Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/3300b4733b0755b0d2e9af1eb1fc0c7939aec1ca.roa
File:                     3300b4733b0755b0d2e9af1eb1fc0c7939aec1ca.roa (raw, json)
Hash identifier:          11w5Xf35/Rl7mXk2iw5SJR6FmOunwslAy5LcdF3avQg=
Subject key identifier:   92:C0:6C:09:2E:00:EB:25:4A:26:6A:4D:1B:C3:8B:4C:FF:62:6D:01
Certificate issuer:       /CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Certificate serial:       0CECFF
Authority key identifier: AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/3300b4733b0755b0d2e9af1eb1fc0c7939aec1ca.roa
Signing time:             Wed 24 Mar 2021 14:33:07 +0000
ROA not before:           Wed 24 Mar 2021 14:33:07 +0000
ROA not after:            Tue 24 Mar 2026 14:33:07 +0000
asID:                     266808
IP address blocks:        45.236.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847103 (0xcecff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
        Validity
            Not Before: Mar 24 14:33:07 2021 GMT
            Not After : Mar 24 14:33:07 2026 GMT
        Subject: CN=3300b4733b0755b0d2e9af1eb1fc0c7939aec1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:67:d1:20:17:96:f6:4c:fe:94:df:f3:2f:
                    4c:26:6c:46:4a:d7:6c:70:b4:90:ab:c1:cb:e3:f2:
                    ae:1d:1f:4a:8d:89:57:ec:bc:07:35:bd:3e:53:96:
                    d8:99:e4:90:fe:95:93:d9:c4:08:22:5c:e0:68:80:
                    10:2a:93:de:8f:41:78:c2:c9:c1:af:20:52:b6:b5:
                    f8:72:12:02:da:85:04:63:73:ac:0a:fa:2b:a5:19:
                    af:54:fc:42:ca:ff:bd:52:09:b5:9c:eb:e3:f5:31:
                    90:1f:74:68:8c:22:64:6f:90:7d:3d:02:bc:b6:a6:
                    2c:81:52:cb:f3:d4:e0:8b:bf:84:fe:c8:a5:f5:c0:
                    2d:18:8e:4f:19:aa:93:61:e7:46:42:f3:44:db:ed:
                    12:d1:3a:2b:6f:57:7f:f9:4b:f9:39:90:87:a8:58:
                    e6:f1:1b:d7:bd:9d:be:2a:d9:31:be:12:38:ad:4d:
                    a5:05:ac:6b:d9:4a:31:51:a3:58:a4:37:75:ea:2e:
                    e8:99:7c:71:a5:88:23:71:e0:db:2c:e8:22:ba:db:
                    3d:fb:5b:47:7a:7e:b2:e8:65:15:23:5d:5c:f1:b7:
                    10:75:88:b1:7a:a3:a5:c6:88:4c:f3:31:aa:a8:73:
                    79:52:62:df:9c:e6:6e:24:c3:0d:1e:ff:a4:a0:c5:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:6C:09:2E:00:EB:25:4A:26:6A:4D:1B:C3:8B:4C:FF:62:6D:01
            X509v3 Authority Key Identifier:
                keyid:AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/3300b4733b0755b0d2e9af1eb1fc0c7939aec1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:cf:14:ec:ad:3b:3a:2e:9b:35:33:d1:6d:86:db:b1:3f:
         ab:69:ad:ae:fc:32:ba:c7:c7:65:f8:72:18:37:32:dd:84:6a:
         86:5b:f4:07:4b:6d:cd:69:80:0b:c8:b5:9b:e9:c2:12:c6:e4:
         c2:9c:f0:42:6e:a9:41:c6:cd:2d:da:32:28:20:0e:3d:c2:68:
         8a:ff:90:32:b8:4f:cf:69:1b:d8:8f:68:35:e3:e0:26:6c:be:
         1b:fd:2a:d6:d2:75:f3:b9:c7:9a:f2:15:65:bd:35:42:7f:c3:
         31:93:04:d1:55:c1:51:6a:2c:f5:1d:bc:5c:00:55:56:b0:64:
         6d:d0:e3:2d:cf:59:f8:07:d7:cb:0d:d4:b7:96:ea:a6:1f:a9:
         c9:9b:20:e1:4c:59:82:4f:74:2a:e7:3f:8f:af:82:2a:82:e9:
         09:6d:96:9c:ad:38:1b:41:da:8c:29:e1:24:a2:9f:ea:94:5f:
         ac:3e:2d:91:6a:7d:7f:41:b6:b2:84:bb:da:4e:38:70:ba:01:
         04:b4:fd:27:e5:a3:95:0c:d7:00:fc:a2:06:ba:30:c6:d6:da:
         78:91:3c:e4:4d:cf:93:4a:71:b4:df:52:bd:c3:39:ee:01:70:
         c8:7c:dc:00:df:2b:9d:f0:34:70:a2:f4:e7:a2:b9:fe:dc:4a:
         65:7b:86:41
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDOz/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
MWIzYmFiMzNmYWE4YWRjOGZiZjZiMWM3YmU3YjYxYThjNWU0YzgwHhcNMjEwMzI0
MTQzMzA3WhcNMjYwMzI0MTQzMzA3WjAzMTEwLwYDVQQDEygzMzAwYjQ3MzNiMDc1
NWIwZDJlOWFmMWViMWZjMGM3OTM5YWVjMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiapn0SAXlvZM/pTf8y9MJmxGStdscLSQq8HL4/KuHR9KjYlX
7LwHNb0+U5bYmeSQ/pWT2cQIIlzgaIAQKpPej0F4wsnBryBStrX4chIC2oUEY3Os
CvorpRmvVPxCyv+9Ugm1nOvj9TGQH3RojCJkb5B9PQK8tqYsgVLL89Tgi7+E/sil
9cAtGI5PGaqTYedGQvNE2+0S0Torb1d/+Uv5OZCHqFjm8RvXvZ2+KtkxvhI4rU2l
Baxr2UoxUaNYpDd16i7omXxxpYgjceDbLOgiuts9+1tHen6y6GUVI11c8bcQdYix
eqOlxohM8zGqqHN5UmLfnOZuJMMNHv+koMUGPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJLAbAkuAOslSiZqTRvDi0z/Ym0BMB8GA1UdIwQYMBaAFKvXkbzBEj26mft6
kMtUcU7XHxaiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmIxYjNi
YWIzM2ZhYThhZGM4ZmJmNmIxYzdiZTdiNjFhOGM1ZTRjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjg1ZmYzNDMtZjdkZi00YTMwLThmNjEtZWFhOGY4
ZTJlOTIzLzMzMDBiNDczM2IwNzU1YjBkMmU5YWYxZWIxZmMwYzc5MzlhZWMxY2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yODVmZjM0My1mN2RmLTRhMzAtOGY2MS1lYWE4
ZjhlMmU5MjMvYmIxYjNiYWIzM2ZhYThhZGM4ZmJmNmIxYzdiZTdiNjFhOGM1ZTRj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3sjTANBgkqhkiG9w0BAQsFAAOCAQEAH8/PFOytOzoumzUz
0W2G27E/q2mtrvwyusfHZfhyGDcy3YRqhlv0B0ttzWmAC8i1m+nCEsbkwpzwQm6p
QcbNLdoyKCAOPcJoiv+QMrhPz2kb2I9oNePgJmy+G/0q1tJ187nHmvIVZb01Qn/D
MZME0VXBUWos9R28XABVVrBkbdDjLc9Z+AfXyw3Ut5bqph+pyZsg4UxZgk90Kuc/
j6+CKoLpCW2WnK04G0HajCnhJKKf6pRfrD4tkWp9f0G2soS72k44cLoBBLT9J+Wj
lQzXAPyiBrowxtbaeJE85E3Pk0pxtN9SvcM57gFwyHzcAN8rnfA0cKL056K5/txK
ZXuGQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org