Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/c56d9f9fbc66a9802301e17e4b4a9170b6694c26.roa
File:                     c56d9f9fbc66a9802301e17e4b4a9170b6694c26.roa (raw, json)
Hash identifier:          /zdAAGcnf+m4qKn1LiQwAmydUS5eDKmN6+iyuj7fTjI=
Subject key identifier:   F9:03:A4:18:E8:F3:03:F9:A7:0F:0A:0A:6A:0D:E2:9D:1F:D2:54:89
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       20457C
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/c56d9f9fbc66a9802301e17e4b4a9170b6694c26.roa
Signing time:             Tue 11 Jul 2023 02:13:57 +0000
ROA not before:           Mon 10 Jul 2023 02:13:55 +0000
ROA not after:            Fri 11 Jul 2025 02:13:55 +0000
asID:                     23470
IP address blocks:        45.166.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114940 (0x20457c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Jul 10 02:13:55 2023 GMT
            Not After : Jul 11 02:13:55 2025 GMT
        Subject: CN=c56d9f9fbc66a9802301e17e4b4a9170b6694c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:2f:04:1b:11:92:c0:cc:92:aa:96:28:1b:
                    60:81:ea:df:80:26:c1:4a:eb:b8:5c:66:ff:ff:e9:
                    80:03:f5:47:11:be:ad:71:3a:41:9e:d8:fd:3b:4c:
                    9f:03:14:3e:cc:ed:9f:5a:f7:ac:bc:6a:f6:55:90:
                    d8:53:5e:4a:a5:c3:24:a9:e1:22:91:5d:1d:8e:94:
                    d1:cd:b1:23:6c:d6:bc:48:02:1a:9b:00:fb:64:94:
                    11:98:b4:4b:91:4b:70:01:09:0a:74:3a:89:50:a4:
                    6f:b8:9e:b4:3c:6f:ec:e3:e5:f4:fb:ac:96:51:43:
                    64:5d:6c:e0:5c:f2:ca:be:23:ed:c6:83:96:d9:ac:
                    d7:dd:e7:6d:60:92:1b:94:8b:b3:93:3b:d5:cb:a2:
                    af:d2:24:c5:11:20:cb:bb:b9:6a:6e:b8:68:40:72:
                    7e:dc:a0:26:5b:7e:09:1b:6a:96:f0:ef:46:ee:df:
                    3a:c9:4b:09:07:a2:55:6d:22:d9:cc:2c:31:f7:d5:
                    52:97:4b:b3:7e:b9:07:24:13:e5:1b:b4:6c:4d:31:
                    e5:69:87:a2:a0:d6:40:37:e0:a4:2e:4d:d4:e9:64:
                    22:0f:cd:d2:20:a0:c3:24:5e:82:e1:9d:fd:7c:f3:
                    c2:bd:60:76:d8:f1:cb:1a:64:22:1a:fa:ed:a7:54:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:A4:18:E8:F3:03:F9:A7:0F:0A:0A:6A:0D:E2:9D:1F:D2:54:89
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/c56d9f9fbc66a9802301e17e4b4a9170b6694c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:92:91:e7:7a:cc:82:e0:59:a6:20:94:11:96:c2:e1:5f:ef:
         5f:06:72:3f:b8:15:51:fb:bb:f5:e6:83:fb:8f:55:2f:9f:76:
         0f:49:94:b8:9c:7b:09:ac:41:23:1a:86:19:64:b5:b7:15:ef:
         02:c5:46:33:ff:72:bc:a7:bb:a6:ee:70:ec:1b:a9:fd:1f:5c:
         f9:c2:12:27:24:f5:de:ce:22:5c:96:bd:c2:5b:f7:eb:3e:c7:
         9e:cd:14:ec:31:43:78:c4:f1:1e:6f:eb:80:0f:fe:1a:55:ee:
         99:73:4f:7e:cb:6b:17:81:bb:cf:61:ab:a9:f1:0d:15:f3:3a:
         ad:56:e3:cd:6d:af:e2:b2:0d:c2:d1:f1:0a:7b:82:cb:71:0c:
         d2:14:79:bf:14:38:3d:98:87:67:e2:d1:09:3a:7b:2f:da:e6:
         e2:c9:81:90:94:74:c8:b7:37:58:40:5a:8a:fa:1a:80:cc:95:
         2a:29:e4:fe:06:29:09:07:17:04:1d:67:25:20:0c:5c:97:d7:
         90:75:69:b2:76:9e:94:fb:d8:df:01:97:8d:80:1c:5c:df:99:
         ce:fe:f8:40:04:07:38:b3:b3:48:c5:c4:fa:5c:8f:3c:bc:82:
         ea:41:be:8d:0b:56:cb:ea:0e:a7:94:db:46:7a:39:eb:34:96:
         5f:71:bb:66
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIEV8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
ZjI1OGVmNjJkZjJiMTk2ZGVkNzI4NjQ4MGNhNWI5NjQ1MTFkYmUwHhcNMjMwNzEw
MDIxMzU1WhcNMjUwNzExMDIxMzU1WjAzMTEwLwYDVQQDEyhjNTZkOWY5ZmJjNjZh
OTgwMjMwMWUxN2U0YjRhOTE3MGI2Njk0YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArUQvBBsRksDMkqqWKBtggerfgCbBSuu4XGb//+mAA/VHEb6t
cTpBntj9O0yfAxQ+zO2fWvesvGr2VZDYU15KpcMkqeEikV0djpTRzbEjbNa8SAIa
mwD7ZJQRmLRLkUtwAQkKdDqJUKRvuJ60PG/s4+X0+6yWUUNkXWzgXPLKviPtxoOW
2azX3edtYJIblIuzkzvVy6Kv0iTFESDLu7lqbrhoQHJ+3KAmW34JG2qW8O9G7t86
yUsJB6JVbSLZzCwx99VSl0uzfrkHJBPlG7RsTTHlaYeioNZAN+CkLk3U6WQiD83S
IKDDJF6C4Z39fPPCvWB22PHLGmQiGvrtp1SKSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPkDpBjo8wP5pw8KCmoN4p0f0lSJMB8GA1UdIwQYMBaAFLF8rRaU7AU8jxrA
/ngwXbimca/iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjVmMjU4
ZWY2MmRmMmIxOTZkZWQ3Mjg2NDgwY2E1Yjk2NDUxMWRiZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmRjMWNjZDgtOTJiMi00OWVlLTgzZjMtOTczZDQx
NWYzYjZhL2M1NmQ5ZjlmYmM2NmE5ODAyMzAxZTE3ZTRiNGE5MTcwYjY2OTRjMjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZGMxY2NkOC05MmIyLTQ5ZWUtODNmMy05NzNk
NDE1ZjNiNmEvYjVmMjU4ZWY2MmRmMmIxOTZkZWQ3Mjg2NDgwY2E1Yjk2NDUxMWRi
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2mbzANBgkqhkiG9w0BAQsFAAOCAQEAiJKR53rMguBZpiCU
EZbC4V/vXwZyP7gVUfu79eaD+49VL592D0mUuJx7CaxBIxqGGWS1txXvAsVGM/9y
vKe7pu5w7Bup/R9c+cISJyT13s4iXJa9wlv36z7Hns0U7DFDeMTxHm/rgA/+GlXu
mXNPfstrF4G7z2GrqfENFfM6rVbjzW2v4rINwtHxCnuCy3EM0hR5vxQ4PZiHZ+LR
CTp7L9rm4smBkJR0yLc3WEBaivoagMyVKink/gYpCQcXBB1nJSAMXJfXkHVpsnae
lPvY3wGXjYAcXN+Zzv74QAQHOLOzSMXE+lyPPLyC6kG+jQtWy+oOp5TbRno56zSW
X3G7Zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org