Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/7edc18b5a45640d408cd45b3934c60722709ca95.roa
File:                     7edc18b5a45640d408cd45b3934c60722709ca95.roa (raw, json)
Hash identifier:          Nkgu8nghCPhnLzDnZ38ZMSsaGtLP/tKaPosk1dtau5w=
Subject key identifier:   F9:E9:CE:94:FB:F0:93:34:38:73:7E:92:48:71:15:DF:BB:3C:9D:39
Certificate issuer:       /CN=110912d812a3612d5635fe6be68c37d72afb24e2
Certificate serial:       0ADED9
Authority key identifier: 8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/7edc18b5a45640d408cd45b3934c60722709ca95.roa
Signing time:             Fri 16 Jul 2021 14:11:18 +0000
ROA not before:           Fri 16 Jul 2021 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     267785
IP address blocks:        45.172.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712409 (0xaded9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110912d812a3612d5635fe6be68c37d72afb24e2
        Validity
            Not Before: Jul 16 03:00:00 2021 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=7edc18b5a45640d408cd45b3934c60722709ca95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:a7:cb:28:1d:e9:8a:40:65:4c:5a:b0:f1:
                    98:5f:86:40:bb:c9:1d:db:da:7d:92:d1:3a:d5:fc:
                    97:6a:24:02:be:dd:85:c7:17:be:7a:e0:b4:ce:52:
                    f2:ef:45:7e:c1:85:3e:6c:bf:79:26:e7:44:f0:8f:
                    aa:2b:66:a2:5e:b6:19:28:e7:43:45:40:ac:1c:be:
                    ce:13:8a:b9:c8:07:27:c4:7a:c8:d6:71:2f:f7:ad:
                    3b:8d:8c:e1:6d:4a:04:fd:4f:31:17:7c:9d:88:8e:
                    1d:b3:3d:b1:70:39:72:a2:75:5d:02:65:61:65:e1:
                    6f:b7:44:b8:39:69:e9:1b:25:11:47:4b:9e:7f:fb:
                    e2:92:90:f8:09:09:ab:48:d3:6f:c0:31:ae:d1:a6:
                    4d:0a:54:68:3c:48:85:1f:cf:79:ca:1b:6c:3c:45:
                    02:ad:72:90:aa:10:95:ef:92:10:30:36:65:bf:f2:
                    6f:14:3e:67:c7:8c:ab:91:60:fe:a3:18:b5:98:95:
                    16:25:11:b9:1b:11:db:ed:9e:96:59:1c:05:5e:6e:
                    08:83:35:1e:2b:57:13:42:41:0e:95:c6:ff:e5:d1:
                    0f:58:f8:02:b2:0f:24:bc:03:64:3f:1b:73:32:60:
                    8e:10:a2:ad:d0:f5:21:3b:24:71:75:e7:71:68:e0:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:CE:94:FB:F0:93:34:38:73:7E:92:48:71:15:DF:BB:3C:9D:39
            X509v3 Authority Key Identifier:
                keyid:8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/7edc18b5a45640d408cd45b3934c60722709ca95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/110912d812a3612d5635fe6be68c37d72afb24e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:af:d8:6d:e4:0e:bb:cc:69:b8:5d:d3:1c:ab:8b:da:e5:d4:
         f9:d5:1b:f8:12:3e:0d:7a:41:dd:e4:90:14:12:97:87:fb:a1:
         97:e8:14:b1:89:e2:8a:7f:06:38:27:ec:b5:66:42:3e:13:8a:
         1c:c2:3e:f9:ac:92:b5:65:5b:1b:f5:a1:d3:33:c3:e7:38:bc:
         18:cf:b2:65:d2:ce:10:3e:09:6f:75:a6:27:56:1f:a9:42:85:
         fe:13:a0:49:db:99:90:27:d2:6a:03:da:53:55:84:dc:35:eb:
         2e:36:9a:17:d1:da:0c:80:3a:fa:5e:80:3f:8c:98:f6:72:ff:
         69:65:ae:d6:4c:f5:a0:1e:11:e8:a6:8f:c0:1f:c0:89:b2:10:
         66:a2:37:73:9c:ab:ab:44:e9:7b:39:c5:b5:ac:54:37:49:34:
         84:98:c7:3e:90:b9:1e:5d:16:9a:d1:5c:a1:11:3b:8a:3d:ed:
         cd:77:c5:69:f0:22:88:ef:fd:eb:90:dc:3f:56:81:e1:ba:1e:
         d7:1d:58:df:2d:3f:87:11:17:79:61:86:0a:fa:66:e1:e8:23:
         a9:ac:96:a5:07:3d:4a:77:02:8e:13:25:aa:3e:57:7e:94:b3:
         f5:b6:2c:b5:8e:39:a5:8e:ee:b2:bb:28:22:0b:11:94:d7:68:
         bb:ab:97:3f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCt7ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEx
MDkxMmQ4MTJhMzYxMmQ1NjM1ZmU2YmU2OGMzN2Q3MmFmYjI0ZTIwHhcNMjEwNzE2
MDMwMDAwWhcNMjMwNzE2MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZWRjMThiNWE0NTY0
MGQ0MDhjZDQ1YjM5MzRjNjA3MjI3MDljYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqAmnyygd6YpAZUxasPGYX4ZAu8kd29p9ktE61fyXaiQCvt2F
xxe+euC0zlLy70V+wYU+bL95JudE8I+qK2aiXrYZKOdDRUCsHL7OE4q5yAcnxHrI
1nEv9607jYzhbUoE/U8xF3ydiI4dsz2xcDlyonVdAmVhZeFvt0S4OWnpGyURR0ue
f/vikpD4CQmrSNNvwDGu0aZNClRoPEiFH895yhtsPEUCrXKQqhCV75IQMDZlv/Jv
FD5nx4yrkWD+oxi1mJUWJRG5GxHb7Z6WWRwFXm4IgzUeK1cTQkEOlcb/5dEPWPgC
sg8kvANkPxtzMmCOEKKt0PUhOyRxdedxaOCmSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPnpzpT78JM0OHN+kkhxFd+7PJ05MB8GA1UdIwQYMBaAFIzzTLjujq9+FahS
3ONBAex//ASlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTEwOTEy
ZDgxMmEzNjEyZDU2MzVmZTZiZTY4YzM3ZDcyYWZiMjRlMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDMyYjNkOTEtMmQwYS00NzRmLThhYzctZWFiY2U3
NTExODExLzdlZGMxOGI1YTQ1NjQwZDQwOGNkNDViMzkzNGM2MDcyMjcwOWNhOTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMzJiM2Q5MS0yZDBhLTQ3NGYtOGFjNy1lYWJj
ZTc1MTE4MTEvMTEwOTEyZDgxMmEzNjEyZDU2MzVmZTZiZTY4YzM3ZDcyYWZiMjRl
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2sEDANBgkqhkiG9w0BAQsFAAOCAQEAEa/YbeQOu8xpuF3T
HKuL2uXU+dUb+BI+DXpB3eSQFBKXh/uhl+gUsYniin8GOCfstWZCPhOKHMI++ayS
tWVbG/Wh0zPD5zi8GM+yZdLOED4Jb3WmJ1YfqUKF/hOgSduZkCfSagPaU1WE3DXr
LjaaF9HaDIA6+l6AP4yY9nL/aWWu1kz1oB4R6KaPwB/AibIQZqI3c5yrq0TpeznF
taxUN0k0hJjHPpC5Hl0WmtFcoRE7ij3tzXfFafAiiO/965DcP1aB4boe1x1Y3y0/
hxEXeWGGCvpm4egjqayWpQc9SncCjhMlqj5XfpSz9bYstY45pY7usrsoIgsRlNdo
u6uXPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org