Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/f77fe6c3ee76f1ba2ab9342f01c5118d4edbc315.roa
File:                     f77fe6c3ee76f1ba2ab9342f01c5118d4edbc315.roa (raw, json)
Hash identifier:          jQ5o+TIRyUqIx3j5qGHLgRZu4fuzR+ZG/7lgrjC6VFI=
Subject key identifier:   3D:75:10:E3:07:39:C9:76:F0:74:0D:68:42:B5:70:06:5C:86:4C:2E
Certificate issuer:       /CN=110912d812a3612d5635fe6be68c37d72afb24e2
Certificate serial:       1CA066
Authority key identifier: 8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/f77fe6c3ee76f1ba2ab9342f01c5118d4edbc315.roa
Signing time:             Sat 15 Jul 2023 08:30:01 +0000
ROA not before:           Fri 14 Jul 2023 08:30:01 +0000
ROA not after:            Sun 13 Jul 2025 08:30:01 +0000
asID:                     264619
IP address blocks:        45.172.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876070 (0x1ca066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110912d812a3612d5635fe6be68c37d72afb24e2
        Validity
            Not Before: Jul 14 08:30:01 2023 GMT
            Not After : Jul 13 08:30:01 2025 GMT
        Subject: CN=f77fe6c3ee76f1ba2ab9342f01c5118d4edbc315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:c2:fa:6a:fc:2a:df:5d:15:bf:8b:37:1d:
                    ac:94:86:04:4c:fd:66:65:05:f6:9d:89:00:09:37:
                    2d:23:6e:f6:89:3b:20:b6:18:40:bf:64:42:3b:ec:
                    ec:c7:b4:db:48:c3:82:d2:5b:ab:a0:ca:03:14:5a:
                    68:65:d6:66:af:0d:7e:23:cd:2a:10:fd:3e:e6:ad:
                    c3:e5:3d:48:dc:d1:cb:05:9b:97:80:38:b2:0b:3a:
                    35:5e:e4:68:7e:52:1b:5c:86:a0:df:ac:1c:85:05:
                    76:8a:6d:24:40:67:c6:04:d4:1a:36:ce:4f:1d:94:
                    50:c2:14:03:92:b2:7d:8f:c1:26:6c:6c:5e:04:00:
                    ba:8c:b3:3f:e7:a7:13:6d:60:f1:5c:bc:32:e0:56:
                    03:49:32:b4:1d:b5:47:99:6f:3e:ad:e6:d9:e2:e8:
                    60:9d:12:ce:6d:4d:27:96:a8:5a:54:23:24:5c:da:
                    75:5f:2f:6f:5c:d5:dd:52:6a:ef:7f:07:29:92:a9:
                    65:99:eb:60:de:0c:d2:78:5a:f5:82:57:94:95:63:
                    47:bf:5a:61:b6:fa:bf:ff:93:5c:8d:79:bd:45:e8:
                    a3:b4:d6:60:63:1a:7a:ca:48:3d:15:fe:b5:36:fd:
                    c0:67:d7:47:fc:34:fc:89:71:5e:e9:7f:05:25:86:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:10:E3:07:39:C9:76:F0:74:0D:68:42:B5:70:06:5C:86:4C:2E
            X509v3 Authority Key Identifier:
                keyid:8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/f77fe6c3ee76f1ba2ab9342f01c5118d4edbc315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/110912d812a3612d5635fe6be68c37d72afb24e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:5b:64:fa:b2:ed:9a:81:58:3a:a7:9b:94:fd:0b:0a:12:
         94:85:ac:70:36:ab:81:3c:78:b9:48:aa:a1:40:da:9c:ac:2e:
         56:4c:dd:c3:99:ce:da:41:06:4f:99:a1:30:cc:89:66:6b:61:
         99:c4:d8:d3:c8:a3:86:6a:f0:05:21:46:2b:e0:af:73:74:7d:
         34:69:7f:33:ab:52:92:f5:fc:ff:02:c7:14:43:e0:ba:0f:df:
         f6:1e:fa:ad:cd:8f:e1:cb:ea:8d:4d:0a:87:0f:d1:c6:2c:d0:
         1f:c3:14:fe:05:2f:eb:4a:59:6a:b5:8c:a8:87:a6:5b:6a:5a:
         7e:74:d1:25:f4:9d:be:de:af:b8:d5:39:3a:e8:80:f3:22:8c:
         02:48:67:3a:c8:3c:f7:4e:c2:53:13:6f:8d:29:fd:ba:24:fe:
         ac:9c:92:7c:59:49:7b:3c:1b:97:47:e8:f2:82:31:88:3d:30:
         74:bb:ce:8b:0c:dd:d6:e0:3b:68:bb:58:40:b0:a9:18:ed:9e:
         07:62:ef:94:d0:e9:bd:30:bd:92:32:92:3f:bb:63:9a:7f:87:
         08:2c:48:b8:fd:c5:1f:5a:79:9c:43:2a:8e:22:87:c4:4c:2c:
         a0:d5:66:49:3a:17:e0:b0:d2:47:41:c7:9d:d0:25:20:e9:91:
         57:88:c5:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHKBmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEx
MDkxMmQ4MTJhMzYxMmQ1NjM1ZmU2YmU2OGMzN2Q3MmFmYjI0ZTIwHhcNMjMwNzE0
MDgzMDAxWhcNMjUwNzEzMDgzMDAxWjAzMTEwLwYDVQQDEyhmNzdmZTZjM2VlNzZm
MWJhMmFiOTM0MmYwMWM1MTE4ZDRlZGJjMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsY7C+mr8Kt9dFb+LNx2slIYETP1mZQX2nYkACTctI272iTsg
thhAv2RCO+zsx7TbSMOC0luroMoDFFpoZdZmrw1+I80qEP0+5q3D5T1I3NHLBZuX
gDiyCzo1XuRoflIbXIag36wchQV2im0kQGfGBNQaNs5PHZRQwhQDkrJ9j8EmbGxe
BAC6jLM/56cTbWDxXLwy4FYDSTK0HbVHmW8+rebZ4uhgnRLObU0nlqhaVCMkXNp1
Xy9vXNXdUmrvfwcpkqllmetg3gzSeFr1gleUlWNHv1phtvq//5NcjXm9ReijtNZg
Yxp6ykg9Ff61Nv3AZ9dH/DT8iXFe6X8FJYYkIQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD11EOMHOcl28HQNaEK1cAZchkwuMB8GA1UdIwQYMBaAFIzzTLjujq9+FahS
3ONBAex//ASlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTEwOTEy
ZDgxMmEzNjEyZDU2MzVmZTZiZTY4YzM3ZDcyYWZiMjRlMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDMyYjNkOTEtMmQwYS00NzRmLThhYzctZWFiY2U3
NTExODExL2Y3N2ZlNmMzZWU3NmYxYmEyYWI5MzQyZjAxYzUxMThkNGVkYmMzMTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMzJiM2Q5MS0yZDBhLTQ3NGYtOGFjNy1lYWJj
ZTc1MTE4MTEvMTEwOTEyZDgxMmEzNjEyZDU2MzVmZTZiZTY4YzM3ZDcyYWZiMjRl
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2sEzANBgkqhkiG9w0BAQsFAAOCAQEAhkxbZPqy7ZqBWDqn
m5T9CwoSlIWscDargTx4uUiqoUDanKwuVkzdw5nO2kEGT5mhMMyJZmthmcTY08ij
hmrwBSFGK+Cvc3R9NGl/M6tSkvX8/wLHFEPgug/f9h76rc2P4cvqjU0Khw/RxizQ
H8MU/gUv60pZarWMqIemW2pafnTRJfSdvt6vuNU5OuiA8yKMAkhnOsg8907CUxNv
jSn9uiT+rJySfFlJezwbl0fo8oIxiD0wdLvOiwzd1uA7aLtYQLCpGO2eB2LvlNDp
vTC9kjKSP7tjmn+HCCxIuP3FH1p5nEMqjiKHxEwsoNVmSToX4LDSR0HHndAlIOmR
V4jFAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org