279bb07461734e534b699e
Certificate serial:       1447D9
Authority key identifier: 5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/433c3e63edb99efc6b595c9a1bda4f1df175a285.roa
Signing time:             Thu 17 Feb 2022 09:42:08 +0000
ROA not before:           Thu 17 Feb 2022 03:00:00 +0000
ROA not after:            Sat 17 Feb 2024 03:00:00 +0000
asID:                     267782
IP address blocks:        45.171.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329113 (0x1447d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e04677b51c6fee610279bb07461734e534b699e
        Validity
            Not Before: Feb 17 03:00:00 2022 GMT
            Not After : Feb 17 03:00:00 2024 GMT
        Subject: CN=433c3e63edb99efc6b595c9a1bda4f1df175a285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:46:c7:c8:86:50:30:ec:6b:90:fc:1e:ae:
                    51:d6:9f:f3:4b:d2:0c:34:4d:c9:c5:5e:f2:ba:56:
                    fd:e7:32:73:0b:bd:25:39:99:76:89:c8:eb:d1:46:
                    3b:cf:ee:51:ba:be:7e:4a:86:b4:0a:25:fd:45:58:
                    2f:af:4e:d9:05:01:7e:ca:f1:3b:5d:66:0d:f8:58:
                    b2:90:32:43:a6:74:b0:27:ab:81:5c:80:0f:cc:ac:
                    01:91:da:28:57:65:a3:0d:3e:ff:3d:37:58:da:62:
                    38:93:dd:68:41:96:7f:a9:54:43:d8:c0:84:82:d3:
                    2e:9d:2b:5c:7d:38:35:ee:ae:8f:05:df:f2:16:13:
                    8e:b7:b4:38:d4:06:be:6b:d9:af:6b:45:32:ba:27:
                    b7:ad:79:0e:35:27:ee:51:53:f5:8e:fe:6e:12:bd:
                    e4:16:07:85:e2:1c:aa:ae:88:56:5b:f7:5c:06:f2:
                    b2:fa:5d:e6:5a:04:6d:fa:84:1a:8b:28:c8:d7:f8:
                    53:1b:70:35:cb:62:ca:34:83:0f:32:89:81:4f:f8:
                    57:e8:5a:9c:1b:7e:b7:98:ee:c6:e4:60:29:11:31:
                    19:85:98:9c:ec:97:44:19:58:08:14:d1:07:2a:05:
                    2b:f5:3e:89:c5:08:2a:52:95:76:49:91:35:c4:ea:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AB:B3:7D:86:C7:42:E1:89:AC:AD:08:54:EF:46:22:3C:D9:6C:3A
            X509v3 Authority Key Identifier:
                keyid:5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/433c3e63edb99efc6b595c9a1bda4f1df175a285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:ab:4b:b0:52:19:79:8e:03:2d:99:6a:58:bc:a6:91:cb:
         c3:a1:d8:02:92:d5:37:b7:4e:d0:4a:63:83:21:d5:28:57:1f:
         a4:13:80:44:48:aa:25:ea:26:ea:57:e7:0f:ea:04:66:64:d6:
         37:16:de:66:14:ae:b6:60:fa:ce:4b:6f:08:f7:ce:d4:ce:e7:
         a7:ac:1a:ce:ad:31:41:9b:54:10:28:7b:88:f5:24:4d:e8:5b:
         45:35:df:a6:a5:10:67:7e:11:84:d2:36:63:43:9c:fa:20:a3:
         e1:7b:3d:66:26:5b:0d:a8:31:5b:7e:ac:46:2d:56:fa:b2:3a:
         97:71:84:f5:86:02:8f:86:00:dd:f8:bf:45:ab:77:23:06:ec:
         11:5f:ed:98:ea:f4:81:4a:b5:d6:fe:94:6a:45:5f:27:30:30:
         4c:44:ea:04:15:92:33:33:e6:b7:32:66:80:9d:1b:cc:a2:92:
         53:18:a4:e5:90:dd:ec:a2:f9:12:11:dc:6f:60:7f:a2:21:09:
         31:b1:21:e8:25:fe:1d:46:d9:2d:f9:e7:33:2f:09:2e:b5:44:
         e1:01:1b:f7:a7:4d:5b:0a:95:81:30:af:f4:e4:35:9e:8d:ff:
         7f:92:af:e6:7c:5b:15:ed:e4:f1:f3:37:92:98:e4:99:1a:ed:
         15:b9:61:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFEfZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhl
MDQ2NzdiNTFjNmZlZTYxMDI3OWJiMDc0NjE3MzRlNTM0YjY5OWUwHhcNMjIwMjE3
MDMwMDAwWhcNMjQwMjE3MDMwMDAwWjAzMTEwLwYDVQQDEyg0MzNjM2U2M2VkYjk5
ZWZjNmI1OTVjOWExYmRhNGYxZGYxNzVhMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk/dGx8iGUDDsa5D8Hq5R1p/zS9IMNE3JxV7yulb95zJzC70l
OZl2icjr0UY7z+5Rur5+Soa0CiX9RVgvr07ZBQF+yvE7XWYN+FiykDJDpnSwJ6uB
XIAPzKwBkdooV2WjDT7/PTdY2mI4k91oQZZ/qVRD2MCEgtMunStcfTg17q6PBd/y
FhOOt7Q41Aa+a9mva0Uyuie3rXkONSfuUVP1jv5uEr3kFgeF4hyqrohWW/dcBvKy
+l3mWgRt+oQaiyjI1/hTG3A1y2LKNIMPMomBT/hX6FqcG363mO7G5GApETEZhZic
7JdEGVgIFNEHKgUr9T6JxQgqUpV2SZE1xOpX8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBirs32Gx0LhiaytCFTvRiI82Ww6MB8GA1UdIwQYMBaAFFzLY1TysMdSBpkM
mVzJ8foQiyHPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGUwNDY3
N2I1MWM2ZmVlNjEwMjc5YmIwNzQ2MTczNGU1MzRiNjk5ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTcxNmMzODQtMTViMi00Y2Q0LTk1ODQtOGYzNjFk
NzRjM2I0LzQzM2MzZTYzZWRiOTllZmM2YjU5NWM5YTFiZGE0ZjFkZjE3NWEyODUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NzE2YzM4NC0xNWIyLTRjZDQtOTU4NC04ZjM2
MWQ3NGMzYjQvOGUwNDY3N2I1MWM2ZmVlNjEwMjc5YmIwNzQ2MTczNGU1MzRiNjk5
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2rhzANBgkqhkiG9w0BAQsFAAOCAQEAUO2rS7BSGXmOAy2Z
ali8ppHLw6HYApLVN7dO0EpjgyHVKFcfpBOAREiqJeom6lfnD+oEZmTWNxbeZhSu
tmD6zktvCPfO1M7np6wazq0xQZtUECh7iPUkTehbRTXfpqUQZ34RhNI2Y0Oc+iCj
4Xs9ZiZbDagxW36sRi1W+rI6l3GE9YYCj4YA3fi/Rat3IwbsEV/tmOr0gUq11v6U
akVfJzAwTETqBBWSMzPmtzJmgJ0bzKKSUxik5ZDd7KL5EhHcb2B/oiEJMbEh6CX+
HUbZLfnnMy8JLrVE4QEb96dNWwqVgTCv9OQ1no3/f5Kv5nxbFe3k8fM3kpjkmRrt
FblhtQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org