Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/402326353bfbe6a8c3f223555b41e298acf393fa.roa
File:                     402326353bfbe6a8c3f223555b41e298acf393fa.roa (raw, json)
Hash identifier:          6Yn4Y8wDUHk7mQMF3XEGYP/JhIHmvyJzhQXgD+LD7WE=
Subject key identifier:   00:F4:E8:63:BC:35:59:9E:52:C3:C3:9C:4B:A6:3F:84:CB:B5:59:9D
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       1233F7
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/402326353bfbe6a8c3f223555b41e298acf393fa.roa
Signing time:             Tue 16 Jan 2024 07:30:00 +0000
ROA not before:           Tue 16 Jan 2024 07:30:00 +0000
ROA not after:            Thu 15 Jan 2026 07:30:00 +0000
asID:                     269735
IP address blocks:        45.181.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192951 (0x1233f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 16 07:30:00 2024 GMT
            Not After : Jan 15 07:30:00 2026 GMT
        Subject: CN=402326353bfbe6a8c3f223555b41e298acf393fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:4d:52:a3:b5:64:e7:b1:c1:aa:a3:b1:80:
                    b9:bf:74:77:c1:46:89:d0:dd:dc:b0:89:75:71:79:
                    85:7d:6f:5e:9a:ad:32:85:2e:ef:1c:25:f8:80:fe:
                    ba:3e:0e:dd:57:33:5d:18:94:21:b2:4d:25:5e:0d:
                    59:3e:05:b9:51:e8:fe:90:c5:3b:f3:f7:bd:24:a0:
                    9f:43:a8:d4:90:eb:83:5c:0f:16:e8:b8:1a:ee:ac:
                    4a:81:7b:bb:34:f9:1f:c0:27:09:f2:a6:91:23:1c:
                    21:51:fb:0d:ad:03:c6:d5:a5:82:ce:2e:2b:97:94:
                    05:82:50:52:20:73:ea:69:bb:89:c4:0f:13:f5:aa:
                    4d:0b:fd:d9:03:0b:fa:9d:76:7c:00:96:59:92:ea:
                    98:12:cd:56:db:4c:00:d5:0d:a2:fc:33:8a:25:bb:
                    95:ba:14:c9:82:ae:9c:66:4d:11:af:aa:8d:d8:27:
                    e6:99:73:a4:8f:f2:20:f4:dc:d6:f6:69:6b:12:55:
                    85:06:37:d6:cf:be:f4:8f:49:b2:1b:5a:a4:f7:f9:
                    9c:37:9f:4c:f9:d8:39:5a:74:a5:88:65:cf:e6:6b:
                    8b:c6:5a:8d:1f:c5:46:c2:96:b6:9f:45:05:d1:8d:
                    82:fa:a4:38:09:0a:61:fe:e0:d5:cb:34:aa:cf:cd:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F4:E8:63:BC:35:59:9E:52:C3:C3:9C:4B:A6:3F:84:CB:B5:59:9D
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/402326353bfbe6a8c3f223555b41e298acf393fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:24:4b:0e:fe:2d:85:43:2f:76:38:18:8b:bf:ce:dc:2b:f6:
         b3:76:3b:90:0d:d3:0e:3d:fd:4c:bb:b3:1d:87:55:f8:7f:15:
         57:27:11:a4:ac:4a:40:a7:02:5a:8c:ea:55:fd:c2:d7:6f:47:
         35:63:30:2c:e2:bf:da:44:5f:52:45:80:ab:96:16:eb:68:ee:
         5b:de:ba:7f:f1:fb:66:83:64:fd:b6:6e:cf:0c:d7:f5:96:f0:
         a3:89:70:c2:d7:ae:98:fc:69:57:87:3d:5f:42:db:b0:cf:3f:
         3f:1b:3e:80:4c:b4:d4:f1:d1:70:8e:84:8c:96:ea:57:48:fc:
         83:54:2e:12:33:dd:86:23:28:03:ea:ab:b9:ae:79:07:71:78:
         0a:5b:df:01:3d:60:99:98:95:bf:ff:2d:1b:a0:5a:8b:09:79:
         c4:ba:12:75:43:5d:c2:4d:30:1e:79:d9:20:e6:dd:47:09:57:
         53:53:81:0f:50:94:6c:1e:e0:01:72:f9:0a:23:98:b5:ad:d2:
         fe:9e:f2:a1:47:f8:dd:00:4e:f6:79:67:1e:d6:d0:22:be:60:
         09:1c:81:ac:40:b4:14:5a:56:7d:b3:1e:8d:94:05:e6:e4:9e:
         78:0e:af:e4:89:05:67:ed:e1:16:e3:bb:30:23:67:cb:53:81:
         38:88:db:a8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEjP3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
YTI1OWY3NDU3ZjRjNWVhY2E2NGI1MDM4NDdlODVkOTZiNGYzM2YwHhcNMjQwMTE2
MDczMDAwWhcNMjYwMTE1MDczMDAwWjAzMTEwLwYDVQQDEyg0MDIzMjYzNTNiZmJl
NmE4YzNmMjIzNTU1YjQxZTI5OGFjZjM5M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmWNNUqO1ZOexwaqjsYC5v3R3wUaJ0N3csIl1cXmFfW9emq0y
hS7vHCX4gP66Pg7dVzNdGJQhsk0lXg1ZPgW5Uej+kMU78/e9JKCfQ6jUkOuDXA8W
6Lga7qxKgXu7NPkfwCcJ8qaRIxwhUfsNrQPG1aWCzi4rl5QFglBSIHPqabuJxA8T
9apNC/3ZAwv6nXZ8AJZZkuqYEs1W20wA1Q2i/DOKJbuVuhTJgq6cZk0Rr6qN2Cfm
mXOkj/Ig9NzW9mlrElWFBjfWz770j0myG1qk9/mcN59M+dg5WnSliGXP5muLxlqN
H8VGwpa2n0UF0Y2C+qQ4CQph/uDVyzSqz83QvwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAD06GO8NVmeUsPDnEumP4TLtVmdMB8GA1UdIwQYMBaAFG1c5D2rqQReI0iw
tWZmNMn7wIV7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjJhMjU5
Zjc0NTdmNGM1ZWFjYTY0YjUwMzg0N2U4NWQ5NmI0ZjMzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMThjOWViOTEtODc0MC00YjFiLTgxMzUtNWNlZDEz
YjNmMTEzLzQwMjMyNjM1M2JmYmU2YThjM2YyMjM1NTViNDFlMjk4YWNmMzkzZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOGM5ZWI5MS04NzQwLTRiMWItODEzNS01Y2Vk
MTNiM2YxMTMvMjJhMjU5Zjc0NTdmNGM1ZWFjYTY0YjUwMzg0N2U4NWQ5NmI0ZjMz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi21vDANBgkqhkiG9w0BAQsFAAOCAQEALiRLDv4thUMvdjgY
i7/O3Cv2s3Y7kA3TDj39TLuzHYdV+H8VVycRpKxKQKcCWozqVf3C129HNWMwLOK/
2kRfUkWAq5YW62juW966f/H7ZoNk/bZuzwzX9Zbwo4lwwteumPxpV4c9X0LbsM8/
Pxs+gEy01PHRcI6EjJbqV0j8g1QuEjPdhiMoA+qrua55B3F4ClvfAT1gmZiVv/8t
G6Baiwl5xLoSdUNdwk0wHnnZIObdRwlXU1OBD1CUbB7gAXL5CiOYta3S/p7yoUf4
3QBO9nlnHtbQIr5gCRyBrEC0FFpWfbMejZQF5uSeeA6v5IkFZ+3hFuO7MCNny1OB
OIjbqA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org