Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/f53d064411e74d7e11b46e8ce240025a3ed4128f.roa
File:                     f53d064411e74d7e11b46e8ce240025a3ed4128f.roa (raw, json)
Hash identifier:          Y/Mouis3535Yzt67M04hWtMgfxSQU20QiRswxJF+6jA=
Subject key identifier:   6F:45:CD:34:66:69:EA:BD:80:47:38:04:E8:60:C2:7F:DF:C9:7E:90
Certificate issuer:       /CN=48601251b0ea3b955f4437e7a7e207d8ec473a6d
Certificate serial:       03C546
Authority key identifier: 33:71:2E:3F:93:E3:92:F2:75:13:84:B9:EE:94:62:42:C8:FC:68:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48601251b0ea3b955f4437e7a7e207d8ec473a6d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/f53d064411e74d7e11b46e8ce240025a3ed4128f.roa
Signing time:             Wed 11 Oct 2023 20:20:54 +0000
ROA not before:           Tue 10 Oct 2023 20:20:54 +0000
ROA not after:            Sat 11 Oct 2025 20:20:54 +0000
asID:                     263809
IP address blocks:        45.186.29.0/24 maxlen: 24
                          45.186.30.0/24 maxlen: 24
                          45.186.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247110 (0x3c546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48601251b0ea3b955f4437e7a7e207d8ec473a6d
        Validity
            Not Before: Oct 10 20:20:54 2023 GMT
            Not After : Oct 11 20:20:54 2025 GMT
        Subject: CN=f53d064411e74d7e11b46e8ce240025a3ed4128f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:00:0b:e8:60:9f:2c:37:7a:c4:3f:6b:27:
                    28:c6:8f:8f:42:f9:7d:61:b1:fd:ab:29:80:ad:15:
                    4d:ad:86:98:94:61:d1:33:6e:a4:0d:dc:43:44:b9:
                    09:ec:e5:8e:8a:ec:2f:6f:d6:49:7f:96:6e:f3:75:
                    8b:ca:41:8d:5b:62:2e:ad:61:78:0f:1a:1d:0e:de:
                    e1:95:d9:28:09:1c:e2:6d:0a:a0:ca:11:66:5b:d4:
                    78:6e:96:4c:a0:03:ab:3d:9b:2b:3c:be:61:2b:a9:
                    f9:8d:a4:b3:a1:3e:89:e5:0e:2e:d7:79:7f:04:f4:
                    a2:88:4c:f0:5e:2f:af:24:d6:3a:00:45:17:15:bd:
                    e2:91:a5:23:fe:19:bd:37:2f:95:66:4c:3c:8d:84:
                    77:a0:a4:3c:12:04:dc:12:20:e5:29:c8:ec:2b:da:
                    48:b5:f1:1e:d1:c8:96:a1:ae:0b:03:59:96:d8:8d:
                    dc:7d:60:a0:ba:80:72:38:16:42:47:98:e4:c0:76:
                    28:6a:2f:f6:6c:aa:22:5d:8c:c8:90:1c:d9:46:19:
                    b1:64:30:ed:39:1a:4d:f2:42:f2:16:e0:d3:b9:da:
                    75:5c:fa:1a:ad:62:6e:c9:6b:b3:eb:bc:9c:4f:23:
                    27:b4:80:87:02:17:7b:b2:ed:49:08:95:7a:03:4f:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:CD:34:66:69:EA:BD:80:47:38:04:E8:60:C2:7F:DF:C9:7E:90
            X509v3 Authority Key Identifier:
                keyid:33:71:2E:3F:93:E3:92:F2:75:13:84:B9:EE:94:62:42:C8:FC:68:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48601251b0ea3b955f4437e7a7e207d8ec473a6d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/f53d064411e74d7e11b46e8ce240025a3ed4128f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.29.0-45.186.31.255

    Signature Algorithm: sha256WithRSAEncryption
         71:29:01:e5:61:0a:8a:31:b0:e2:51:03:aa:1a:45:17:ee:d6:
         ed:b6:1c:e8:1d:48:bb:17:ef:0d:79:50:4e:4e:ad:26:54:5f:
         a4:44:22:95:dd:64:7d:72:20:3c:f8:af:0b:39:ae:25:ea:3a:
         95:f2:06:74:3b:5f:d5:ec:53:11:57:90:2c:bd:e3:43:11:15:
         2f:5f:a6:8b:0c:a1:27:73:73:d2:18:fe:3f:83:11:c7:20:12:
         e3:35:b5:ca:b8:c5:71:53:96:90:02:72:5c:88:10:32:1b:e5:
         62:e5:64:4b:46:25:ba:b6:ac:43:5b:de:5d:44:0c:41:c3:f7:
         c5:da:ff:97:62:55:a3:f5:64:84:f3:ad:83:eb:82:d2:6c:6d:
         d5:35:4d:a5:42:ea:f2:a3:85:ec:ab:35:ed:d1:12:b8:46:cd:
         0d:6c:7e:54:0d:85:bd:6a:1a:69:01:dd:75:99:56:c7:8e:7d:
         b8:72:db:2f:8d:cb:e8:08:3a:66:17:5d:06:d5:63:44:d0:02:
         42:31:98:45:74:fc:35:48:18:fc:3d:60:64:02:4b:7a:7b:7b:
         59:c9:9c:ec:d5:01:87:17:d9:b6:b9:f4:5e:2e:29:41:6d:df:
         d7:7c:58:c5:4c:10:a0:88:f8:83:b0:0d:a9:e5:a8:93:f6:54:
         89:be:7f:08
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDA8VGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ4
NjAxMjUxYjBlYTNiOTU1ZjQ0MzdlN2E3ZTIwN2Q4ZWM0NzNhNmQwHhcNMjMxMDEw
MjAyMDU0WhcNMjUxMDExMjAyMDU0WjAzMTEwLwYDVQQDEyhmNTNkMDY0NDExZTc0
ZDdlMTFiNDZlOGNlMjQwMDI1YTNlZDQxMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiNsAC+hgnyw3esQ/aycoxo+PQvl9YbH9qymArRVNrYaYlGHR
M26kDdxDRLkJ7OWOiuwvb9ZJf5Zu83WLykGNW2IurWF4DxodDt7hldkoCRzibQqg
yhFmW9R4bpZMoAOrPZsrPL5hK6n5jaSzoT6J5Q4u13l/BPSiiEzwXi+vJNY6AEUX
Fb3ikaUj/hm9Ny+VZkw8jYR3oKQ8EgTcEiDlKcjsK9pItfEe0ciWoa4LA1mW2I3c
fWCguoByOBZCR5jkwHYoai/2bKoiXYzIkBzZRhmxZDDtORpN8kLyFuDTudp1XPoa
rWJuyWuz67ycTyMntICHAhd7su1JCJV6A090KwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFG9FzTRmaeq9gEc4BOhgwn/fyX6QMB8GA1UdIwQYMBaAFDNxLj+T45LydROE
ue6UYkLI/GhYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDg2MDEy
NTFiMGVhM2I5NTVmNDQzN2U3YTdlMjA3ZDhlYzQ3M2E2ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmI3ZjRmOGUtNjdiYS00OWM5LTg5MmMtYTVhMzFj
MjgzY2QxL2Y1M2QwNjQ0MTFlNzRkN2UxMWI0NmU4Y2UyNDAwMjVhM2VkNDEyOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YjdmNGY4ZS02N2JhLTQ5YzktODkyYy1hNWEz
MWMyODNjZDEvNDg2MDEyNTFiMGVhM2I5NTVmNDQzN2U3YTdlMjA3ZDhlYzQ3M2E2
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQALbodAwQFLboAMA0GCSqGSIb3DQEBCwUAA4IBAQBxKQHl
YQqKMbDiUQOqGkUX7tbtthzoHUi7F+8NeVBOTq0mVF+kRCKV3WR9ciA8+K8LOa4l
6jqV8gZ0O1/V7FMRV5AsveNDERUvX6aLDKEnc3PSGP4/gxHHIBLjNbXKuMVxU5aQ
AnJciBAyG+Vi5WRLRiW6tqxDW95dRAxBw/fF2v+XYlWj9WSE862D64LSbG3VNU2l
Quryo4XsqzXt0RK4Rs0NbH5UDYW9ahppAd11mVbHjn24ctsvjcvoCDpmF10G1WNE
0AJCMZhFdPw1SBj8PWBkAkt6e3tZyZzs1QGHF9m2ufReLilBbd/XfFjFTBCgiPiD
sA2p5aiT9lSJvn8I
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org