Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/b3ea1d3230d17be08a292431edb5cff4173dceef.roa
File:                     b3ea1d3230d17be08a292431edb5cff4173dceef.roa (raw, json)
Hash identifier:          rmLfDPaVS4IHoKrrt6MbvsgTquZeUebCIiddKTppqsc=
Subject key identifier:   25:E9:39:15:AE:DC:B6:93:D8:FB:2E:D3:B6:8D:AC:46:53:89:8A:BD
Certificate issuer:       /CN=42b02bf99b87736ae95e822677591902bbb82724
Certificate serial:       209F11
Authority key identifier: AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/b3ea1d3230d17be08a292431edb5cff4173dceef.roa
Signing time:             Mon 15 May 2023 20:27:38 +0000
ROA not before:           Sun 14 May 2023 20:27:38 +0000
ROA not after:            Thu 15 May 2025 20:27:38 +0000
asID:                     266844
IP address blocks:        45.238.152.0/24 maxlen: 24
                          45.238.153.0/24 maxlen: 24
                          45.238.154.0/24 maxlen: 24
                          45.238.155.0/24 maxlen: 24
                          2803:dca0::/32 maxlen: 96

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137873 (0x209f11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b02bf99b87736ae95e822677591902bbb82724
        Validity
            Not Before: May 14 20:27:38 2023 GMT
            Not After : May 15 20:27:38 2025 GMT
        Subject: CN=b3ea1d3230d17be08a292431edb5cff4173dceef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:8a:38:f7:d6:8a:b7:8e:04:86:e8:09:5f:
                    3b:7a:d2:aa:aa:91:8c:4f:88:9c:b6:93:ba:2f:13:
                    4f:fb:e8:d8:61:21:4b:d3:8a:32:84:55:71:32:e5:
                    00:ef:fb:1b:36:7d:27:ae:1a:8d:95:17:aa:bd:31:
                    16:02:58:07:ee:9a:db:fd:4a:93:29:49:52:8b:69:
                    5e:7d:bb:06:b5:53:19:a9:fd:36:ac:41:6b:18:72:
                    14:c3:de:76:99:82:61:42:5b:5a:ec:e2:4e:e3:39:
                    c3:03:78:3b:a8:4c:50:e9:de:51:78:53:7e:a5:98:
                    d7:65:4c:bf:8f:38:bf:48:3d:d0:af:df:da:e8:6f:
                    32:e6:38:cb:e3:a7:6e:e1:4e:bd:f8:8e:8c:7c:91:
                    6c:0b:05:8e:57:77:e4:b7:ae:89:e7:75:cc:bf:7a:
                    19:e1:e3:92:84:ed:ce:50:35:a9:02:94:f4:a7:8a:
                    d4:b4:ae:7e:fc:8a:b7:bd:a1:05:94:fb:68:61:82:
                    c9:aa:de:9e:ef:2e:06:e7:35:e1:73:b3:30:48:6e:
                    32:1b:52:54:a7:97:d3:50:0f:2c:5d:8f:ce:c3:b4:
                    8e:3f:29:4f:c5:a9:eb:f6:08:5a:2c:81:7f:4b:ba:
                    5e:c3:fc:35:79:d5:6d:6e:04:29:42:b0:c5:94:1e:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E9:39:15:AE:DC:B6:93:D8:FB:2E:D3:B6:8D:AC:46:53:89:8A:BD
            X509v3 Authority Key Identifier:
                keyid:AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/b3ea1d3230d17be08a292431edb5cff4173dceef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.152.0/22
                IPv6:
                  2803:dca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:89:79:3d:81:cb:f5:b2:a8:b7:ab:dc:cb:6a:51:5e:c3:2f:
         38:e9:70:60:9f:84:4e:5f:05:81:79:9c:dd:45:20:ac:ab:61:
         3b:90:48:bb:0f:58:93:82:1d:f5:74:bf:01:61:fb:bb:79:45:
         03:cd:fb:77:2f:dc:f8:18:52:0f:80:90:d8:50:63:70:2c:c9:
         6c:7d:10:ab:82:c3:3a:5a:36:5d:d5:81:2b:33:6e:db:13:69:
         94:fe:91:21:e0:0c:00:13:a8:2a:0c:31:b0:ba:dd:19:7a:0a:
         9f:5d:2f:d5:3d:bb:d6:5e:9f:b6:68:fb:94:10:2c:51:7c:82:
         b8:ae:ba:60:25:a7:d7:a2:34:d0:85:f5:e4:09:f8:ae:7a:f5:
         eb:d6:3d:2b:64:16:88:fb:34:d3:bf:da:12:b1:4b:c9:10:77:
         96:4f:27:37:42:78:32:c4:e3:1d:3a:43:e8:8d:f8:a0:6d:d6:
         03:dd:73:02:c6:ce:92:aa:26:a2:41:17:40:7f:41:42:59:2d:
         ca:d4:3c:4c:ec:4b:56:75:f8:35:2c:86:3c:c8:75:cf:fa:2c:
         50:a6:31:ea:74:11:aa:36:01:02:63:73:00:98:1d:09:ad:d5:
         11:fc:2b:df:cd:bb:b2:8e:05:d6:c8:d3:df:dd:0a:fe:e0:38:
         2e:be:31:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIJ8RMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
YjAyYmY5OWI4NzczNmFlOTVlODIyNjc3NTkxOTAyYmJiODI3MjQwHhcNMjMwNTE0
MjAyNzM4WhcNMjUwNTE1MjAyNzM4WjAzMTEwLwYDVQQDEyhiM2VhMWQzMjMwZDE3
YmUwOGEyOTI0MzFlZGI1Y2ZmNDE3M2RjZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiUmKOPfWireOBIboCV87etKqqpGMT4ictpO6LxNP++jYYSFL
04oyhFVxMuUA7/sbNn0nrhqNlReqvTEWAlgH7prb/UqTKUlSi2lefbsGtVMZqf02
rEFrGHIUw952mYJhQlta7OJO4znDA3g7qExQ6d5ReFN+pZjXZUy/jzi/SD3Qr9/a
6G8y5jjL46du4U69+I6MfJFsCwWOV3fkt66J53XMv3oZ4eOShO3OUDWpApT0p4rU
tK5+/Iq3vaEFlPtoYYLJqt6e7y4G5zXhc7MwSG4yG1JUp5fTUA8sXY/Ow7SOPylP
xanr9ghaLIF/S7pew/w1edVtbgQpQrDFlB4xMwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCXpORWu3LaT2Psu07aNrEZTiYq9MB8GA1UdIwQYMBaAFKxnaDCzpoWFRG2I
J0HjBLhxSGYoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDJiMDJi
Zjk5Yjg3NzM2YWU5NWU4MjI2Nzc1OTE5MDJiYmI4MjcyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMwZmU4MjItM2NlNC00ZTcwLWIxN2MtOGJlYzY2
YzFiYTI3L2IzZWExZDMyMzBkMTdiZTA4YTI5MjQzMWVkYjVjZmY0MTczZGNlZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzBmZTgyMi0zY2U0LTRlNzAtYjE3Yy04YmVj
NjZjMWJhMjcvNDJiMDJiZjk5Yjg3NzM2YWU5NWU4MjI2Nzc1OTE5MDJiYmI4Mjcy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3umDANBAIAAjAHAwUAKAPcoDANBgkqhkiG9w0BAQsFAAOC
AQEAWYl5PYHL9bKot6vcy2pRXsMvOOlwYJ+ETl8FgXmc3UUgrKthO5BIuw9Yk4Id
9XS/AWH7u3lFA837dy/c+BhSD4CQ2FBjcCzJbH0Qq4LDOlo2XdWBKzNu2xNplP6R
IeAMABOoKgwxsLrdGXoKn10v1T271l6ftmj7lBAsUXyCuK66YCWn16I00IX15An4
rnr169Y9K2QWiPs007/aErFLyRB3lk8nN0J4MsTjHTpD6I34oG3WA91zAsbOkqom
okEXQH9BQlktytQ8TOxLVnX4NSyGPMh1z/osUKYx6nQRqjYBAmNzAJgdCa3VEfwr
3827so4F1sjT390K/uA4Lr4xUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org