Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/745439b8c4c5eeb14d820aeb31f454058f8ebb2b.roa
File:                     745439b8c4c5eeb14d820aeb31f454058f8ebb2b.roa (raw, json)
Hash identifier:          KihYdYBOnRNg2vEo2duZAerdF8cRetmWaeW1dhXZd4M=
Subject key identifier:   1D:8D:1E:2C:33:5A:F8:8D:90:68:F1:2B:0B:4D:B6:E4:43:5E:9B:AC
Certificate issuer:       /CN=9facf1e4ddef7682e26c289d5411679fcf8b7155
Certificate serial:       111959
Authority key identifier: 94:73:DB:DA:2A:63:D4:2F:8B:7C:C8:8A:9F:3C:7C:D6:0C:CA:E3:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9facf1e4ddef7682e26c289d5411679fcf8b7155.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/745439b8c4c5eeb14d820aeb31f454058f8ebb2b.roa
Signing time:             Sun 22 Aug 2021 04:34:54 +0000
ROA not before:           Sat 21 Aug 2021 03:00:00 +0000
ROA not after:            Thu 22 Aug 2024 03:00:00 +0000
asID:                     262191
IP address blocks:        170.80.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120601 (0x111959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9facf1e4ddef7682e26c289d5411679fcf8b7155
        Validity
            Not Before: Aug 21 03:00:00 2021 GMT
            Not After : Aug 22 03:00:00 2024 GMT
        Subject: CN=745439b8c4c5eeb14d820aeb31f454058f8ebb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:d4:0c:71:d0:02:ef:7f:80:49:55:91:f8:
                    72:c7:b8:3c:17:09:ab:5a:6b:21:3a:e4:ee:75:8c:
                    a0:e1:52:e5:53:20:fe:29:f1:a3:92:b6:f5:c0:a8:
                    b5:c2:6c:d4:3c:67:b8:d6:e3:5c:e9:4d:01:f8:67:
                    93:86:98:5b:ac:c2:7e:33:74:86:36:5c:5f:49:88:
                    7b:3f:1c:c3:6a:2d:4d:f3:33:90:33:e3:45:97:ab:
                    69:40:0d:ea:28:4d:5c:b3:47:dd:95:28:2f:ab:d8:
                    2f:04:32:e9:01:4f:a0:54:18:7e:4a:24:c7:55:ff:
                    2b:80:17:d4:44:80:d6:fe:3b:0f:ba:9b:cd:af:4e:
                    03:4b:d3:20:8f:0b:a6:ed:31:f6:ff:00:8b:53:cc:
                    81:09:3b:96:b1:01:4e:5d:f9:c5:08:3a:d4:25:ee:
                    67:3c:df:a5:df:bf:3e:d0:e0:95:29:5a:39:eb:c3:
                    c4:74:20:cb:aa:9f:54:31:63:91:2a:bc:66:31:a4:
                    6b:b7:d0:74:08:8a:c3:04:65:4f:49:f3:cf:a6:a8:
                    5e:81:9c:22:e4:c9:bc:5a:56:0a:b4:72:02:36:b2:
                    8f:8b:fc:14:f7:88:10:84:c7:80:df:33:a2:ab:2b:
                    f2:e5:7f:e2:94:9f:30:b1:a1:07:83:43:6e:5f:6b:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:1E:2C:33:5A:F8:8D:90:68:F1:2B:0B:4D:B6:E4:43:5E:9B:AC
            X509v3 Authority Key Identifier:
                keyid:94:73:DB:DA:2A:63:D4:2F:8B:7C:C8:8A:9F:3C:7C:D6:0C:CA:E3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9facf1e4ddef7682e26c289d5411679fcf8b7155.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/745439b8c4c5eeb14d820aeb31f454058f8ebb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23c490a8-aba4-4f72-9338-746713d7f8c1/9facf1e4ddef7682e26c289d5411679fcf8b7155.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:42:b8:cf:e3:70:bf:c4:04:62:b0:c6:3e:a3:6a:9a:bc:60:
         85:f3:5a:a1:a3:c3:cc:84:81:a6:62:c5:40:29:8a:34:01:31:
         b2:15:ba:ee:e3:fd:97:11:56:a1:8a:04:07:da:54:f9:b4:86:
         c1:19:82:04:b9:8a:12:12:28:c4:88:3f:85:4b:70:60:80:d0:
         53:45:07:aa:68:0e:5a:9e:8e:20:53:44:c8:6c:c9:c5:ed:1e:
         93:74:72:1b:f2:11:0f:fa:78:64:fd:f4:12:59:77:3e:5f:00:
         49:2e:c3:6d:93:6c:32:15:c9:68:54:2c:c3:4c:7a:a0:51:33:
         ca:dc:4b:d0:c9:7d:47:33:63:a6:89:7d:7f:02:c3:8f:b0:c0:
         98:1f:6b:c7:f2:a4:5e:39:1b:79:a9:be:1a:56:f4:45:5b:bf:
         4d:93:59:57:90:04:93:d3:b1:8d:a4:4c:a7:0b:89:f0:ec:d0:
         f2:db:16:a6:df:c9:2e:91:d7:9b:53:a1:12:e0:46:d5:c4:f6:
         10:c6:23:5c:6b:88:97:a9:3b:c7:b0:9f:7d:fe:cc:f5:fc:f7:
         9d:fd:5f:08:d5:81:86:10:0b:7b:6a:9c:91:9f:ed:e2:09:d8:
         b1:52:a3:e3:03:80:6c:50:6e:ce:dc:1d:82:65:01:f6:45:c1:
         67:ab:2b:06
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDERlZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
YWNmMWU0ZGRlZjc2ODJlMjZjMjg5ZDU0MTE2NzlmY2Y4YjcxNTUwHhcNMjEwODIx
MDMwMDAwWhcNMjQwODIyMDMwMDAwWjAzMTEwLwYDVQQDEyg3NDU0MzliOGM0YzVl
ZWIxNGQ4MjBhZWIzMWY0NTQwNThmOGViYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzC7UDHHQAu9/gElVkfhyx7g8FwmrWmshOuTudYyg4VLlUyD+
KfGjkrb1wKi1wmzUPGe41uNc6U0B+GeThphbrMJ+M3SGNlxfSYh7PxzDai1N8zOQ
M+NFl6tpQA3qKE1cs0fdlSgvq9gvBDLpAU+gVBh+SiTHVf8rgBfURIDW/jsPupvN
r04DS9Mgjwum7TH2/wCLU8yBCTuWsQFOXfnFCDrUJe5nPN+l378+0OCVKVo568PE
dCDLqp9UMWORKrxmMaRrt9B0CIrDBGVPSfPPpqhegZwi5Mm8WlYKtHICNrKPi/wU
94gQhMeA3zOiqyvy5X/ilJ8wsaEHg0NuX2uoJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB2NHiwzWviNkGjxKwtNtuRDXpusMB8GA1UdIwQYMBaAFJRz29oqY9Qvi3zI
ip88fNYMyuM+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZhY2Yx
ZTRkZGVmNzY4MmUyNmMyODlkNTQxMTY3OWZjZjhiNzE1NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjNjNDkwYTgtYWJhNC00ZjcyLTkzMzgtNzQ2NzEz
ZDdmOGMxLzc0NTQzOWI4YzRjNWVlYjE0ZDgyMGFlYjMxZjQ1NDA1OGY4ZWJiMmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yM2M0OTBhOC1hYmE0LTRmNzItOTMzOC03NDY3
MTNkN2Y4YzEvOWZhY2YxZTRkZGVmNzY4MmUyNmMyODlkNTQxMTY3OWZjZjhiNzE1
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpQYDANBgkqhkiG9w0BAQsFAAOCAQEAlEK4z+Nwv8QEYrDG
PqNqmrxghfNaoaPDzISBpmLFQCmKNAExshW67uP9lxFWoYoEB9pU+bSGwRmCBLmK
EhIoxIg/hUtwYIDQU0UHqmgOWp6OIFNEyGzJxe0ek3RyG/IRD/p4ZP30Ell3Pl8A
SS7DbZNsMhXJaFQsw0x6oFEzytxL0Ml9RzNjpol9fwLDj7DAmB9rx/KkXjkbeam+
Glb0RVu/TZNZV5AEk9OxjaRMpwuJ8OzQ8tsWpt/JLpHXm1OhEuBG1cT2EMYjXGuI
l6k7x7Cfff7M9fz3nf1fCNWBhhALe2qckZ/t4gnYsVKj4wOAbFBuztwdgmUB9kXB
Z6srBg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org