Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/edaaac7a8d04ef56ebe2948aae8cdd54f754fdc7.roa
File:                     edaaac7a8d04ef56ebe2948aae8cdd54f754fdc7.roa (raw, json)
Hash identifier:          kgu+GrTm7dEVYSp0yXbId2Ud0unzDJf0dwX9WG6QxKk=
Subject key identifier:   FD:37:E3:80:F5:7B:5C:C3:FC:A0:B1:80:F3:83:7D:DB:42:74:BC:D2
Certificate issuer:       /CN=26454e7695148dbc143a5a733eb5ab750dc68a19
Certificate serial:       046A
Authority key identifier: FA:85:36:A6:E0:AF:D5:73:21:33:83:FD:31:39:35:CE:7D:DB:0E:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26454e7695148dbc143a5a733eb5ab750dc68a19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/edaaac7a8d04ef56ebe2948aae8cdd54f754fdc7.roa
Signing time:             Mon 03 Apr 2023 15:41:40 +0000
ROA not before:           Sun 02 Apr 2023 15:39:53 +0000
ROA not after:            Thu 03 Apr 2025 15:39:53 +0000
asID:                     27735
IP address blocks:        45.232.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26454e7695148dbc143a5a733eb5ab750dc68a19
        Validity
            Not Before: Apr  2 15:39:53 2023 GMT
            Not After : Apr  3 15:39:53 2025 GMT
        Subject: CN=edaaac7a8d04ef56ebe2948aae8cdd54f754fdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:34:db:51:33:0c:be:e7:2a:9f:eb:cd:7b:
                    56:2b:3c:44:2e:36:77:41:02:dd:67:ab:3d:d1:20:
                    8d:71:ba:a6:3d:98:df:1d:a1:99:0c:3f:9b:a5:b9:
                    98:48:7b:0d:02:cb:5c:ac:33:f7:ff:6b:e5:a5:a9:
                    c8:ed:51:82:11:35:55:95:9f:d7:1f:d4:50:c1:69:
                    ae:09:e5:c6:be:da:e9:4e:2c:82:81:2c:83:5e:a4:
                    0e:b5:2f:d5:9a:7b:ce:63:81:26:0a:64:38:fb:53:
                    ca:49:03:e2:b0:ea:0f:f0:57:75:8a:93:89:34:80:
                    ec:90:58:4b:c7:af:1b:85:93:12:95:43:e9:8f:d6:
                    5d:28:2f:1b:fa:e0:e4:33:76:64:fc:73:f3:fa:3e:
                    8f:0a:4e:2c:b8:46:b8:a4:f3:f4:e6:67:7d:80:6d:
                    32:b5:9c:58:70:50:d8:dc:b7:42:f8:b1:d4:45:fa:
                    7b:24:b7:70:05:76:03:f5:2e:64:87:d1:83:fe:91:
                    3d:c4:0d:69:d9:89:3c:0d:91:55:46:aa:f2:1a:0a:
                    4b:90:f9:d4:5e:9b:dc:12:fc:d3:10:91:18:9d:65:
                    7d:d8:ea:ee:10:98:5f:f5:58:a8:97:7d:1c:f8:9f:
                    43:77:9d:ec:65:37:39:b9:48:af:f2:2e:0e:25:1e:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:37:E3:80:F5:7B:5C:C3:FC:A0:B1:80:F3:83:7D:DB:42:74:BC:D2
            X509v3 Authority Key Identifier:
                keyid:FA:85:36:A6:E0:AF:D5:73:21:33:83:FD:31:39:35:CE:7D:DB:0E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26454e7695148dbc143a5a733eb5ab750dc68a19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/edaaac7a8d04ef56ebe2948aae8cdd54f754fdc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/26454e7695148dbc143a5a733eb5ab750dc68a19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:fc:1c:fb:20:18:d8:0c:ca:c9:d1:9d:15:51:7e:0d:1b:
         10:dc:a1:04:cc:e0:62:fa:1b:85:74:23:09:30:c9:89:27:3b:
         3c:04:b1:d1:60:52:38:62:55:65:d7:6d:45:69:0c:d3:bf:ae:
         54:fd:e9:1e:a3:6f:2b:3b:da:20:63:d5:58:53:cc:27:31:3e:
         bf:a8:3e:44:c5:d8:51:f8:7f:05:f9:c3:46:24:c1:09:ff:bb:
         58:f6:46:72:d2:3a:a9:96:e4:43:b4:da:22:a8:0b:b1:8d:82:
         84:0f:57:b0:27:6b:32:ca:4d:98:bd:0a:66:f7:26:7e:bc:44:
         46:ab:ac:26:a5:cc:76:f4:b3:e8:b9:7c:4f:83:38:46:43:41:
         98:a0:9d:a8:96:84:13:1e:08:33:df:d8:4a:14:a3:21:dc:bc:
         96:0a:33:bb:c7:7c:e6:3f:45:6e:5e:0c:ab:cd:67:75:20:4d:
         a3:b1:32:46:ab:35:59:c8:2e:56:f1:10:bd:6e:b1:00:c2:0e:
         43:e0:10:6c:9f:60:83:04:ab:1c:bd:6d:4a:3e:9e:48:3c:86:
         6d:16:59:79:77:89:af:e4:47:8e:03:38:5a:61:35:42:dc:52:
         2b:d7:7f:71:8c:36:cd:92:1b:e8:dc:2d:33:a4:18:44:af:48:
         de:17:f9:24
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjY0
NTRlNzY5NTE0OGRiYzE0M2E1YTczM2ViNWFiNzUwZGM2OGExOTAeFw0yMzA0MDIx
NTM5NTNaFw0yNTA0MDMxNTM5NTNaMDMxMTAvBgNVBAMTKGVkYWFhYzdhOGQwNGVm
NTZlYmUyOTQ4YWFlOGNkZDU0Zjc1NGZkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC91jTbUTMMvucqn+vNe1YrPEQuNndBAt1nqz3RII1xuqY9mN8d
oZkMP5uluZhIew0Cy1ysM/f/a+WlqcjtUYIRNVWVn9cf1FDBaa4J5ca+2ulOLIKB
LINepA61L9Wae85jgSYKZDj7U8pJA+Kw6g/wV3WKk4k0gOyQWEvHrxuFkxKVQ+mP
1l0oLxv64OQzdmT8c/P6Po8KTiy4Rrik8/TmZ32AbTK1nFhwUNjct0L4sdRF+nsk
t3AFdgP1LmSH0YP+kT3EDWnZiTwNkVVGqvIaCkuQ+dRem9wS/NMQkRidZX3Y6u4Q
mF/1WKiXfRz4n0N3nexlNzm5SK/yLg4lHiBpAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU/TfjgPV7XMP8oLGA84N920J0vNIwHwYDVR0jBBgwFoAU+oU2puCv1XMhM4P9
MTk1zn3bDuYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yNjQ1NGU3
Njk1MTQ4ZGJjMTQzYTVhNzMzZWI1YWI3NTBkYzY4YTE5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9jYjdjMjY1MS02ODM1LTRhNzQtYTA0Ni1jYWE4Zjk2
OWRlMzUvZWRhYWFjN2E4ZDA0ZWY1NmViZTI5NDhhYWU4Y2RkNTRmNzU0ZmRjNy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2NiN2MyNjUxLTY4MzUtNGE3NC1hMDQ2LWNhYThm
OTY5ZGUzNS8yNjQ1NGU3Njk1MTQ4ZGJjMTQzYTVhNzMzZWI1YWI3NTBkYzY4YTE5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLeh4MA0GCSqGSIb3DQEBCwUAA4IBAQCNk/wc+yAY2AzKydGd
FVF+DRsQ3KEEzOBi+huFdCMJMMmJJzs8BLHRYFI4YlVl121FaQzTv65U/ekeo28r
O9ogY9VYU8wnMT6/qD5ExdhR+H8F+cNGJMEJ/7tY9kZy0jqpluRDtNoiqAuxjYKE
D1ewJ2syyk2YvQpm9yZ+vERGq6wmpcx29LPouXxPgzhGQ0GYoJ2oloQTHggz39hK
FKMh3LyWCjO7x3zmP0VuXgyrzWd1IE2jsTJGqzVZyC5W8RC9brEAwg5D4BBsn2CD
BKscvW1KPp5IPIZtFll5d4mv5EeOAzhaYTVC3FIr139xjDbNkhvo3C0zpBhEr0je
F/kk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org