Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/311d3b098e2b6cc11c5e0f7172b5d532ffb81cec.roa
File:                     311d3b098e2b6cc11c5e0f7172b5d532ffb81cec.roa (raw, json)
Hash identifier:          YHvxcF9KKA1VjmRcLT3AraRM362eGzqA5Fs/bL/tU1k=
Subject key identifier:   6F:25:79:2C:13:47:A2:CC:51:12:8E:82:87:85:66:17:8B:B8:4C:0E
Certificate issuer:       /CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Certificate serial:       0C6304
Authority key identifier: AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/311d3b098e2b6cc11c5e0f7172b5d532ffb81cec.roa
Signing time:             Wed 24 Mar 2021 14:48:15 +0000
ROA not before:           Wed 24 Mar 2021 14:48:14 +0000
ROA not after:            Tue 24 Mar 2026 14:48:14 +0000
asID:                     269730
IP address blocks:        45.179.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811780 (0xc6304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
        Validity
            Not Before: Mar 24 14:48:14 2021 GMT
            Not After : Mar 24 14:48:14 2026 GMT
        Subject: CN=311d3b098e2b6cc11c5e0f7172b5d532ffb81cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:3b:67:d8:b8:22:0f:29:ad:de:88:31:4a:
                    54:ef:62:32:e4:97:67:34:0a:2c:54:0c:01:ea:df:
                    96:3b:62:b0:51:f8:a5:5d:6c:cc:fe:af:b5:da:75:
                    3a:d6:5e:f8:53:ef:ab:6f:25:c3:54:9a:6b:e3:fd:
                    35:38:e9:5f:2c:8e:80:ba:df:a2:f8:d4:dd:6b:0b:
                    fa:bb:45:e6:20:48:da:0b:68:05:dc:1c:89:53:88:
                    3a:41:1a:7d:fc:15:85:57:b6:cb:15:11:55:6b:67:
                    39:4c:b8:28:0a:ac:8e:93:d7:b9:42:bb:12:d9:c1:
                    e1:4a:17:6c:02:2d:17:da:40:82:31:11:6b:87:6a:
                    41:af:65:59:8d:fd:4e:66:66:07:e6:34:6f:25:f9:
                    5c:07:dd:73:9b:68:f0:6a:d3:34:98:1b:81:6d:39:
                    1c:1f:1b:90:0c:a5:5f:6a:f2:8b:7c:c2:73:c9:9a:
                    b5:a8:6f:b9:6e:6f:f4:3e:4e:54:b1:b8:5d:1c:d1:
                    32:cb:d6:b1:01:59:30:02:fa:b6:b4:41:84:43:49:
                    61:6b:e6:95:1f:75:59:9b:a6:74:12:09:0f:6c:54:
                    1b:47:a3:e6:27:3d:01:19:bf:85:28:3b:7f:79:26:
                    b0:2d:ce:7c:0d:5a:77:b5:8b:7c:40:33:64:ce:b3:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:79:2C:13:47:A2:CC:51:12:8E:82:87:85:66:17:8B:B8:4C:0E
            X509v3 Authority Key Identifier:
                keyid:AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/311d3b098e2b6cc11c5e0f7172b5d532ffb81cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:38:32:3a:87:af:6e:b4:34:6e:34:ff:e0:6b:77:91:9a:
         6f:84:1b:2b:46:b6:cd:df:93:59:78:29:5c:e6:08:43:57:79:
         1f:57:11:b5:f8:c0:08:11:51:f5:d3:dd:a6:ac:b8:4c:ac:a6:
         4e:66:3f:f7:42:a5:f9:be:6b:9b:1e:3c:ec:cf:0e:bc:61:06:
         de:10:cd:78:40:6c:61:8c:7f:8c:bf:24:86:ed:92:fd:75:8a:
         29:41:73:f8:49:78:86:1e:9d:0a:f0:16:24:56:59:8a:cc:ad:
         da:3b:1c:38:31:17:69:ce:33:1d:1a:0b:96:6c:05:22:d6:e5:
         e8:07:c1:c5:d4:e9:9a:23:5b:8a:be:41:85:7d:d3:01:d1:be:
         d1:5b:97:8c:0d:c2:80:aa:61:d3:f7:45:c8:6f:2a:bc:2d:7c:
         33:48:06:45:4b:15:bd:72:68:74:cb:7b:d6:cf:36:4f:1f:09:
         b4:61:a2:f9:f6:b7:8e:f5:2e:ac:9c:35:d7:31:ea:5b:e7:e3:
         e3:10:3c:47:c8:d4:2b:06:66:46:e5:0e:b6:57:96:d6:22:c5:
         b4:dd:36:6f:3a:a4:d7:17:e5:fd:6a:49:ae:45:dd:0c:2d:3a:
         bc:72:db:7b:0a:3b:e3:1a:fe:13:81:6f:f0:94:53:02:fa:40:
         b4:b2:c7:c2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDGMEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
ZWQ5ZjcxZGMwMTgyNTY0ZjBiMWQ4OWQ3ZGJlNDAyZDNjMzQ2NjUwHhcNMjEwMzI0
MTQ0ODE0WhcNMjYwMzI0MTQ0ODE0WjAzMTEwLwYDVQQDEygzMTFkM2IwOThlMmI2
Y2MxMWM1ZTBmNzE3MmI1ZDUzMmZmYjgxY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhWw7Z9i4Ig8prd6IMUpU72Iy5JdnNAosVAwB6t+WO2KwUfil
XWzM/q+12nU61l74U++rbyXDVJpr4/01OOlfLI6Aut+i+NTdawv6u0XmIEjaC2gF
3ByJU4g6QRp9/BWFV7bLFRFVa2c5TLgoCqyOk9e5QrsS2cHhShdsAi0X2kCCMRFr
h2pBr2VZjf1OZmYH5jRvJflcB91zm2jwatM0mBuBbTkcHxuQDKVfavKLfMJzyZq1
qG+5bm/0Pk5UsbhdHNEyy9axAVkwAvq2tEGEQ0lha+aVH3VZm6Z0EgkPbFQbR6Pm
Jz0BGb+FKDt/eSawLc58DVp3tYt8QDNkzrOinQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG8leSwTR6LMURKOgoeFZheLuEwOMB8GA1UdIwQYMBaAFK6bX0sGIaVS7WsZ
PmNh25zpMG7AMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzJlZDlm
NzFkYzAxODI1NjRmMGIxZDg5ZDdkYmU0MDJkM2MzNDY2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjJiZjA1MWUtYzEwOS00YWI4LTk5OGYtZjk3YmU2
NWEzNTk4LzMxMWQzYjA5OGUyYjZjYzExYzVlMGY3MTcyYjVkNTMyZmZiODFjZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMmJmMDUxZS1jMTA5LTRhYjgtOTk4Zi1mOTdi
ZTY1YTM1OTgvNzJlZDlmNzFkYzAxODI1NjRmMGIxZDg5ZDdkYmU0MDJkM2MzNDY2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2zpDANBgkqhkiG9w0BAQsFAAOCAQEABao4MjqHr260NG40
/+Brd5Gab4QbK0a2zd+TWXgpXOYIQ1d5H1cRtfjACBFR9dPdpqy4TKymTmY/90Kl
+b5rmx487M8OvGEG3hDNeEBsYYx/jL8khu2S/XWKKUFz+El4hh6dCvAWJFZZisyt
2jscODEXac4zHRoLlmwFItbl6AfBxdTpmiNbir5BhX3TAdG+0VuXjA3CgKph0/dF
yG8qvC18M0gGRUsVvXJodMt71s82Tx8JtGGi+fa3jvUurJw11zHqW+fj4xA8R8jU
KwZmRuUOtleW1iLFtN02bzqk1xfl/WpJrkXdDC06vHLbewo74xr+E4Fv8JRTAvpA
tLLHwg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org