Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aee4826d63766e226d0a2f2540446f7911853ecb.roa
File:                     aee4826d63766e226d0a2f2540446f7911853ecb.roa (raw, json)
Hash identifier:          DrDlf1Cs27kSe7ZYVPyf+dXwQ9LO7YScwAWpvuufhsQ=
Subject key identifier:   93:20:9F:C8:C1:10:96:30:85:61:EF:67:25:AA:DC:C7:79:42:6E:B5
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       0F7B
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aee4826d63766e226d0a2f2540446f7911853ecb.roa
Signing time:             Fri 16 Apr 2021 17:17:05 +0000
ROA not before:           Fri 16 Apr 2021 03:00:00 +0000
ROA not after:            Sun 16 Apr 2023 03:00:00 +0000
asID:                     267878
IP address blocks:        45.175.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3963 (0xf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 16 03:00:00 2021 GMT
            Not After : Apr 16 03:00:00 2023 GMT
        Subject: CN=aee4826d63766e226d0a2f2540446f7911853ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:59:0a:c3:dd:cb:6a:10:38:f4:a9:81:fd:
                    c9:15:04:c0:85:d5:f1:29:51:a3:bb:4a:05:cd:56:
                    ad:4b:cc:ad:63:19:91:7c:00:52:da:61:14:f8:b5:
                    62:c8:b1:8c:0d:06:4d:5c:bf:af:42:b0:12:f4:58:
                    a8:c9:ec:92:9a:30:8e:0f:50:38:d9:7b:b5:73:09:
                    cf:ef:46:c4:da:e1:2e:5b:63:88:45:95:6c:6a:d7:
                    28:3a:2d:c6:d3:cd:ee:c3:ca:65:4d:c2:30:f3:94:
                    fb:29:b1:2e:f0:ad:79:46:3c:18:b5:55:81:b7:33:
                    47:c4:ee:6d:ca:03:91:32:9d:91:55:01:7a:3d:14:
                    b8:de:a8:b5:79:97:dc:23:a8:bf:54:2f:17:7d:1a:
                    fc:e8:f0:3d:0d:27:1b:ad:0e:c1:94:64:b8:70:f1:
                    71:5e:d3:d6:77:7a:44:66:db:17:58:a7:81:1e:88:
                    25:cd:27:1c:64:e3:a7:fe:03:75:09:3c:e8:3b:56:
                    52:dc:37:ae:4d:47:6a:d2:41:c3:71:c1:89:31:87:
                    89:ff:06:e3:c9:0c:81:8a:b2:17:b8:17:4d:62:ad:
                    5a:ff:8e:ad:17:ec:f8:fe:9e:71:4e:f6:04:bc:76:
                    76:bd:60:a3:13:9f:27:98:93:59:cb:ce:90:f2:ac:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:20:9F:C8:C1:10:96:30:85:61:EF:67:25:AA:DC:C7:79:42:6E:B5
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aee4826d63766e226d0a2f2540446f7911853ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:df:07:c3:71:95:c7:48:fb:6b:30:c9:9e:4a:4c:f2:86:
         02:9b:30:26:56:55:7b:bf:fe:eb:08:d6:2d:84:cf:92:ae:51:
         11:4b:58:5c:32:0d:e2:d7:98:51:c9:f0:56:66:5e:ab:8a:3b:
         9e:64:3f:1e:de:0e:b5:c2:82:aa:b4:b7:b2:f4:98:55:50:25:
         61:20:3d:70:fc:7c:6d:3a:43:8f:1e:3b:34:13:41:44:bc:40:
         8f:f6:ae:39:e1:5b:0a:8e:a1:56:46:80:30:c4:0b:2d:b5:87:
         f0:8f:be:cc:a5:d0:99:89:54:2f:0f:ac:8e:29:94:86:33:9d:
         09:a1:da:02:31:e4:9a:f7:1f:9e:0d:eb:a2:e0:c9:2a:62:7d:
         ed:9c:e7:92:35:01:04:95:0b:3a:f9:9f:f3:45:b9:43:89:e5:
         4d:31:7a:94:08:98:76:ab:d2:a5:f1:e6:42:bc:0b:98:2d:c1:
         cf:fc:e6:1a:d4:7f:e4:13:2c:54:9b:d6:77:47:92:33:ee:73:
         08:82:8a:87:cb:3a:11:fd:3f:b3:fb:d7:7d:4a:e3:8c:d3:2e:
         30:bc:e4:66:d4:10:e4:6b:c9:21:eb:3b:da:50:b1:f2:01:02:
         90:11:b2:e5:d7:b5:97:e7:53:c0:37:50:bc:4e:88:f0:38:90:
         6e:f1:d9:49
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICD3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZmM2
MDkxYTE3MTc2NGM1NTgwNDA0ZWY2YzMxOTEwNjE4NzAyODFmZjAeFw0yMTA0MTYw
MzAwMDBaFw0yMzA0MTYwMzAwMDBaMDMxMTAvBgNVBAMTKGFlZTQ4MjZkNjM3NjZl
MjI2ZDBhMmYyNTQwNDQ2Zjc5MTE4NTNlY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCD4lkKw93LahA49KmB/ckVBMCF1fEpUaO7SgXNVq1LzK1jGZF8
AFLaYRT4tWLIsYwNBk1cv69CsBL0WKjJ7JKaMI4PUDjZe7VzCc/vRsTa4S5bY4hF
lWxq1yg6LcbTze7DymVNwjDzlPspsS7wrXlGPBi1VYG3M0fE7m3KA5EynZFVAXo9
FLjeqLV5l9wjqL9ULxd9Gvzo8D0NJxutDsGUZLhw8XFe09Z3ekRm2xdYp4EeiCXN
Jxxk46f+A3UJPOg7VlLcN65NR2rSQcNxwYkxh4n/BuPJDIGKshe4F01irVr/jq0X
7Pj+nnFO9gS8dna9YKMTnyeYk1nLzpDyrJQVAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUkyCfyMEQljCFYe9nJarcx3lCbrUwHwYDVR0jBBgwFoAULjXpR88uWMD3kAKx
qDuNkyCOtiMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mYzYwOTFh
MTcxNzY0YzU1ODA0MDRlZjZjMzE5MTA2MTg3MDI4MWZmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lZmYzMDc0OS1mZGYwLTQ2NmUtOGVjNS0wZTg1NTZk
ODI2YmMvYWVlNDgyNmQ2Mzc2NmUyMjZkMGEyZjI1NDA0NDZmNzkxMTg1M2VjYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2VmZjMwNzQ5LWZkZjAtNDY2ZS04ZWM1LTBlODU1
NmQ4MjZiYy9mYzYwOTFhMTcxNzY0YzU1ODA0MDRlZjZjMzE5MTA2MTg3MDI4MWZm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALa+VMA0GCSqGSIb3DQEBCwUAA4IBAQBc+N8Hw3GVx0j7azDJ
nkpM8oYCmzAmVlV7v/7rCNYthM+SrlERS1hcMg3i15hRyfBWZl6rijueZD8e3g61
woKqtLey9JhVUCVhID1w/HxtOkOPHjs0E0FEvECP9q454VsKjqFWRoAwxAsttYfw
j77MpdCZiVQvD6yOKZSGM50JodoCMeSa9x+eDeui4MkqYn3tnOeSNQEElQs6+Z/z
RblDieVNMXqUCJh2q9Kl8eZCvAuYLcHP/OYa1H/kEyxUm9Z3R5Iz7nMIgoqHyzoR
/T+z+9d9SuOM0y4wvORm1BDka8kh6zvaULHyAQKQEbLl17WX51PAN1C8TojwOJBu
8dlJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org