Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/626926bc9993103ad2a7b81fce6522bb0551cdec.roa
File:                     626926bc9993103ad2a7b81fce6522bb0551cdec.roa (raw, json)
Hash identifier:          i9teiom3VeHbD1yzcYKIoxygpl/krmfN3X2BT4g3HFY=
Subject key identifier:   20:9C:C5:6B:7C:AF:36:AC:14:C2:24:DC:7F:24:03:1F:1F:F5:EA:E7
Certificate issuer:       /CN=42b02bf99b87736ae95e822677591902bbb82724
Certificate serial:       0CFDA1
Authority key identifier: AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/626926bc9993103ad2a7b81fce6522bb0551cdec.roa
Signing time:             Wed 24 Mar 2021 14:34:01 +0000
ROA not before:           Wed 24 Mar 2021 14:34:01 +0000
ROA not after:            Tue 24 Mar 2026 14:34:01 +0000
asID:                     266844
IP address blocks:        45.238.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851361 (0xcfda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b02bf99b87736ae95e822677591902bbb82724
        Validity
            Not Before: Mar 24 14:34:01 2021 GMT
            Not After : Mar 24 14:34:01 2026 GMT
        Subject: CN=626926bc9993103ad2a7b81fce6522bb0551cdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:6f:ec:6e:01:70:f2:a1:e5:82:9c:a3:46:
                    54:5f:f2:a4:c7:45:0c:5f:02:4d:78:d1:e9:ad:37:
                    0d:55:7b:6a:fd:38:ab:31:26:b8:c7:5a:24:54:b5:
                    ca:68:95:63:64:96:6e:ce:55:26:b6:8d:df:06:2d:
                    63:1a:fa:58:72:e6:6c:2a:de:01:b1:d4:ab:69:4f:
                    fa:03:2d:77:b1:e1:7d:50:67:94:c3:49:51:f9:2e:
                    b2:de:10:65:c0:73:99:08:9c:e2:63:af:d3:72:16:
                    39:f9:37:40:60:8d:2e:5b:1a:54:3b:f9:d4:ca:7c:
                    de:1c:57:22:1b:bb:50:dd:ab:49:03:ce:ec:2c:35:
                    cd:e7:96:af:a6:5d:78:e0:3b:bf:bd:6c:b2:fa:44:
                    9e:c0:dd:8c:5a:6e:b7:f3:38:ec:24:b4:b3:d8:8c:
                    51:b8:ab:55:2f:1f:9f:a6:c9:40:f0:8c:73:26:76:
                    48:6c:13:f5:df:8a:7d:26:d7:f2:44:26:90:b7:5c:
                    78:03:e8:de:38:ad:e1:6a:83:b1:f7:88:0d:84:20:
                    c8:47:2e:d4:8b:76:6c:be:c8:f1:5f:46:83:dd:6e:
                    6c:7a:b7:14:1e:26:c3:10:f7:60:92:e3:bb:25:8b:
                    7f:9e:45:b6:25:b6:af:4f:d2:e4:1c:d9:15:46:56:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:C5:6B:7C:AF:36:AC:14:C2:24:DC:7F:24:03:1F:1F:F5:EA:E7
            X509v3 Authority Key Identifier:
                keyid:AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/626926bc9993103ad2a7b81fce6522bb0551cdec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:36:af:ce:4f:87:0c:6b:d1:db:8e:26:dd:8a:01:24:cc:
         f2:32:73:8d:72:57:d7:02:f6:dd:fb:88:23:fd:57:60:51:90:
         fb:5d:87:a2:0e:ad:72:20:8a:51:d7:9e:a5:7e:a1:f4:e9:ae:
         e8:f2:6a:5a:aa:82:e5:6a:78:81:e9:17:b9:e0:93:37:12:05:
         de:cd:73:1e:48:f6:50:12:df:be:ac:b1:c6:b3:be:b1:12:70:
         cf:77:14:76:23:86:59:f5:ef:74:d3:01:c5:c3:83:a0:27:85:
         cc:6b:04:25:8e:8a:96:93:72:13:9e:35:d8:63:f7:6a:fa:92:
         5a:47:89:0b:31:b0:31:77:47:39:5b:7f:20:fb:f4:8e:9e:5c:
         7d:c3:e7:26:e9:70:84:d8:c4:fa:5e:2d:78:60:17:bb:f0:56:
         94:d5:f1:d0:97:6d:5f:df:6c:9d:c7:3b:ba:78:b1:ca:8d:8a:
         ef:83:42:26:33:08:90:ce:2a:0d:73:da:2d:6e:89:7d:3e:db:
         8e:2b:d3:4e:ea:81:bb:e9:1e:78:3a:cc:08:04:2b:eb:f1:3e:
         6b:6d:44:65:cd:2a:7e:89:dd:1f:74:cd:28:87:18:7b:01:21:
         74:96:e6:7a:9c:ea:c2:05:7b:10:b1:dc:ae:14:2e:2c:d1:c9:
         cd:91:99:32
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDP2hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
YjAyYmY5OWI4NzczNmFlOTVlODIyNjc3NTkxOTAyYmJiODI3MjQwHhcNMjEwMzI0
MTQzNDAxWhcNMjYwMzI0MTQzNDAxWjAzMTEwLwYDVQQDEyg2MjY5MjZiYzk5OTMx
MDNhZDJhN2I4MWZjZTY1MjJiYjA1NTFjZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjtv7G4BcPKh5YKco0ZUX/Kkx0UMXwJNeNHprTcNVXtq/Tir
MSa4x1okVLXKaJVjZJZuzlUmto3fBi1jGvpYcuZsKt4BsdSraU/6Ay13seF9UGeU
w0lR+S6y3hBlwHOZCJziY6/TchY5+TdAYI0uWxpUO/nUynzeHFciG7tQ3atJA87s
LDXN55avpl144Du/vWyy+kSewN2MWm638zjsJLSz2IxRuKtVLx+fpslA8IxzJnZI
bBP134p9JtfyRCaQt1x4A+jeOK3haoOx94gNhCDIRy7Ui3ZsvsjxX0aD3W5sercU
HibDEPdgkuO7JYt/nkW2JbavT9LkHNkVRlZD3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCCcxWt8rzasFMIk3H8kAx8f9ernMB8GA1UdIwQYMBaAFKxnaDCzpoWFRG2I
J0HjBLhxSGYoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDJiMDJi
Zjk5Yjg3NzM2YWU5NWU4MjI2Nzc1OTE5MDJiYmI4MjcyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMwZmU4MjItM2NlNC00ZTcwLWIxN2MtOGJlYzY2
YzFiYTI3LzYyNjkyNmJjOTk5MzEwM2FkMmE3YjgxZmNlNjUyMmJiMDU1MWNkZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzBmZTgyMi0zY2U0LTRlNzAtYjE3Yy04YmVj
NjZjMWJhMjcvNDJiMDJiZjk5Yjg3NzM2YWU5NWU4MjI2Nzc1OTE5MDJiYmI4Mjcy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3umDANBgkqhkiG9w0BAQsFAAOCAQEAUPQ2r85Phwxr0duO
Jt2KASTM8jJzjXJX1wL23fuII/1XYFGQ+12Hog6tciCKUdeepX6h9Omu6PJqWqqC
5Wp4gekXueCTNxIF3s1zHkj2UBLfvqyxxrO+sRJwz3cUdiOGWfXvdNMBxcODoCeF
zGsEJY6KlpNyE5412GP3avqSWkeJCzGwMXdHOVt/IPv0jp5cfcPnJulwhNjE+l4t
eGAXu/BWlNXx0JdtX99sncc7unixyo2K74NCJjMIkM4qDXPaLW6JfT7bjivTTuqB
u+keeDrMCAQr6/E+a21EZc0qfondH3TNKIcYewEhdJbmepzqwgV7ELHcrhQuLNHJ
zZGZMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org