Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/b448809de1e94a7201789965b9eb008b17970e0b.roa
File:                     b448809de1e94a7201789965b9eb008b17970e0b.roa (raw, json)
Hash identifier:          exCyfKqsStoJ2N6iAWsgxLxq/FzCN0XdcSqlYGHoj4s=
Subject key identifier:   EA:A1:83:6B:38:84:B7:CE:81:40:CC:A8:9C:69:92:24:12:31:A1:BA
Certificate issuer:       /CN=0f83f8e61ba97517835e1315787d856b4267aea8
Certificate serial:       0A218A
Authority key identifier: 8A:8C:15:52:DF:4D:70:7F:44:8A:F4:21:DA:C4:8B:62:53:45:99:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f83f8e61ba97517835e1315787d856b4267aea8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/b448809de1e94a7201789965b9eb008b17970e0b.roa
Signing time:             Wed 24 Mar 2021 14:44:39 +0000
ROA not before:           Wed 24 Mar 2021 14:44:39 +0000
ROA not after:            Tue 24 Mar 2026 14:44:39 +0000
asID:                     263201
IP address blocks:        45.182.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663946 (0xa218a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f83f8e61ba97517835e1315787d856b4267aea8
        Validity
            Not Before: Mar 24 14:44:39 2021 GMT
            Not After : Mar 24 14:44:39 2026 GMT
        Subject: CN=b448809de1e94a7201789965b9eb008b17970e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:56:23:ad:5f:0a:b4:ba:db:34:4f:9b:ca:
                    1f:7c:01:84:05:b7:cd:31:47:00:ad:fc:f3:19:b1:
                    ca:2b:11:4e:67:69:74:30:27:fc:27:7a:49:fb:ba:
                    36:cf:1a:40:60:99:89:89:47:ed:ed:26:19:1c:0c:
                    d5:3f:dc:54:84:cd:5b:4a:a6:39:01:65:04:c7:d6:
                    88:71:bb:1b:71:80:0a:09:e4:aa:0b:e4:4a:5d:c7:
                    e9:d1:19:b0:39:c8:64:5b:90:ea:9b:24:6c:cb:a3:
                    27:e7:81:dc:83:e9:f3:6f:07:18:1d:3d:dd:40:ca:
                    a3:a6:37:fa:0f:7d:c1:52:a0:e6:6f:62:f8:0e:d5:
                    e0:7e:74:81:2f:86:e2:13:57:70:04:13:c7:b9:bb:
                    0e:d3:58:64:b1:45:5d:55:50:5f:ff:3e:ba:ab:ee:
                    e2:69:c6:25:f0:4d:79:6d:f2:98:a0:d7:77:10:77:
                    2c:59:56:9e:89:60:49:fb:0e:75:02:c0:78:1e:71:
                    33:cb:2b:a9:14:bf:ba:9c:92:63:4c:25:85:2c:75:
                    b2:3c:b5:df:5e:2d:13:81:84:a9:63:43:e7:c2:2b:
                    5f:b0:39:f0:0f:dc:2c:11:64:f4:9c:bc:ea:91:97:
                    72:93:29:e6:3d:d2:8f:3c:27:e9:75:35:c2:1f:2c:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:83:6B:38:84:B7:CE:81:40:CC:A8:9C:69:92:24:12:31:A1:BA
            X509v3 Authority Key Identifier:
                keyid:8A:8C:15:52:DF:4D:70:7F:44:8A:F4:21:DA:C4:8B:62:53:45:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f83f8e61ba97517835e1315787d856b4267aea8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/b448809de1e94a7201789965b9eb008b17970e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bf250fe-1988-4aca-90e8-05ab23e13c6f/0f83f8e61ba97517835e1315787d856b4267aea8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:24:7e:b7:30:b9:a2:ee:88:8b:b8:6f:57:29:ad:f8:7a:6d:
         51:7a:13:8d:89:7d:a4:a8:65:55:4b:f9:48:43:ed:9b:04:32:
         ef:a1:00:39:56:0d:d5:0f:26:d4:41:a4:5f:a1:ca:cc:74:31:
         37:bc:41:ce:f4:fc:ef:0a:d8:ba:61:ae:da:6e:8d:fd:ae:01:
         6d:ab:98:35:32:69:35:81:b4:cf:aa:da:33:3e:1a:eb:67:ab:
         3f:5e:c7:93:a7:88:fa:33:e1:d5:fd:63:ce:c2:1d:ed:9d:e5:
         fc:c0:fa:47:49:d8:4c:16:2f:78:d6:f3:c9:65:70:a4:a0:4c:
         96:89:23:3c:e4:b1:34:7f:e8:95:00:4d:11:97:3f:f3:d4:ab:
         18:9b:ac:64:f2:a7:d5:73:a8:4c:af:a7:f4:43:49:22:e1:1f:
         b2:d3:5b:b1:77:b8:98:2b:0a:5e:c9:48:90:c5:2d:07:5f:b4:
         0a:98:67:02:ab:93:33:fd:fc:b8:dc:46:56:45:b3:07:d3:4d:
         85:65:95:ab:77:46:0a:d0:23:21:a2:13:13:f1:90:e1:63:e7:
         14:2d:96:b7:9b:9a:c9:9c:c7:89:b3:fb:81:de:44:38:c6:be:
         ea:0a:bf:c5:db:b0:f6:19:e9:11:ac:c1:b8:14:a4:a8:89:2f:
         fb:03:0f:04
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCiGKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
ODNmOGU2MWJhOTc1MTc4MzVlMTMxNTc4N2Q4NTZiNDI2N2FlYTgwHhcNMjEwMzI0
MTQ0NDM5WhcNMjYwMzI0MTQ0NDM5WjAzMTEwLwYDVQQDEyhiNDQ4ODA5ZGUxZTk0
YTcyMDE3ODk5NjViOWViMDA4YjE3OTcwZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo1VWI61fCrS62zRPm8offAGEBbfNMUcArfzzGbHKKxFOZ2l0
MCf8J3pJ+7o2zxpAYJmJiUft7SYZHAzVP9xUhM1bSqY5AWUEx9aIcbsbcYAKCeSq
C+RKXcfp0RmwOchkW5DqmyRsy6Mn54Hcg+nzbwcYHT3dQMqjpjf6D33BUqDmb2L4
DtXgfnSBL4biE1dwBBPHubsO01hksUVdVVBf/z66q+7iacYl8E15bfKYoNd3EHcs
WVaeiWBJ+w51AsB4HnEzyyupFL+6nJJjTCWFLHWyPLXfXi0TgYSpY0PnwitfsDnw
D9wsEWT0nLzqkZdykynmPdKPPCfpdTXCHyyGSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOqhg2s4hLfOgUDMqJxpkiQSMaG6MB8GA1UdIwQYMBaAFIqMFVLfTXB/RIr0
IdrEi2JTRZl2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGY4M2Y4
ZTYxYmE5NzUxNzgzNWUxMzE1Nzg3ZDg1NmI0MjY3YWVhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGJmMjUwZmUtMTk4OC00YWNhLTkwZTgtMDVhYjIz
ZTEzYzZmL2I0NDg4MDlkZTFlOTRhNzIwMTc4OTk2NWI5ZWIwMDhiMTc5NzBlMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYmYyNTBmZS0xOTg4LTRhY2EtOTBlOC0wNWFi
MjNlMTNjNmYvMGY4M2Y4ZTYxYmE5NzUxNzgzNWUxMzE1Nzg3ZDg1NmI0MjY3YWVh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC22jjANBgkqhkiG9w0BAQsFAAOCAQEAYCR+tzC5ou6Ii7hv
Vymt+HptUXoTjYl9pKhlVUv5SEPtmwQy76EAOVYN1Q8m1EGkX6HKzHQxN7xBzvT8
7wrYumGu2m6N/a4BbauYNTJpNYG0z6raMz4a62erP17Hk6eI+jPh1f1jzsId7Z3l
/MD6R0nYTBYveNbzyWVwpKBMlokjPOSxNH/olQBNEZc/89SrGJusZPKn1XOoTK+n
9ENJIuEfstNbsXe4mCsKXslIkMUtB1+0CphnAquTM/38uNxGVkWzB9NNhWWVq3dG
CtAjIaITE/GQ4WPnFC2Wt5uayZzHibP7gd5EOMa+6gq/xduw9hnpEazBuBSkqIkv
+wMPBA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org