Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/a2f7c9c7f78c6a68df6baac59529dceb583da09c.roa
File:                     a2f7c9c7f78c6a68df6baac59529dceb583da09c.roa (raw, json)
Hash identifier:          +X3vVJZ93JgCVG4Ya3tMU+7yuZt/YDCxJXX+qxzx7uw=
Subject key identifier:   B4:21:3F:E3:7A:F0:B5:4A:9F:F4:C8:66:08:63:71:59:A4:16:DB:3F
Certificate issuer:       /CN=2a584b25ee533fa7ea37f69249c0d41f072fc3df
Certificate serial:       049BD6
Authority key identifier: EF:59:2A:09:03:D5:3F:EE:41:D2:1F:43:7A:38:D8:F9:91:66:8E:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a584b25ee533fa7ea37f69249c0d41f072fc3df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/a2f7c9c7f78c6a68df6baac59529dceb583da09c.roa
Signing time:             Wed 24 Mar 2021 14:29:37 +0000
ROA not before:           Wed 24 Mar 2021 14:29:37 +0000
ROA not after:            Tue 24 Mar 2026 14:29:37 +0000
asID:                     269813
IP address blocks:        45.186.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302038 (0x49bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a584b25ee533fa7ea37f69249c0d41f072fc3df
        Validity
            Not Before: Mar 24 14:29:37 2021 GMT
            Not After : Mar 24 14:29:37 2026 GMT
        Subject: CN=a2f7c9c7f78c6a68df6baac59529dceb583da09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:d1:82:ee:c2:f5:83:8a:53:7a:d3:7b:7f:
                    81:5b:1f:c6:3d:1c:92:91:ce:57:1b:5b:2c:2f:da:
                    28:9f:44:e1:43:7c:8f:4d:a6:37:82:23:bc:94:f8:
                    cd:9d:c2:dd:82:ec:80:8e:45:ed:59:58:56:be:70:
                    6f:46:ed:54:98:bc:77:54:c1:43:ac:27:79:04:03:
                    b7:dc:71:5b:ca:23:3b:b7:d0:88:b6:42:09:14:56:
                    9f:d4:2d:ed:59:e7:68:8a:9d:30:19:71:15:af:8b:
                    35:b2:2d:08:a3:1a:2a:e5:e8:d4:4b:05:3a:e0:30:
                    f9:30:eb:23:e5:b4:5a:ab:0b:3f:69:06:28:20:93:
                    5c:40:4a:ff:da:aa:0a:b0:bd:10:6a:50:76:85:d0:
                    3b:4b:43:23:e3:ca:91:d5:7b:e2:47:bc:aa:54:95:
                    5a:38:65:e3:2a:60:4f:18:c4:6a:3c:a0:55:b3:f2:
                    a8:e1:ae:7b:c0:ab:08:41:d2:a1:17:7b:a3:58:4c:
                    52:6c:fd:98:48:a8:aa:d9:f4:4c:cb:09:8e:33:ca:
                    08:60:b1:e5:d5:d9:db:15:be:05:28:a6:f5:08:15:
                    67:82:56:5e:4b:1d:56:7c:92:4e:86:ac:8c:79:4b:
                    4b:9f:d0:be:fc:e4:41:8a:0b:d3:82:ea:4a:a7:3b:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:21:3F:E3:7A:F0:B5:4A:9F:F4:C8:66:08:63:71:59:A4:16:DB:3F
            X509v3 Authority Key Identifier:
                keyid:EF:59:2A:09:03:D5:3F:EE:41:D2:1F:43:7A:38:D8:F9:91:66:8E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a584b25ee533fa7ea37f69249c0d41f072fc3df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/a2f7c9c7f78c6a68df6baac59529dceb583da09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/2a584b25ee533fa7ea37f69249c0d41f072fc3df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:cc:d0:48:f3:bc:39:57:bf:16:3b:03:27:82:29:8c:8a:
         9f:55:d6:7b:e9:12:e7:ab:74:4d:b7:ea:a7:92:fb:74:22:6d:
         71:d6:f3:c4:70:c7:40:a1:af:4c:04:8e:06:43:d9:93:90:79:
         c2:bd:24:1b:51:40:f9:81:70:d0:f4:fe:be:23:28:84:1a:08:
         bf:07:3d:79:f9:7f:76:28:a1:5e:34:93:c7:cb:70:e6:da:22:
         98:9c:a0:f4:da:6a:ee:4c:60:8d:a8:7c:ef:e8:6a:15:6e:ea:
         6f:72:58:b4:a0:a2:1c:9e:d6:5c:46:18:af:38:22:e4:fc:e8:
         55:94:12:74:5d:5c:cc:82:19:ef:7f:15:83:39:22:80:02:1b:
         c1:67:ea:f9:ee:d0:f5:60:bb:eb:10:16:cf:3c:5c:b6:93:25:
         35:b2:2f:e3:cd:8e:df:73:23:0c:ab:b1:f6:38:14:5c:90:92:
         83:70:88:8e:b6:5e:7f:ba:f8:a7:4e:2c:2d:14:8e:fb:d3:f8:
         8f:5b:1a:ca:d8:05:8a:b9:e1:bd:1c:02:f1:e0:b5:6a:06:a5:
         6a:24:03:54:59:e0:fe:34:8c:e7:80:22:cc:cb:f8:e6:00:49:
         e3:7c:f8:c3:81:4b:26:e0:81:6c:1d:b5:76:33:d7:64:51:81:
         1a:33:10:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBJvWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
NTg0YjI1ZWU1MzNmYTdlYTM3ZjY5MjQ5YzBkNDFmMDcyZmMzZGYwHhcNMjEwMzI0
MTQyOTM3WhcNMjYwMzI0MTQyOTM3WjAzMTEwLwYDVQQDEyhhMmY3YzljN2Y3OGM2
YTY4ZGY2YmFhYzU5NTI5ZGNlYjU4M2RhMDljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4p/Rgu7C9YOKU3rTe3+BWx/GPRySkc5XG1ssL9oon0ThQ3yP
TaY3giO8lPjNncLdguyAjkXtWVhWvnBvRu1UmLx3VMFDrCd5BAO33HFbyiM7t9CI
tkIJFFaf1C3tWedoip0wGXEVr4s1si0Ioxoq5ejUSwU64DD5MOsj5bRaqws/aQYo
IJNcQEr/2qoKsL0QalB2hdA7S0Mj48qR1XviR7yqVJVaOGXjKmBPGMRqPKBVs/Ko
4a57wKsIQdKhF3ujWExSbP2YSKiq2fRMywmOM8oIYLHl1dnbFb4FKKb1CBVnglZe
Sx1WfJJOhqyMeUtLn9C+/ORBigvTgupKpzuk0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLQhP+N68LVKn/TIZghjcVmkFts/MB8GA1UdIwQYMBaAFO9ZKgkD1T/uQdIf
Q3o42PmRZo7mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE1ODRi
MjVlZTUzM2ZhN2VhMzdmNjkyNDljMGQ0MWYwNzJmYzNkZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTNkYjQ3NmItMTEwMy00NGNhLWEzYTEtNzkxNTBk
MDFhZDg0L2EyZjdjOWM3Zjc4YzZhNjhkZjZiYWFjNTk1MjlkY2ViNTgzZGEwOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xM2RiNDc2Yi0xMTAzLTQ0Y2EtYTNhMS03OTE1
MGQwMWFkODQvMmE1ODRiMjVlZTUzM2ZhN2VhMzdmNjkyNDljMGQ0MWYwNzJmYzNk
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi26iDANBgkqhkiG9w0BAQsFAAOCAQEAJuTM0EjzvDlXvxY7
AyeCKYyKn1XWe+kS56t0Tbfqp5L7dCJtcdbzxHDHQKGvTASOBkPZk5B5wr0kG1FA
+YFw0PT+viMohBoIvwc9efl/diihXjSTx8tw5toimJyg9Npq7kxgjah87+hqFW7q
b3JYtKCiHJ7WXEYYrzgi5PzoVZQSdF1czIIZ738VgzkigAIbwWfq+e7Q9WC76xAW
zzxctpMlNbIv482O33MjDKux9jgUXJCSg3CIjrZef7r4p04sLRSO+9P4j1saytgF
irnhvRwC8eC1agalaiQDVFng/jSM54AizMv45gBJ43z4w4FLJuCBbB21djPXZFGB
GjMQsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org