Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/419419dc8c95700475109ceedbc3e36408fc04e6.roa
File:                     419419dc8c95700475109ceedbc3e36408fc04e6.roa (raw, json)
Hash identifier:          qvWxabxWkO4bdib5I+2K4CNKya+NyLrGbwsfmGmeMyg=
Subject key identifier:   BE:05:29:69:74:73:20:16:A0:EB:DD:1C:86:79:CB:D5:35:BC:32:C2
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       0BED34
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/419419dc8c95700475109ceedbc3e36408fc04e6.roa
Signing time:             Wed 24 Mar 2021 14:43:01 +0000
ROA not before:           Wed 24 Mar 2021 14:43:01 +0000
ROA not after:            Tue 24 Mar 2026 14:43:01 +0000
asID:                     23470
IP address blocks:        45.166.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781620 (0xbed34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Mar 24 14:43:01 2021 GMT
            Not After : Mar 24 14:43:01 2026 GMT
        Subject: CN=419419dc8c95700475109ceedbc3e36408fc04e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:66:ae:ce:99:17:3c:de:63:69:c9:75:94:
                    17:68:72:fb:eb:b2:77:79:56:7f:fc:49:46:3c:df:
                    c9:0d:4d:b4:66:7c:33:2d:46:84:ae:ee:21:04:62:
                    65:d6:ad:d7:54:22:53:f8:03:27:85:39:34:ac:ee:
                    38:ed:e0:fa:5e:b9:ae:a9:d2:bc:43:6b:f9:7d:20:
                    81:93:cf:20:ba:56:93:57:6d:07:fd:2e:45:eb:cb:
                    48:80:65:70:42:29:ae:89:30:3b:ab:d5:a5:b4:db:
                    35:c1:e6:13:81:90:a3:a2:9a:32:ab:8c:a9:27:10:
                    75:ba:ae:dc:1d:59:83:71:d2:40:a7:ad:b1:65:90:
                    f2:f3:d3:23:15:d8:cd:59:cf:f3:a3:a1:23:65:e9:
                    fc:08:38:85:87:73:b9:20:e0:f2:e5:fd:d5:ab:1b:
                    d7:b3:ee:c6:7b:63:f7:cd:41:87:89:40:c2:32:8e:
                    3a:63:42:e4:66:8c:96:ec:3e:44:f0:c8:b8:d2:f7:
                    63:0f:8b:41:8f:32:65:c6:f0:b8:b8:2d:72:8f:5b:
                    25:02:59:5d:70:d4:ec:97:30:d6:b0:0d:43:d3:ad:
                    2c:be:0f:c9:0c:97:88:cb:7b:13:8b:77:8a:50:db:
                    50:28:0e:36:c0:69:11:00:fc:f0:d9:a1:2b:38:39:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:29:69:74:73:20:16:A0:EB:DD:1C:86:79:CB:D5:35:BC:32:C2
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/419419dc8c95700475109ceedbc3e36408fc04e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:a1:e6:97:27:3c:5b:37:e5:ab:9e:49:07:a1:b1:e4:8c:
         62:33:66:87:a1:cd:00:67:9a:c9:76:31:9e:b8:c5:fc:76:29:
         01:22:02:a5:7a:e1:9f:04:5d:ae:63:92:fd:d8:c7:9f:f9:09:
         18:5e:0f:ff:22:9c:84:71:b9:60:f5:2d:a1:cc:02:e0:50:ae:
         d7:ce:34:5f:7a:4d:da:0e:53:99:f2:b3:41:3f:5f:32:02:0e:
         79:e8:0f:8b:4c:a8:8c:ca:d4:34:09:3e:47:14:8e:03:94:aa:
         19:83:74:11:05:b5:de:c3:d0:55:56:0a:5d:61:f6:c6:c6:91:
         0e:91:f6:30:c7:e4:76:57:66:d9:eb:61:d6:fb:43:0a:b2:e7:
         c4:06:f0:22:c1:86:3f:d9:be:c6:a9:7c:7f:46:c9:4a:75:ec:
         d1:92:a8:09:b6:00:12:df:c7:4c:61:16:92:c7:c7:36:30:2b:
         a2:e7:0d:5c:cf:a1:e3:eb:e1:20:d4:70:e0:ce:ed:41:a1:0b:
         0c:2c:d8:79:c5:68:7e:a8:e3:e6:30:6e:15:6b:aa:1c:b4:40:
         64:f8:08:23:4c:a2:fd:d1:66:70:8a:1b:2f:20:fe:29:0b:32:
         40:32:1c:da:0d:f6:97:98:50:2f:28:5a:37:7c:7d:7d:30:76:
         18:7e:c9:bb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC+00MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
ZjI1OGVmNjJkZjJiMTk2ZGVkNzI4NjQ4MGNhNWI5NjQ1MTFkYmUwHhcNMjEwMzI0
MTQ0MzAxWhcNMjYwMzI0MTQ0MzAxWjAzMTEwLwYDVQQDEyg0MTk0MTlkYzhjOTU3
MDA0NzUxMDljZWVkYmMzZTM2NDA4ZmMwNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkVlmrs6ZFzzeY2nJdZQXaHL767J3eVZ//ElGPN/JDU20Znwz
LUaEru4hBGJl1q3XVCJT+AMnhTk0rO447eD6XrmuqdK8Q2v5fSCBk88gulaTV20H
/S5F68tIgGVwQimuiTA7q9WltNs1weYTgZCjopoyq4ypJxB1uq7cHVmDcdJAp62x
ZZDy89MjFdjNWc/zo6EjZen8CDiFh3O5IODy5f3VqxvXs+7Ge2P3zUGHiUDCMo46
Y0LkZoyW7D5E8Mi40vdjD4tBjzJlxvC4uC1yj1slAlldcNTslzDWsA1D060svg/J
DJeIy3sTi3eKUNtQKA42wGkRAPzw2aErODm/KwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL4FKWl0cyAWoOvdHIZ5y9U1vDLCMB8GA1UdIwQYMBaAFLF8rRaU7AU8jxrA
/ngwXbimca/iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjVmMjU4
ZWY2MmRmMmIxOTZkZWQ3Mjg2NDgwY2E1Yjk2NDUxMWRiZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmRjMWNjZDgtOTJiMi00OWVlLTgzZjMtOTczZDQx
NWYzYjZhLzQxOTQxOWRjOGM5NTcwMDQ3NTEwOWNlZWRiYzNlMzY0MDhmYzA0ZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZGMxY2NkOC05MmIyLTQ5ZWUtODNmMy05NzNk
NDE1ZjNiNmEvYjVmMjU4ZWY2MmRmMmIxOTZkZWQ3Mjg2NDgwY2E1Yjk2NDUxMWRi
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2mbzANBgkqhkiG9w0BAQsFAAOCAQEAWu2h5pcnPFs35aue
SQehseSMYjNmh6HNAGeayXYxnrjF/HYpASICpXrhnwRdrmOS/djHn/kJGF4P/yKc
hHG5YPUtocwC4FCu1840X3pN2g5TmfKzQT9fMgIOeegPi0yojMrUNAk+RxSOA5Sq
GYN0EQW13sPQVVYKXWH2xsaRDpH2MMfkdldm2eth1vtDCrLnxAbwIsGGP9m+xql8
f0bJSnXs0ZKoCbYAEt/HTGEWksfHNjAroucNXM+h4+vhINRw4M7tQaELDCzYecVo
fqjj5jBuFWuqHLRAZPgII0yi/dFmcIobLyD+KQsyQDIc2g32l5hQLyhaN3x9fTB2
GH7Juw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org