Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/76c47c642eb3db9742cdb727f9e064963fa2bda7.roa
File:                     76c47c642eb3db9742cdb727f9e064963fa2bda7.roa (raw, json)
Hash identifier:          qXDm6dE6jVZ84sjW/2Osz/8hk1rM+jCb7ogA3NaER74=
Subject key identifier:   1A:AA:62:5E:C8:DC:15:1D:11:5E:A4:62:0F:1E:CB:15:1C:B4:89:8B
Certificate issuer:       /CN=f85310cb09e317af1a1a72943ec326837f291fc2
Certificate serial:       0B5BB0
Authority key identifier: 17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/76c47c642eb3db9742cdb727f9e064963fa2bda7.roa
Signing time:             Wed 24 Mar 2021 14:37:00 +0000
ROA not before:           Wed 24 Mar 2021 14:37:00 +0000
ROA not after:            Tue 24 Mar 2026 14:37:00 +0000
asID:                     269855
IP address blocks:        45.187.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744368 (0xb5bb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85310cb09e317af1a1a72943ec326837f291fc2
        Validity
            Not Before: Mar 24 14:37:00 2021 GMT
            Not After : Mar 24 14:37:00 2026 GMT
        Subject: CN=76c47c642eb3db9742cdb727f9e064963fa2bda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:b5:3f:e2:bd:83:c2:7b:2c:b5:46:49:42:
                    fd:97:10:aa:94:2b:b0:37:ef:e4:f9:5b:e5:4b:6b:
                    22:4d:13:36:f0:03:3d:1c:b4:bc:99:81:1d:68:db:
                    d7:6d:27:99:1b:91:ca:ec:21:f9:08:88:da:d4:ac:
                    a4:30:48:1c:47:3b:0c:5b:d1:70:03:d5:b0:04:aa:
                    25:fa:ba:b6:64:4d:1d:93:2b:e1:66:bc:21:65:46:
                    89:48:4f:a7:6e:c0:b8:cf:a3:35:51:18:bf:9d:96:
                    7f:66:b7:3c:6e:6a:2d:91:c3:1e:33:26:4b:6c:fe:
                    ba:e0:ae:79:67:56:06:c5:e4:85:fa:f5:20:70:c3:
                    3b:7b:87:46:09:ad:ec:bb:c6:bd:7c:aa:14:19:f6:
                    a1:a7:f7:16:f4:25:7c:9a:20:46:42:fb:b4:d4:fd:
                    d7:38:78:4e:8d:c6:bd:dc:22:f8:fc:4b:d1:02:1d:
                    af:98:3e:88:af:19:96:c7:0b:42:f3:92:f7:5a:be:
                    3a:5f:04:1a:49:9e:ee:f3:3d:d6:10:06:ca:c1:34:
                    e7:8f:8c:17:4c:60:5c:59:cd:1e:6d:33:ba:89:a0:
                    75:09:ce:2e:52:ed:66:f5:1c:54:49:53:31:7f:55:
                    e3:af:1f:09:9e:77:82:2d:56:d5:63:75:26:e3:a2:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:62:5E:C8:DC:15:1D:11:5E:A4:62:0F:1E:CB:15:1C:B4:89:8B
            X509v3 Authority Key Identifier:
                keyid:17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/76c47c642eb3db9742cdb727f9e064963fa2bda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:a9:c7:73:b2:0e:e4:4d:d5:b7:b2:81:0b:4d:d1:b8:df:
         b2:36:fd:48:6e:de:d2:d0:7a:66:0c:d0:a5:a9:a4:1c:2f:b6:
         15:84:39:27:2a:04:0a:b2:f6:de:6b:e4:eb:52:56:74:83:ac:
         32:ac:1e:42:c1:8b:10:24:21:23:c9:b5:80:a0:34:6b:31:bb:
         1e:fa:00:1e:c3:fb:e8:f9:09:a7:e6:3c:5d:dd:60:1c:aa:17:
         c0:57:8a:d7:ac:14:00:d3:a9:85:0c:c3:99:e1:c8:0c:cf:f3:
         9b:c2:56:67:e4:61:d4:5a:85:df:26:c8:57:33:99:10:0c:64:
         7a:3b:b8:a6:32:4f:bf:ad:52:33:c0:55:c3:f5:8a:c1:4f:78:
         8e:9a:09:f8:6e:39:5a:74:bf:89:17:e2:d0:4b:44:fc:ea:5d:
         12:41:4d:72:e2:39:ec:c8:73:c8:b5:8f:24:06:6e:53:77:3e:
         29:c3:02:f4:d3:8a:c6:0e:16:2c:19:37:a6:54:5d:0c:d6:ff:
         51:4b:bc:c6:c7:d4:43:6f:d2:24:9e:6a:f6:4b:bc:2f:e8:0e:
         89:77:87:1e:32:05:c4:b7:75:88:8d:42:6e:b9:5d:79:a8:bb:
         ff:ae:ba:d9:3e:67:e1:d7:fc:4a:35:eb:29:dc:6b:41:29:ca:
         2c:93:a1:99
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC1uwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
NTMxMGNiMDllMzE3YWYxYTFhNzI5NDNlYzMyNjgzN2YyOTFmYzIwHhcNMjEwMzI0
MTQzNzAwWhcNMjYwMzI0MTQzNzAwWjAzMTEwLwYDVQQDEyg3NmM0N2M2NDJlYjNk
Yjk3NDJjZGI3MjdmOWUwNjQ5NjNmYTJiZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgie1P+K9g8J7LLVGSUL9lxCqlCuwN+/k+VvlS2siTRM28AM9
HLS8mYEdaNvXbSeZG5HK7CH5CIja1KykMEgcRzsMW9FwA9WwBKol+rq2ZE0dkyvh
ZrwhZUaJSE+nbsC4z6M1URi/nZZ/Zrc8bmotkcMeMyZLbP664K55Z1YGxeSF+vUg
cMM7e4dGCa3su8a9fKoUGfahp/cW9CV8miBGQvu01P3XOHhOjca93CL4/EvRAh2v
mD6IrxmWxwtC85L3Wr46XwQaSZ7u8z3WEAbKwTTnj4wXTGBcWc0ebTO6iaB1Cc4u
Uu1m9RxUSVMxf1Xjrx8JnneCLVbVY3Um46KP/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBqqYl7I3BUdEV6kYg8eyxUctImLMB8GA1UdIwQYMBaAFBcVPJ98fBCNWkdb
jhckjuPXbw5yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjg1MzEw
Y2IwOWUzMTdhZjFhMWE3Mjk0M2VjMzI2ODM3ZjI5MWZjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDM0YTBkNjQtZWYwOS00ODRjLWI3ZjgtNmJlMzA0
NGE2YWRmLzc2YzQ3YzY0MmViM2RiOTc0MmNkYjcyN2Y5ZTA2NDk2M2ZhMmJkYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMzRhMGQ2NC1lZjA5LTQ4NGMtYjdmOC02YmUz
MDQ0YTZhZGYvZjg1MzEwY2IwOWUzMTdhZjFhMWE3Mjk0M2VjMzI2ODM3ZjI5MWZj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC27MDANBgkqhkiG9w0BAQsFAAOCAQEAYJ2px3OyDuRN1bey
gQtN0bjfsjb9SG7e0tB6ZgzQpamkHC+2FYQ5JyoECrL23mvk61JWdIOsMqweQsGL
ECQhI8m1gKA0azG7HvoAHsP76PkJp+Y8Xd1gHKoXwFeK16wUANOphQzDmeHIDM/z
m8JWZ+Rh1FqF3ybIVzOZEAxkeju4pjJPv61SM8BVw/WKwU94jpoJ+G45WnS/iRfi
0EtE/OpdEkFNcuI57MhzyLWPJAZuU3c+KcMC9NOKxg4WLBk3plRdDNb/UUu8xsfU
Q2/SJJ5q9ku8L+gOiXeHHjIFxLd1iI1Cbrldeai7/6662T5n4df8SjXrKdxrQSnK
LJOhmQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org