Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e35312e302f32342d3234203d3e203531323032.roa
File:                     34352e3137302e35312e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          G0i6zYvSWx3UMF7E+N2lQD172tehQ6tIJTLCPSw25nA=
Subject key identifier:   B6:05:34:75:96:C6:FD:B9:EB:2B:09:7E:9E:17:9A:28:B9:51:C8:01
Certificate issuer:       /CN=94FFF0F74069852BA7E1B9F60B3777259D539637
Certificate serial:       78F98F24AF18ADCF52AE4F093187CE7BFDE1A0B2
Authority key identifier: 94:FF:F0:F7:40:69:85:2B:A7:E1:B9:F6:0B:37:77:25:9D:53:96:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94FFF0F74069852BA7E1B9F60B3777259D539637.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e35312e302f32342d3234203d3e203531323032.roa
Signing time:             Sat 13 Jul 2024 16:20:00 +0000
ROA not before:           Sat 13 Jul 2024 16:15:00 +0000
ROA not after:            Sat 12 Jul 2025 16:20:00 +0000
asID:                     51202
IP address blocks:        45.170.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f9:8f:24:af:18:ad:cf:52:ae:4f:09:31:87:ce:7b:fd:e1:a0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FFF0F74069852BA7E1B9F60B3777259D539637
        Validity
            Not Before: Jul 13 16:15:00 2024 GMT
            Not After : Jul 12 16:20:00 2025 GMT
        Subject: CN=B605347596C6FDB9EB2B097E9E179A28B951C801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:71:fb:34:28:5a:78:a6:d1:42:d8:26:6e:
                    d3:80:57:0b:fc:72:e1:18:19:24:6d:00:c2:ce:46:
                    85:af:b8:b4:b5:c6:84:ed:47:02:3f:fd:fe:fe:4d:
                    c1:1f:df:67:dc:93:4b:f0:41:fe:0c:f1:8b:e0:c9:
                    7e:d6:f6:a7:86:b4:6f:ba:b9:1a:fd:8e:6f:da:41:
                    38:7f:a7:9e:5b:5d:4f:0d:b2:86:ce:7c:d7:4f:7b:
                    0f:ac:51:64:9c:9c:02:70:3c:98:42:55:2f:8e:4e:
                    fb:15:ec:7f:bc:96:f2:0d:bc:fd:d6:04:0a:aa:b0:
                    e9:50:b5:9a:74:ba:8e:c9:aa:81:58:78:62:b0:6a:
                    86:f7:e2:95:6a:07:cb:6d:b3:27:b7:df:30:83:f7:
                    82:28:86:7d:7f:8b:2a:8f:3c:b6:7e:21:86:f2:21:
                    ef:88:9c:e4:45:3f:8e:26:cd:cd:c4:ee:6f:aa:a3:
                    a2:6f:2c:6e:73:ba:ad:fd:ad:02:bb:2f:79:df:75:
                    04:b2:94:63:68:8c:94:a4:ad:ca:e8:e3:98:b9:cd:
                    18:8e:d4:7f:71:9f:25:07:22:24:75:0c:b4:2f:4b:
                    b0:49:26:0a:47:21:2e:03:37:14:3d:0e:e3:85:e6:
                    b9:b1:b3:22:e7:bb:89:18:26:a2:93:b2:3d:fc:19:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:05:34:75:96:C6:FD:B9:EB:2B:09:7E:9E:17:9A:28:B9:51:C8:01
            X509v3 Authority Key Identifier:
                keyid:94:FF:F0:F7:40:69:85:2B:A7:E1:B9:F6:0B:37:77:25:9D:53:96:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/94FFF0F74069852BA7E1B9F60B3777259D539637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94FFF0F74069852BA7E1B9F60B3777259D539637.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e35312e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:b7:bf:5e:a3:e9:cb:74:17:73:2e:8a:a1:3b:78:04:5c:
         b5:b5:cb:45:56:0b:bf:78:8e:73:c8:a2:6d:3f:fd:21:bc:ae:
         51:0c:60:6f:6e:a0:41:93:58:26:f4:36:de:07:6a:40:ef:43:
         b1:26:d5:bb:66:11:f6:20:23:93:f3:83:ca:0c:fd:d6:43:5a:
         70:d7:62:f9:ed:d5:f2:6a:b9:22:25:c8:cf:4b:f9:92:4c:3d:
         da:a5:f4:cf:37:72:c7:e4:6d:48:b2:1e:63:b6:fe:aa:b1:d4:
         91:23:4a:68:6e:ca:a1:67:ce:aa:a8:21:a4:f5:03:84:3e:26:
         8c:f4:8f:6d:2d:cd:64:38:e2:80:b1:6e:e3:5e:17:a2:40:3c:
         f7:5d:c3:24:1f:75:39:4b:dc:18:d0:8f:30:70:fd:cb:8d:fe:
         a0:bc:12:0b:ce:de:87:d6:44:18:f8:f6:4f:6a:5a:25:21:7b:
         a5:83:d7:52:8e:9f:3a:54:be:c8:f3:bb:75:72:bf:c1:e4:06:
         60:f6:da:b0:91:2a:5e:87:62:79:0a:b5:11:60:77:9a:68:c9:
         47:6c:35:9d:ee:99:d7:86:7f:42:c9:d2:c7:74:14:a0:ec:67:
         50:3c:62:9d:f5:18:45:04:0a:ec:6d:30:48:79:62:1a:6c:39:
         15:9e:1f:29
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUePmPJK8Yrc9Srk8JMYfOe/3hoLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGRkYwRjc0MDY5ODUyQkE3RTFCOUY2MEIzNzc3MjU5
RDUzOTYzNzAeFw0yNDA3MTMxNjE1MDBaFw0yNTA3MTIxNjIwMDBaMDMxMTAvBgNV
BAMTKEI2MDUzNDc1OTZDNkZEQjlFQjJCMDk3RTlFMTc5QTI4Qjk1MUM4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFj3H7NChaeKbRQtgmbtOAVwv8
cuEYGSRtAMLORoWvuLS1xoTtRwI//f7+TcEf32fck0vwQf4M8YvgyX7W9qeGtG+6
uRr9jm/aQTh/p55bXU8NsobOfNdPew+sUWScnAJwPJhCVS+OTvsV7H+8lvINvP3W
BAqqsOlQtZp0uo7JqoFYeGKwaob34pVqB8ttsye33zCD94Iohn1/iyqPPLZ+IYby
Ie+InORFP44mzc3E7m+qo6JvLG5zuq39rQK7L3nfdQSylGNojJSkrcro45i5zRiO
1H9xnyUHIiR1DLQvS7BJJgpHIS4DNxQ9DuOF5rmxsyLnu4kYJqKTsj38GQjjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUtgU0dZbG/bnrKwl+nheaKLlRyAEwHwYDVR0j
BBgwFoAUlP/w90BphSun4bn2Czd3JZ1TljcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkI5MURGNEQzQTFCNEY0MEY4RDZBREU5NEZFQUZDQUI5
NDNERDkxNEFCODIzQzExMTc1MDIwQ0E0QjY0RTIzLzAvOTRGRkYwRjc0MDY5ODUy
QkE3RTFCOUY2MEIzNzc3MjU5RDUzOTYzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEZGRjBGNzQwNjk4NTJCQTdF
MUI5RjYwQjM3NzcyNTlENTM5NjM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJCOTFERjREM0ExQjRGNDBGOEQ2QURFOTRGRUFGQ0FCOTQzREQ5MTRB
QjgyM0MxMTE3NTAyMENBNEI2NEUyMy8wLzM0MzUyZTMxMzczMDJlMzUzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzEzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtqjMwDQYJ
KoZIhvcNAQELBQADggEBADl9t79eo+nLdBdzLoqhO3gEXLW1y0VWC794jnPIom0/
/SG8rlEMYG9uoEGTWCb0Nt4HakDvQ7Em1btmEfYgI5Pzg8oM/dZDWnDXYvnt1fJq
uSIlyM9L+ZJMPdql9M83csfkbUiyHmO2/qqx1JEjSmhuyqFnzqqoIaT1A4Q+Joz0
j20tzWQ44oCxbuNeF6JAPPddwyQfdTlL3BjQjzBw/cuN/qC8EgvO3ofWRBj49k9q
WiUhe6WD11KOnzpUvsjzu3Vyv8HkBmD22rCRKl6HYnkKtRFgd5poyUdsNZ3umdeG
f0LJ0sd0FKDsZ1A8Yp31GEUECuxtMEh5YhpsORWeHyk=
-----END CERTIFICATE-----