Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/829fb7660f61a94f1747052e2fca659bfc9e159b.roa
File:                     829fb7660f61a94f1747052e2fca659bfc9e159b.roa (raw, json)
Hash identifier:          FkI25eTLsDz0zK3Ri/GTqGz8jo1SkA/E6caIw4RORsY=
Subject key identifier:   14:CE:CA:9B:BD:F3:9D:18:EA:8A:26:D6:56:62:15:77:6E:F5:5A:30
Certificate issuer:       /CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
Certificate serial:       0B6D74
Authority key identifier: B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/829fb7660f61a94f1747052e2fca659bfc9e159b.roa
Signing time:             Wed 24 Mar 2021 14:29:05 +0000
ROA not before:           Wed 24 Mar 2021 14:29:05 +0000
ROA not after:            Tue 24 Mar 2026 14:29:05 +0000
asID:                     267864
IP address blocks:        45.176.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748916 (0xb6d74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
        Validity
            Not Before: Mar 24 14:29:05 2021 GMT
            Not After : Mar 24 14:29:05 2026 GMT
        Subject: CN=829fb7660f61a94f1747052e2fca659bfc9e159b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:01:3d:2a:43:ae:f2:6d:4a:b5:fe:9c:37:
                    96:5e:17:15:3e:50:5c:6e:6c:e2:9a:f6:05:ab:45:
                    3d:bf:c5:74:45:5f:20:f4:f0:72:aa:61:9e:e2:b9:
                    04:02:aa:61:f6:9d:8e:4e:9c:a9:fe:5e:b4:cc:d7:
                    87:aa:ab:aa:8d:ba:f6:a8:24:9e:da:2d:01:e0:3b:
                    a9:39:9a:15:6a:5c:49:93:db:ba:97:04:38:7c:d7:
                    ea:11:fc:c7:cd:28:ee:74:5b:81:c2:3f:48:41:41:
                    50:5b:aa:32:94:22:75:f3:81:9b:0a:83:36:18:17:
                    f5:01:5b:cf:c4:40:ae:01:b0:a4:4a:13:ce:b2:f6:
                    68:ec:5c:4f:6e:b7:e8:bf:11:00:64:1c:a6:ad:64:
                    74:09:82:f6:77:63:4d:72:ae:d3:94:1b:9d:6c:ca:
                    0e:0c:c0:6d:17:81:50:69:2c:ea:55:91:34:26:9b:
                    72:3c:ec:d2:06:4b:e7:79:b2:8d:ce:67:1d:47:c0:
                    ff:ac:b2:cd:be:c4:d5:a2:3e:85:a1:76:ad:d4:cf:
                    4f:d8:7a:34:30:58:3e:81:57:5c:04:32:29:09:a9:
                    1e:ca:e4:f7:0e:bd:be:9b:bb:b0:fd:c7:dd:37:89:
                    6e:6b:99:56:7a:a8:49:a5:39:35:3c:9e:62:21:f8:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:CA:9B:BD:F3:9D:18:EA:8A:26:D6:56:62:15:77:6E:F5:5A:30
            X509v3 Authority Key Identifier:
                keyid:B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/829fb7660f61a94f1747052e2fca659bfc9e159b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/b85681cb3788741f37ae8f16dc7e84b962b71feb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:d6:8a:87:da:00:9e:c6:da:25:4a:cc:4a:80:0f:04:37:e5:
         83:e1:b5:15:cc:91:cd:c8:d0:53:00:f6:f1:24:b5:4b:18:87:
         27:69:7c:59:26:fc:56:27:92:9f:d5:20:3a:c7:5d:57:a5:b7:
         5f:12:89:d2:09:66:e6:80:b1:b9:62:53:7a:bf:a3:04:ca:8d:
         24:bb:25:fe:e6:7a:ab:c6:62:0b:36:d0:b3:87:c7:3c:62:95:
         de:ba:1e:96:72:95:66:7c:2d:5a:cc:8b:61:a3:c7:ca:52:55:
         b0:73:d9:bd:c5:7c:2e:f8:e8:d9:bb:0e:ce:e1:52:b9:dd:e9:
         cb:a1:52:7c:c2:38:08:e8:9e:ce:39:af:78:e0:12:95:d2:68:
         6d:bf:de:ca:58:30:32:3c:2c:64:65:25:54:dc:32:3b:30:7c:
         6e:36:2f:be:3d:d4:b3:7b:27:cd:0b:fc:f4:62:83:f1:db:7c:
         f4:ab:c8:0d:28:dc:d4:4b:c0:f6:dc:84:b8:db:8c:23:da:81:
         8a:3d:a2:d4:d3:8c:31:11:32:92:a5:2d:e0:e2:d2:54:74:dd:
         d4:d5:95:49:24:02:69:18:ec:1a:57:03:06:55:3f:8e:bd:13:
         e5:4d:91:f8:54:42:ba:2d:00:d0:a7:2b:70:dc:52:cc:94:96:
         a9:a4:07:9c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC210MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
NTY4MWNiMzc4ODc0MWYzN2FlOGYxNmRjN2U4NGI5NjJiNzFmZWIwHhcNMjEwMzI0
MTQyOTA1WhcNMjYwMzI0MTQyOTA1WjAzMTEwLwYDVQQDEyg4MjlmYjc2NjBmNjFh
OTRmMTc0NzA1MmUyZmNhNjU5YmZjOWUxNTliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxywBPSpDrvJtSrX+nDeWXhcVPlBcbmzimvYFq0U9v8V0RV8g
9PByqmGe4rkEAqph9p2OTpyp/l60zNeHqquqjbr2qCSe2i0B4DupOZoValxJk9u6
lwQ4fNfqEfzHzSjudFuBwj9IQUFQW6oylCJ184GbCoM2GBf1AVvPxECuAbCkShPO
svZo7FxPbrfovxEAZBymrWR0CYL2d2NNcq7TlBudbMoODMBtF4FQaSzqVZE0Jpty
POzSBkvnebKNzmcdR8D/rLLNvsTVoj6FoXat1M9P2Ho0MFg+gVdcBDIpCakeyuT3
Dr2+m7uw/cfdN4lua5lWeqhJpTk1PJ5iIfiQxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBTOypu9850Y6oom1lZiFXdu9VowMB8GA1UdIwQYMBaAFLa0eKnu30xcGMbz
tPfk6nF6ykTGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjg1Njgx
Y2IzNzg4NzQxZjM3YWU4ZjE2ZGM3ZTg0Yjk2MmI3MWZlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI5ZDFkM2EtZTRiMC00ODFlLThlMzctYTMyOGRm
MmUwNDBiLzgyOWZiNzY2MGY2MWE5NGYxNzQ3MDUyZTJmY2E2NTliZmM5ZTE1OWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjlkMWQzYS1lNGIwLTQ4MWUtOGUzNy1hMzI4
ZGYyZTA0MGIvYjg1NjgxY2IzNzg4NzQxZjM3YWU4ZjE2ZGM3ZTg0Yjk2MmI3MWZl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wWjANBgkqhkiG9w0BAQsFAAOCAQEAwdaKh9oAnsbaJUrM
SoAPBDflg+G1FcyRzcjQUwD28SS1SxiHJ2l8WSb8VieSn9UgOsddV6W3XxKJ0glm
5oCxuWJTer+jBMqNJLsl/uZ6q8ZiCzbQs4fHPGKV3roelnKVZnwtWsyLYaPHylJV
sHPZvcV8Lvjo2bsOzuFSud3py6FSfMI4COiezjmveOASldJobb/eylgwMjwsZGUl
VNwyOzB8bjYvvj3Us3snzQv89GKD8dt89KvIDSjc1EvA9tyEuNuMI9qBij2i1NOM
MREykqUt4OLSVHTd1NWVSSQCaRjsGlcDBlU/jr0T5U2R+FRCui0A0KcrcNxSzJSW
qaQHnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org