Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/ffa3ec8ad53bd6c069e42b53a37a84585a629578.roa
File:                     ffa3ec8ad53bd6c069e42b53a37a84585a629578.roa (raw, json)
Hash identifier:          zze64QBi0mHGKA5XhzwwY4pMGuPFz2pd+M0myWSR9qE=
Subject key identifier:   29:5F:5B:8A:24:92:5D:75:C0:5E:FB:B2:8E:50:6D:D5:AE:CD:62:97
Certificate issuer:       /CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Certificate serial:       1FA450
Authority key identifier: BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/ffa3ec8ad53bd6c069e42b53a37a84585a629578.roa
Signing time:             Mon 08 May 2023 15:02:34 +0000
ROA not before:           Sun 07 May 2023 15:02:34 +0000
ROA not after:            Thu 08 May 2025 15:02:34 +0000
asID:                     266728
IP address blocks:        45.229.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073680 (0x1fa450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
        Validity
            Not Before: May  7 15:02:34 2023 GMT
            Not After : May  8 15:02:34 2025 GMT
        Subject: CN=ffa3ec8ad53bd6c069e42b53a37a84585a629578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:bc:ba:ff:b2:cf:e7:6e:b2:66:a2:b5:f0:
                    57:48:ba:4f:72:28:2d:d4:9f:ff:04:b4:57:91:15:
                    03:ec:66:46:71:81:6f:1c:73:59:7b:e7:74:95:f7:
                    93:a3:6f:62:57:fb:f4:6f:f8:b1:d1:53:23:ee:e9:
                    e7:3c:67:c6:e7:cc:7e:01:d5:a3:9c:a2:27:1b:60:
                    ca:df:d9:c6:00:a4:2c:10:b9:0b:46:91:8f:18:64:
                    30:65:65:90:6a:10:37:b4:5a:44:59:f4:1f:47:50:
                    d1:28:24:03:18:fd:d3:f9:78:62:e3:de:11:c4:cd:
                    8b:68:f7:79:11:e1:03:dd:43:8d:40:2d:07:bf:4d:
                    11:6e:ad:85:ce:d6:98:d7:19:f3:08:38:3c:aa:ca:
                    63:a2:e6:20:95:48:76:ea:e7:3a:c5:a5:4a:46:bd:
                    12:20:9c:9f:34:42:eb:a3:06:74:74:b5:93:09:64:
                    39:59:d0:d1:78:3c:bf:7a:5c:59:77:ce:c5:dc:d0:
                    26:15:8a:9b:ec:16:46:79:91:e7:fa:96:55:45:58:
                    77:53:00:4e:ad:11:9c:b6:e1:01:a6:a5:f2:0b:27:
                    d8:ac:c2:ff:b2:12:eb:fc:64:7e:77:ec:70:52:c2:
                    ab:4c:d0:13:0f:18:54:3e:09:c1:c0:ce:dc:83:b3:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:5B:8A:24:92:5D:75:C0:5E:FB:B2:8E:50:6D:D5:AE:CD:62:97
            X509v3 Authority Key Identifier:
                keyid:BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/ffa3ec8ad53bd6c069e42b53a37a84585a629578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:cb:6f:6a:d1:74:ec:cb:3a:23:ac:bb:38:aa:b3:78:04:
         e4:08:eb:43:09:f1:73:0d:49:ba:af:3e:ad:60:72:b6:ef:db:
         c7:56:a1:30:65:f5:60:c0:5c:f7:aa:14:43:c5:7d:0f:0f:5f:
         eb:ca:86:90:5f:ac:e7:e4:73:93:d1:d2:6b:f9:82:2c:6b:8d:
         35:d1:5f:f1:73:61:00:8c:d4:5f:81:e3:c7:0e:72:9f:c3:ce:
         3f:b5:4b:2f:87:79:7d:c0:15:d0:9d:5e:8a:95:87:c1:02:a3:
         8f:0e:28:8a:95:d7:5a:2f:c6:93:8a:47:12:d1:11:12:22:52:
         22:d9:98:87:fe:99:58:04:59:d9:38:a8:e0:a2:19:cc:8f:11:
         44:95:2a:18:50:1b:20:a7:4c:85:ea:8d:44:d2:b5:4a:ab:c1:
         d8:73:dd:2e:54:13:cb:dc:0b:55:ec:fe:5e:1c:bb:c2:85:07:
         95:c2:f1:ef:d3:f7:4b:28:2a:ff:06:ee:6a:cf:f1:c8:67:8d:
         db:89:42:3c:b5:95:56:4a:d7:09:df:0d:bb:61:55:50:57:17:
         85:07:a2:52:31:2c:aa:6b:07:0f:c5:dc:a6:dc:40:06:33:d1:
         37:ce:ed:e8:48:ab:5d:b0:e8:d2:ac:54:78:f4:5c:c9:63:f0:
         06:a5:c5:4b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH6RQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU1
YzBmYjBkNTUzMWY5MWRkMDZjMTllZDhmYTAwZjI2ODcxNzZkNTUwHhcNMjMwNTA3
MTUwMjM0WhcNMjUwNTA4MTUwMjM0WjAzMTEwLwYDVQQDEyhmZmEzZWM4YWQ1M2Jk
NmMwNjllNDJiNTNhMzdhODQ1ODVhNjI5NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk8u8uv+yz+dusmaitfBXSLpPcigt1J//BLRXkRUD7GZGcYFv
HHNZe+d0lfeTo29iV/v0b/ix0VMj7unnPGfG58x+AdWjnKInG2DK39nGAKQsELkL
RpGPGGQwZWWQahA3tFpEWfQfR1DRKCQDGP3T+Xhi494RxM2LaPd5EeED3UONQC0H
v00Rbq2FztaY1xnzCDg8qspjouYglUh26uc6xaVKRr0SIJyfNELrowZ0dLWTCWQ5
WdDReDy/elxZd87F3NAmFYqb7BZGeZHn+pZVRVh3UwBOrRGctuEBpqXyCyfYrML/
shLr/GR+d+xwUsKrTNATDxhUPgnBwM7cg7NYxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFClfW4okkl11wF77so5QbdWuzWKXMB8GA1UdIwQYMBaAFLqAm/CxEh2RPSAL
T/iLfHGExljjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTVjMGZi
MGQ1NTMxZjkxZGQwNmMxOWVkOGZhMDBmMjY4NzE3NmQ1NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmJiYjRiYmEtOWUwOS00MzVjLWI4YjYtZTcyY2Jh
MGY1MDdkL2ZmYTNlYzhhZDUzYmQ2YzA2OWU0MmI1M2EzN2E4NDU4NWE2Mjk1Nzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYmJiNGJiYS05ZTA5LTQzNWMtYjhiNi1lNzJj
YmEwZjUwN2QvNTVjMGZiMGQ1NTMxZjkxZGQwNmMxOWVkOGZhMDBmMjY4NzE3NmQ1
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3lVzANBgkqhkiG9w0BAQsFAAOCAQEAeuPLb2rRdOzLOiOs
uziqs3gE5AjrQwnxcw1Juq8+rWBytu/bx1ahMGX1YMBc96oUQ8V9Dw9f68qGkF+s
5+Rzk9HSa/mCLGuNNdFf8XNhAIzUX4Hjxw5yn8POP7VLL4d5fcAV0J1eipWHwQKj
jw4oipXXWi/Gk4pHEtEREiJSItmYh/6ZWARZ2Tio4KIZzI8RRJUqGFAbIKdMheqN
RNK1SqvB2HPdLlQTy9wLVez+Xhy7woUHlcLx79P3Sygq/wbuas/xyGeN24lCPLWV
VkrXCd8Nu2FVUFcXhQeiUjEsqmsHD8XcptxABjPRN87t6EirXbDo0qxUePRcyWPw
BqXFSw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org