Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/82e3b3eef6caec953b74b39d1ff00471190eea0f.roa
File:                     82e3b3eef6caec953b74b39d1ff00471190eea0f.roa (raw, json)
Hash identifier:          OKmDrH2OzHrxVZ+q+L2NXEnTUNwqFKyhKANrdO3XouA=
Subject key identifier:   0A:A0:DF:7E:49:2D:99:1D:0B:26:73:A7:17:73:C4:50:C9:C1:9F:8F
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       124137
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/82e3b3eef6caec953b74b39d1ff00471190eea0f.roa
Signing time:             Tue 16 Jan 2024 07:31:22 +0000
ROA not before:           Tue 16 Jan 2024 07:31:22 +0000
ROA not after:            Thu 15 Jan 2026 07:31:22 +0000
asID:                     269735
IP address blocks:        45.181.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196343 (0x124137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 16 07:31:22 2024 GMT
            Not After : Jan 15 07:31:22 2026 GMT
        Subject: CN=82e3b3eef6caec953b74b39d1ff00471190eea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:e3:6a:e7:ab:99:84:8c:7c:36:25:29:b7:
                    3a:d8:11:06:e9:d7:96:da:8a:cd:bd:f9:f8:7f:5a:
                    7f:1e:28:33:5e:cf:c0:ff:58:d2:6a:8b:aa:22:9d:
                    e8:ef:a0:f9:7d:05:1e:bc:cb:5d:34:88:3c:f2:9f:
                    2f:f9:85:9a:99:63:61:06:15:74:95:aa:a3:f5:83:
                    7f:43:ea:6d:d5:94:b3:24:c7:63:76:40:34:88:b9:
                    a8:08:26:db:4f:68:e3:b3:06:e4:5c:c7:cf:6e:6d:
                    8e:61:18:b7:93:f0:34:12:b8:33:b7:b0:65:ec:3c:
                    30:c9:cd:2f:69:8c:b4:99:c1:4f:25:ea:ad:72:2f:
                    39:95:c8:a8:78:b5:02:3b:8b:a8:f9:d2:eb:55:ac:
                    51:fd:9c:eb:f9:b7:b7:b1:49:69:09:22:b8:09:43:
                    39:e3:95:e1:71:99:53:1a:e6:71:d4:0c:5b:a6:ad:
                    bd:e1:5e:3e:54:30:4f:12:91:ed:f4:28:21:8e:93:
                    01:9c:b5:30:b3:a8:99:c7:f7:18:33:9b:20:f7:33:
                    67:bf:8e:d5:3b:82:2e:73:be:4c:7f:86:4f:ac:a0:
                    6a:31:0a:df:fd:73:1c:5b:08:5a:a5:77:07:67:2a:
                    32:28:18:d8:41:e8:95:1f:d9:a4:8d:42:da:8d:30:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:DF:7E:49:2D:99:1D:0B:26:73:A7:17:73:C4:50:C9:C1:9F:8F
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/82e3b3eef6caec953b74b39d1ff00471190eea0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:92:c4:b9:f9:0f:bf:a3:27:f2:17:4a:f6:cc:1d:7a:64:
         f1:44:9e:29:4f:29:ff:c3:b5:da:3f:0a:fa:7a:ca:35:06:17:
         a9:b0:04:cb:f8:7c:da:56:ca:91:dc:d7:18:d7:06:0a:29:dc:
         f7:4f:25:25:7b:0b:b8:f5:f0:3a:3b:ee:1e:4a:0d:ad:34:6e:
         74:c9:4e:53:60:a5:55:45:70:05:36:86:e2:06:d9:28:d7:17:
         90:49:d0:e7:e9:ff:f6:a3:bb:1f:87:80:93:4d:3a:f9:03:54:
         3d:a1:f8:5b:49:d4:1d:9f:ef:35:83:1f:21:5e:d5:d7:11:04:
         b1:48:57:df:3e:65:6e:34:59:3f:41:3c:0f:eb:ea:64:79:3a:
         75:04:36:00:83:d5:d6:bb:d5:db:74:d9:50:c0:7d:58:66:c4:
         e9:0d:35:5d:84:6d:04:e4:35:e1:cf:c5:b7:9d:39:90:7b:78:
         41:c8:40:19:f9:78:d7:d7:9b:7a:f9:ab:f8:b9:e3:b7:87:c2:
         dd:b3:bf:d0:6a:ab:2a:1e:2e:c7:21:4a:36:18:4c:47:cd:64:
         80:47:91:0c:0f:a0:79:cb:51:25:df:42:98:bb:34:b1:80:2f:
         94:06:aa:91:68:08:c6:8a:d2:9c:4d:2f:9f:ed:e7:83:ec:ff:
         6f:c6:d2:1a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEkE3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
YTI1OWY3NDU3ZjRjNWVhY2E2NGI1MDM4NDdlODVkOTZiNGYzM2YwHhcNMjQwMTE2
MDczMTIyWhcNMjYwMTE1MDczMTIyWjAzMTEwLwYDVQQDEyg4MmUzYjNlZWY2Y2Fl
Yzk1M2I3NGIzOWQxZmYwMDQ3MTE5MGVlYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApH7jauermYSMfDYlKbc62BEG6deW2orNvfn4f1p/HigzXs/A
/1jSaouqIp3o76D5fQUevMtdNIg88p8v+YWamWNhBhV0laqj9YN/Q+pt1ZSzJMdj
dkA0iLmoCCbbT2jjswbkXMfPbm2OYRi3k/A0Ergzt7Bl7Dwwyc0vaYy0mcFPJeqt
ci85lcioeLUCO4uo+dLrVaxR/Zzr+be3sUlpCSK4CUM545XhcZlTGuZx1Axbpq29
4V4+VDBPEpHt9CghjpMBnLUws6iZx/cYM5sg9zNnv47VO4Iuc75Mf4ZPrKBqMQrf
/XMcWwhapXcHZyoyKBjYQeiVH9mkjULajTCxmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAqg335JLZkdCyZzpxdzxFDJwZ+PMB8GA1UdIwQYMBaAFG1c5D2rqQReI0iw
tWZmNMn7wIV7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjJhMjU5
Zjc0NTdmNGM1ZWFjYTY0YjUwMzg0N2U4NWQ5NmI0ZjMzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMThjOWViOTEtODc0MC00YjFiLTgxMzUtNWNlZDEz
YjNmMTEzLzgyZTNiM2VlZjZjYWVjOTUzYjc0YjM5ZDFmZjAwNDcxMTkwZWVhMGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOGM5ZWI5MS04NzQwLTRiMWItODEzNS01Y2Vk
MTNiM2YxMTMvMjJhMjU5Zjc0NTdmNGM1ZWFjYTY0YjUwMzg0N2U4NWQ5NmI0ZjMz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC21vjANBgkqhkiG9w0BAQsFAAOCAQEAfaiSxLn5D7+jJ/IX
SvbMHXpk8USeKU8p/8O12j8K+nrKNQYXqbAEy/h82lbKkdzXGNcGCinc908lJXsL
uPXwOjvuHkoNrTRudMlOU2ClVUVwBTaG4gbZKNcXkEnQ5+n/9qO7H4eAk006+QNU
PaH4W0nUHZ/vNYMfIV7V1xEEsUhX3z5lbjRZP0E8D+vqZHk6dQQ2AIPV1rvV23TZ
UMB9WGbE6Q01XYRtBOQ14c/Ft505kHt4QchAGfl419ebevmr+Lnjt4fC3bO/0Gqr
Kh4uxyFKNhhMR81kgEeRDA+gectRJd9CmLs0sYAvlAaqkWgIxorSnE0vn+3ng+z/
b8bSGg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org