Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/01032db9fb3eae626dea204f8e5cf57ca83f06f2.roa
File:                     01032db9fb3eae626dea204f8e5cf57ca83f06f2.roa (raw, json)
Hash identifier:          Fi5mtTKqJHyQu+NoLneS6MA13szrjfIYXL0QKbxZWkI=
Subject key identifier:   D4:3E:69:07:CB:6E:36:5F:A2:B7:CC:32:BD:AE:37:C7:9B:12:8D:83
Certificate issuer:       /CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
Certificate serial:       0D13B8
Authority key identifier: 9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/01032db9fb3eae626dea204f8e5cf57ca83f06f2.roa
Signing time:             Mon 27 Nov 2023 16:58:48 +0000
ROA not before:           Mon 27 Nov 2023 16:58:47 +0000
ROA not after:            Thu 27 Nov 2025 16:58:47 +0000
asID:                     269814
IP address blocks:        45.186.24.0/24 maxlen: 24
                          45.186.25.0/24 maxlen: 24
                          45.186.26.0/24 maxlen: 24
                          45.186.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857016 (0xd13b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
        Validity
            Not Before: Nov 27 16:58:47 2023 GMT
            Not After : Nov 27 16:58:47 2025 GMT
        Subject: CN=01032db9fb3eae626dea204f8e5cf57ca83f06f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:96:61:f9:e1:cc:3a:00:60:cd:7a:72:89:
                    f1:87:9b:d5:ba:4e:e0:9d:73:54:ff:eb:2c:81:cd:
                    b7:b1:22:82:27:70:15:0b:05:18:b7:0e:a1:f6:2d:
                    80:60:cc:2d:c4:ba:95:ee:8d:08:dc:02:fb:67:01:
                    31:45:3a:ef:e7:9b:e0:d7:1a:37:96:a6:58:42:c6:
                    79:dd:ac:a0:48:db:db:a1:b2:0a:c6:91:56:c9:ee:
                    41:74:b9:76:44:19:35:be:48:df:6d:ef:15:dc:47:
                    19:0a:6a:f8:18:35:85:f5:8a:29:66:59:60:66:57:
                    71:a5:58:0c:b0:25:4f:85:a5:9e:b6:fa:4b:7f:64:
                    a5:53:8e:73:0b:6d:97:1a:d8:bd:6d:31:d3:e9:4d:
                    62:66:79:f2:23:73:38:bb:73:b4:01:bd:83:51:e5:
                    56:49:e2:8e:e5:6b:39:ef:fb:1e:73:12:1d:93:e7:
                    74:9c:e9:7e:13:97:7c:db:6c:d4:c7:82:a2:a4:62:
                    35:d3:f5:56:10:37:1c:a4:a5:00:67:10:49:3e:f3:
                    f7:5e:4b:3c:01:0b:ab:0d:5c:bf:4e:45:c6:d7:80:
                    84:ac:78:dc:89:c5:74:0a:a8:3c:0f:78:61:ea:b6:
                    14:1b:10:6a:91:b6:ef:ed:e6:63:57:be:db:86:68:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:69:07:CB:6E:36:5F:A2:B7:CC:32:BD:AE:37:C7:9B:12:8D:83
            X509v3 Authority Key Identifier:
                keyid:9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/01032db9fb3eae626dea204f8e5cf57ca83f06f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:b2:fe:6b:ca:5c:6b:76:7a:4c:19:02:c9:66:89:a3:75:
         4e:7c:d4:b8:4a:d4:07:80:ff:4b:65:97:a9:b3:f6:fa:4d:a2:
         a3:7b:92:05:82:cd:0f:cb:ac:32:d8:a1:b2:e8:00:bc:e9:a5:
         3c:06:59:0a:2b:73:2a:17:5f:31:27:84:e1:36:56:9c:a2:d4:
         f5:c7:be:0e:9e:88:69:09:63:a6:48:90:ad:f5:8b:c2:93:a9:
         f9:11:0d:61:30:99:be:b5:3a:4d:3b:81:39:0e:58:31:41:28:
         71:dd:90:17:ab:66:fe:62:00:78:b6:f4:d0:30:43:e7:7a:05:
         ab:95:e2:e5:6a:c5:11:a7:6d:4d:91:b6:a7:d2:0c:15:7b:25:
         0b:08:1b:1f:24:a0:e3:8f:c7:a0:3d:14:2d:a9:cf:3c:59:3d:
         c7:ca:c2:16:cd:5c:20:3c:75:33:0a:61:88:a7:80:9a:42:64:
         89:66:6e:e4:57:0e:1c:52:a9:29:fb:ec:4d:d1:1b:fd:3f:12:
         f3:8c:f3:60:3d:a4:cf:f9:b3:54:99:b6:59:67:98:6c:ce:9a:
         12:89:5a:fd:fb:42:8c:3b:36:c8:33:e6:c1:b7:e2:31:72:bc:
         21:99:4e:41:1f:74:8c:59:51:5d:a4:a4:8c:cd:ea:36:5e:37:
         33:b5:82:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDRO4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
YjBjZDFlNGEwZDUyNWY3NGQ0Y2M4NmIzNDc0Zjk4NjdjYTYzZWQwHhcNMjMxMTI3
MTY1ODQ3WhcNMjUxMTI3MTY1ODQ3WjAzMTEwLwYDVQQDEygwMTAzMmRiOWZiM2Vh
ZTYyNmRlYTIwNGY4ZTVjZjU3Y2E4M2YwNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwNmWYfnhzDoAYM16conxh5vVuk7gnXNU/+ssgc23sSKCJ3AV
CwUYtw6h9i2AYMwtxLqV7o0I3AL7ZwExRTrv55vg1xo3lqZYQsZ53aygSNvbobIK
xpFWye5BdLl2RBk1vkjfbe8V3EcZCmr4GDWF9YopZllgZldxpVgMsCVPhaWetvpL
f2SlU45zC22XGti9bTHT6U1iZnnyI3M4u3O0Ab2DUeVWSeKO5Ws57/secxIdk+d0
nOl+E5d822zUx4KipGI10/VWEDccpKUAZxBJPvP3Xks8AQurDVy/TkXG14CErHjc
icV0Cqg8D3hh6rYUGxBqkbbv7eZjV77bhmhv/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNQ+aQfLbjZforfMMr2uN8ebEo2DMB8GA1UdIwQYMBaAFJ496gLzyj/f9iOR
ctL76LPSfPIoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThiMGNk
MWU0YTBkNTI1Zjc0ZDRjYzg2YjM0NzRmOTg2N2NhNjNlZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWU5OThlN2QtM2JiYi00NDI4LTgyOWEtZTVkNjE5
NmIwN2EwLzAxMDMyZGI5ZmIzZWFlNjI2ZGVhMjA0ZjhlNWNmNTdjYTgzZjA2ZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTk5OGU3ZC0zYmJiLTQ0MjgtODI5YS1lNWQ2
MTk2YjA3YTAvZThiMGNkMWU0YTBkNTI1Zjc0ZDRjYzg2YjM0NzRmOTg2N2NhNjNl
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi26GDANBgkqhkiG9w0BAQsFAAOCAQEAc26y/mvKXGt2ekwZ
AslmiaN1TnzUuErUB4D/S2WXqbP2+k2io3uSBYLND8usMtihsugAvOmlPAZZCitz
KhdfMSeE4TZWnKLU9ce+Dp6IaQljpkiQrfWLwpOp+RENYTCZvrU6TTuBOQ5YMUEo
cd2QF6tm/mIAeLb00DBD53oFq5Xi5WrFEadtTZG2p9IMFXslCwgbHySg44/HoD0U
LanPPFk9x8rCFs1cIDx1MwphiKeAmkJkiWZu5FcOHFKpKfvsTdEb/T8S84zzYD2k
z/mzVJm2WWeYbM6aEola/ftCjDs2yDPmwbfiMXK8IZlOQR90jFlRXaSkjM3qNl43
M7WCHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org