Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0620dd3f-7d29-4d22-9c67-acf05e46a1c3/ea2f215691e9374916a66010ee921d869019296d.roa
File:                     ea2f215691e9374916a66010ee921d869019296d.roa (raw, json)
Hash identifier:          M8h2CHOhwSroS06zJBGm4dq0OUoyrHtT9vhxy13eHGM=
Subject key identifier:   17:13:75:8D:2A:CC:8B:D2:8B:AA:F4:F6:B2:8A:DB:5B:5E:98:3A:11
Certificate issuer:       /CN=dc7eea6d69696e1f3e0399020f9ed6537a778dfb
Certificate serial:       0B6750
Authority key identifier: AE:CA:3D:9C:97:5B:F3:61:3A:DD:32:1A:94:73:EA:EA:AF:DB:C2:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc7eea6d69696e1f3e0399020f9ed6537a778dfb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0620dd3f-7d29-4d22-9c67-acf05e46a1c3/ea2f215691e9374916a66010ee921d869019296d.roa
Signing time:             Wed 24 Mar 2021 14:38:53 +0000
ROA not before:           Wed 24 Mar 2021 14:38:53 +0000
ROA not after:            Tue 24 Mar 2026 14:38:53 +0000
asID:                     267931
IP address blocks:        45.180.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747344 (0xb6750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7eea6d69696e1f3e0399020f9ed6537a778dfb
        Validity
            Not Before: Mar 24 14:38:53 2021 GMT
            Not After : Mar 24 14:38:53 2026 GMT
        Subject: CN=ea2f215691e9374916a66010ee921d869019296d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:fe:4b:4d:ae:08:46:19:2e:15:16:6b:af:
                    6c:9e:58:04:0e:14:a0:7b:90:3b:2c:5b:6e:d3:35:
                    e5:4b:4d:a7:87:9b:c9:5b:5c:c1:53:a9:c6:bf:03:
                    83:2f:7e:5b:2a:e3:50:92:8c:9a:f9:de:39:23:37:
                    e5:24:fc:3c:e0:21:48:00:a3:02:a4:ab:01:29:a1:
                    76:cf:32:a4:ee:40:d2:4b:7c:16:9b:ca:33:43:c2:
                    3a:ad:43:e4:cc:67:bc:ce:33:e7:f0:a7:6a:bd:b6:
                    e1:f3:3b:d6:2d:a9:c8:f1:63:45:ff:e1:31:40:0f:
                    79:84:a0:b0:1c:a4:58:ea:7e:cc:7c:c8:99:1e:e1:
                    79:c4:0e:76:96:3d:2f:35:8f:f3:be:d0:4d:3e:8b:
                    06:c8:97:4c:a4:a9:bf:02:de:72:69:f9:f3:8a:b3:
                    ec:72:33:96:d8:3a:fa:a7:b8:6e:fd:e4:e2:e4:81:
                    eb:23:b0:7a:43:83:8c:da:71:40:70:51:66:00:36:
                    41:cb:5c:3f:aa:55:c0:f5:fb:22:42:fb:04:63:0d:
                    66:0f:1a:f6:ba:1b:61:69:94:30:f9:25:7d:f1:a2:
                    31:87:42:32:82:4c:cc:b0:84:47:8b:fb:d0:23:9d:
                    55:a3:c1:e0:96:a6:ec:cc:8e:67:f1:b9:18:92:35:
                    04:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:13:75:8D:2A:CC:8B:D2:8B:AA:F4:F6:B2:8A:DB:5B:5E:98:3A:11
            X509v3 Authority Key Identifier:
                keyid:AE:CA:3D:9C:97:5B:F3:61:3A:DD:32:1A:94:73:EA:EA:AF:DB:C2:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc7eea6d69696e1f3e0399020f9ed6537a778dfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0620dd3f-7d29-4d22-9c67-acf05e46a1c3/ea2f215691e9374916a66010ee921d869019296d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0620dd3f-7d29-4d22-9c67-acf05e46a1c3/dc7eea6d69696e1f3e0399020f9ed6537a778dfb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:40:22:cf:c2:84:e0:c2:6b:9e:6a:72:60:78:d2:af:74:
         04:f5:b1:87:cc:58:e3:96:01:33:37:ce:8e:94:43:e5:f2:e8:
         f7:43:e7:0a:8f:ac:d7:09:01:e9:0c:a4:c3:74:12:8b:e4:5f:
         80:94:ea:14:4f:18:af:cd:c6:5d:b2:28:23:0f:da:4d:01:08:
         ad:ab:bc:05:21:50:de:1c:80:42:d1:b8:8b:ea:b5:27:1f:f6:
         87:b6:b8:01:03:a1:9d:d3:44:40:7a:8a:da:a9:5a:53:42:f9:
         aa:ea:da:84:62:41:36:3d:91:e9:bb:dc:95:d3:16:db:10:06:
         c5:32:2e:53:a9:7f:e7:78:75:a6:e7:44:98:8e:0d:28:d2:0a:
         13:27:2b:a0:2e:9b:4e:da:c3:c6:7f:cf:35:6c:5c:32:98:d2:
         3f:53:b6:22:af:91:b5:5d:a5:2c:50:e8:e1:ae:8b:74:ce:f7:
         75:03:41:56:e5:f7:fb:07:1b:08:a9:46:b1:33:3a:f2:65:79:
         f4:6f:af:e1:86:e9:19:86:45:43:9a:33:52:94:6d:9c:df:9e:
         e5:26:22:3d:7d:d0:03:5f:12:5c:37:c1:bd:6d:58:79:03:8d:
         dc:11:b9:e2:35:fa:62:58:77:b8:1a:e0:ce:b7:dd:b8:9e:75:
         11:9e:fd:9e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC2dQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
N2VlYTZkNjk2OTZlMWYzZTAzOTkwMjBmOWVkNjUzN2E3NzhkZmIwHhcNMjEwMzI0
MTQzODUzWhcNMjYwMzI0MTQzODUzWjAzMTEwLwYDVQQDEyhlYTJmMjE1NjkxZTkz
NzQ5MTZhNjYwMTBlZTkyMWQ4NjkwMTkyOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkWX+S02uCEYZLhUWa69snlgEDhSge5A7LFtu0zXlS02nh5vJ
W1zBU6nGvwODL35bKuNQkoya+d45IzflJPw84CFIAKMCpKsBKaF2zzKk7kDSS3wW
m8ozQ8I6rUPkzGe8zjPn8Kdqvbbh8zvWLanI8WNF/+ExQA95hKCwHKRY6n7MfMiZ
HuF5xA52lj0vNY/zvtBNPosGyJdMpKm/At5yafnzirPscjOW2Dr6p7hu/eTi5IHr
I7B6Q4OM2nFAcFFmADZBy1w/qlXA9fsiQvsEYw1mDxr2uhthaZQw+SV98aIxh0Iy
gkzMsIRHi/vQI51Vo8HglqbszI5n8bkYkjUELQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBcTdY0qzIvSi6r09rKK21temDoRMB8GA1UdIwQYMBaAFK7KPZyXW/NhOt0y
GpRz6uqv28LOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGM3ZWVh
NmQ2OTY5NmUxZjNlMDM5OTAyMGY5ZWQ2NTM3YTc3OGRmYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDYyMGRkM2YtN2QyOS00ZDIyLTljNjctYWNmMDVl
NDZhMWMzL2VhMmYyMTU2OTFlOTM3NDkxNmE2NjAxMGVlOTIxZDg2OTAxOTI5NmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNjIwZGQzZi03ZDI5LTRkMjItOWM2Ny1hY2Yw
NWU0NmExYzMvZGM3ZWVhNmQ2OTY5NmUxZjNlMDM5OTAyMGY5ZWQ2NTM3YTc3OGRm
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi20fDANBgkqhkiG9w0BAQsFAAOCAQEAXAtAIs/ChODCa55q
cmB40q90BPWxh8xY45YBMzfOjpRD5fLo90PnCo+s1wkB6Qykw3QSi+RfgJTqFE8Y
r83GXbIoIw/aTQEIrau8BSFQ3hyAQtG4i+q1Jx/2h7a4AQOhndNEQHqK2qlaU0L5
qurahGJBNj2R6bvcldMW2xAGxTIuU6l/53h1pudEmI4NKNIKEycroC6bTtrDxn/P
NWxcMpjSP1O2Iq+RtV2lLFDo4a6LdM73dQNBVuX3+wcbCKlGsTM68mV59G+v4Ybp
GYZFQ5ozUpRtnN+e5SYiPX3QA18SXDfBvW1YeQON3BG54jX6Ylh3uBrgzrfduJ51
EZ79ng==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org