Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/de51ab7222cfc0514f1fe550261024d436aeaaab.roa
File:                     de51ab7222cfc0514f1fe550261024d436aeaaab.roa (raw, json)
Hash identifier:          nRXYv95SVctQzEskxApMRkX8hXYXhwRPMgFUduFlsrk=
Subject key identifier:   75:FC:25:99:3A:AB:B6:05:0F:D0:49:88:B9:C0:6A:06:A7:E1:0B:EB
Certificate issuer:       /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial:       288857
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/de51ab7222cfc0514f1fe550261024d436aeaaab.roa
Signing time:             Thu 28 Mar 2024 19:02:03 +0000
ROA not before:           Thu 28 Mar 2024 03:00:00 +0000
ROA not after:            Sat 28 Mar 2026 03:00:00 +0000
asID:                     52468
IP address blocks:        45.225.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2656343 (0x288857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
        Validity
            Not Before: Mar 28 03:00:00 2024 GMT
            Not After : Mar 28 03:00:00 2026 GMT
        Subject: CN=de51ab7222cfc0514f1fe550261024d436aeaaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:4c:e0:cd:80:fb:b9:e4:bb:fe:5e:c7:76:
                    a1:a6:50:d6:b8:e7:c5:07:11:bf:f0:67:f5:ca:8d:
                    b7:15:c9:20:ad:af:cd:c8:9c:b8:34:c9:62:06:fd:
                    95:7a:a7:36:f6:72:91:e9:00:5c:15:a4:0b:31:37:
                    c1:60:79:64:ac:79:03:17:ab:7f:ba:5d:f9:bc:b0:
                    98:d2:56:dc:b6:27:77:04:af:45:2e:d0:f0:74:df:
                    6d:e1:98:00:b8:1e:f3:1d:5b:2d:59:32:53:4b:93:
                    ca:a9:ca:32:2d:2d:ce:6c:ae:8a:8b:fd:1d:75:96:
                    1b:ee:8a:39:3c:ea:30:46:1b:80:e0:ef:d2:d0:77:
                    28:bf:47:97:04:77:28:68:57:cb:7b:ef:d1:cd:60:
                    8b:94:13:47:f9:d4:38:3a:98:21:c0:cc:bc:6e:e5:
                    9f:6f:85:24:16:74:43:2b:56:f0:d7:03:b8:09:64:
                    9b:63:5e:71:ce:3d:f6:75:78:26:c3:e8:33:82:6f:
                    62:44:db:f1:0f:9f:de:8b:50:1c:78:40:1b:73:72:
                    0f:c9:c1:49:53:07:66:d7:33:a8:b5:60:56:26:82:
                    98:07:2e:67:4a:08:60:05:28:1b:e9:3e:f1:34:a5:
                    b6:42:90:db:7c:86:6d:1e:9a:93:36:1d:4a:a5:f0:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:25:99:3A:AB:B6:05:0F:D0:49:88:B9:C0:6A:06:A7:E1:0B:EB
            X509v3 Authority Key Identifier:
                keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/de51ab7222cfc0514f1fe550261024d436aeaaab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:6f:0e:3e:1a:41:84:cf:60:05:70:72:7a:02:be:d1:32:
         e0:27:92:e0:4d:ef:6c:e4:09:a8:d9:ac:cc:67:06:84:04:56:
         3b:7b:05:f2:7f:10:a8:7b:0c:ff:1a:4d:a6:29:e8:b5:a2:d6:
         03:33:0f:10:45:2f:48:9e:ee:d0:12:54:c0:8b:91:75:ad:74:
         10:f1:df:96:08:fc:fd:a1:d6:a7:f3:d5:95:35:76:15:21:e1:
         0f:6c:29:7c:ec:8a:34:f5:fc:6d:41:90:e3:0a:70:79:b2:f7:
         ad:21:6b:0c:5f:a4:52:23:70:a5:07:1d:33:c6:a8:04:ee:03:
         b5:ac:f7:97:ad:4a:70:d7:b1:d3:26:39:41:97:e3:ab:7f:fe:
         8f:4e:83:0d:5d:ee:50:3e:5a:56:83:38:20:c9:e2:49:3a:b7:
         e4:6a:0b:94:62:54:3d:a9:99:15:50:75:9f:e1:95:41:5a:d2:
         86:be:cb:2f:40:13:c6:13:0c:04:6a:04:39:1e:83:68:46:69:
         5d:95:cc:7d:01:b3:25:b7:ed:f2:98:69:57:73:f4:17:9d:61:
         0c:9b:7a:10:ac:87:9b:97:d1:7b:01:8d:62:dd:9e:ce:61:76:
         a8:97:96:7f:b0:78:7c:9b:51:64:14:e8:31:00:47:d4:53:f9:
         65:61:98:82
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKIhXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
MWZlMGM0ZTY1MGEzMzhlODBiNDA2NmUzMWU0OWU4MTIyY2RlYjEwHhcNMjQwMzI4
MDMwMDAwWhcNMjYwMzI4MDMwMDAwWjAzMTEwLwYDVQQDEyhkZTUxYWI3MjIyY2Zj
MDUxNGYxZmU1NTAyNjEwMjRkNDM2YWVhYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh5tM4M2A+7nku/5ex3ahplDWuOfFBxG/8Gf1yo23Fckgra/N
yJy4NMliBv2Veqc29nKR6QBcFaQLMTfBYHlkrHkDF6t/ul35vLCY0lbctid3BK9F
LtDwdN9t4ZgAuB7zHVstWTJTS5PKqcoyLS3ObK6Ki/0ddZYb7oo5POowRhuA4O/S
0Hcov0eXBHcoaFfLe+/RzWCLlBNH+dQ4OpghwMy8buWfb4UkFnRDK1bw1wO4CWSb
Y15xzj32dXgmw+gzgm9iRNvxD5/ei1AceEAbc3IPycFJUwdm1zOotWBWJoKYBy5n
SghgBSgb6T7xNKW2QpDbfIZtHpqTNh1KpfDIwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHX8JZk6q7YFD9BJiLnAagan4QvrMB8GA1UdIwQYMBaAFOz7MiMnJia//GJW
1tjVhZ/+q+gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkxZmUw
YzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGViMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzUzZDZmNjMtOTFlMS00NGVkLWFmY2QtMTYyMjA2
MGM3ODRjL2RlNTFhYjcyMjJjZmMwNTE0ZjFmZTU1MDI2MTAyNGQ0MzZhZWFhYWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNTNkNmY2My05MWUxLTQ0ZWQtYWZjZC0xNjIy
MDYwYzc4NGMvZDkxZmUwYzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGVi
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3haDANBgkqhkiG9w0BAQsFAAOCAQEAH61vDj4aQYTPYAVw
cnoCvtEy4CeS4E3vbOQJqNmszGcGhARWO3sF8n8QqHsM/xpNpinotaLWAzMPEEUv
SJ7u0BJUwIuRda10EPHflgj8/aHWp/PVlTV2FSHhD2wpfOyKNPX8bUGQ4wpwebL3
rSFrDF+kUiNwpQcdM8aoBO4Dtaz3l61KcNex0yY5QZfjq3/+j06DDV3uUD5aVoM4
IMniSTq35GoLlGJUPamZFVB1n+GVQVrShr7LL0ATxhMMBGoEOR6DaEZpXZXMfQGz
Jbft8phpV3P0F51hDJt6EKyHm5fRewGNYt2ezmF2qJeWf7B4fJtRZBToMQBH1FP5
ZWGYgg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org