Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/1df128424e12b4323d3066e8cce44ba23c730a39.roa
File:                     1df128424e12b4323d3066e8cce44ba23c730a39.roa (raw, json)
Hash identifier:          XrLSY2O9TeOhGJoegbf6s17SEliVarcsZmJZLT71nDU=
Subject key identifier:   8F:7C:31:8D:94:72:F6:B3:DA:BC:F7:F3:AC:7F:9B:EB:D5:37:26:DB
Certificate issuer:       /CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
Certificate serial:       022808
Authority key identifier: 43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/1df128424e12b4323d3066e8cce44ba23c730a39.roa
Signing time:             Fri 28 Jul 2023 19:53:39 +0000
ROA not before:           Thu 27 Jul 2023 19:53:39 +0000
ROA not after:            Mon 28 Jul 2025 19:53:39 +0000
asID:                     266876
IP address blocks:        45.160.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141320 (0x22808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
        Validity
            Not Before: Jul 27 19:53:39 2023 GMT
            Not After : Jul 28 19:53:39 2025 GMT
        Subject: CN=1df128424e12b4323d3066e8cce44ba23c730a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:11:48:9a:11:ac:8c:f9:b1:54:3f:6a:3a:
                    f8:bf:61:e9:30:2b:58:a5:25:4a:2a:0f:08:32:a9:
                    17:08:39:d2:ce:07:0a:99:17:97:3a:ca:61:23:f1:
                    7d:3b:7f:58:bd:aa:bd:47:32:6a:57:83:57:d6:5a:
                    46:4b:ab:38:c5:9e:7f:b5:5e:85:bd:ec:04:ed:72:
                    bf:d8:dd:30:ce:19:90:71:2c:2d:df:ae:8c:bb:02:
                    18:16:9f:64:cc:34:18:dc:99:69:82:9a:5d:9a:d1:
                    96:66:18:31:47:dc:19:6b:8e:3f:93:b6:0b:78:8e:
                    28:64:e8:a3:85:95:97:b4:68:68:3a:d6:72:c1:fe:
                    4e:a9:de:e9:7e:7e:b0:6c:89:21:b1:0d:40:5c:07:
                    18:74:86:91:f0:4f:fd:8a:8e:4f:d3:f7:43:26:c9:
                    1d:ec:de:ab:1a:6f:5b:38:9e:b1:3c:3b:87:01:98:
                    3d:79:bb:36:79:1e:57:da:e3:64:45:ca:b1:f7:2a:
                    40:42:61:c7:30:fb:e3:22:28:3b:de:a2:53:27:8e:
                    2f:10:52:b2:3c:aa:c5:b6:2e:83:78:7a:4b:d9:68:
                    46:6c:3e:53:16:97:55:1a:34:92:08:cc:b3:d3:a8:
                    9f:7f:40:08:bd:83:f6:55:83:d6:34:47:01:1b:4d:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:31:8D:94:72:F6:B3:DA:BC:F7:F3:AC:7F:9B:EB:D5:37:26:DB
            X509v3 Authority Key Identifier:
                keyid:43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/1df128424e12b4323d3066e8cce44ba23c730a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:62:be:99:6a:89:9e:37:95:63:6d:f9:45:d7:c4:aa:dd:58:
         8b:e2:1e:09:27:54:e2:c9:23:92:09:a2:ae:86:e5:85:7f:15:
         af:36:f1:79:c8:ae:4b:96:43:9d:b6:e1:09:7e:b0:6f:f0:6d:
         ed:71:d7:a0:7d:7d:59:64:2d:99:4c:22:34:07:b8:66:3f:48:
         ec:6d:3f:21:82:de:67:d8:7c:0f:6f:93:4a:8d:1e:4f:c5:a7:
         d8:2a:51:27:ed:ae:d4:22:c3:38:56:76:1b:95:d4:6b:b1:07:
         f5:a4:b1:71:b1:f5:92:44:5f:d9:ce:ee:a0:57:b6:e7:74:0a:
         40:e3:08:41:ad:53:d9:08:a8:d0:c4:32:80:62:e3:38:a7:86:
         f3:a2:ed:c1:7a:09:e6:f2:f7:7f:bf:9a:b2:18:c5:d8:6c:e5:
         88:4f:d0:8a:b3:ac:df:48:4f:c3:47:17:2c:0b:b0:8d:e9:62:
         05:52:6d:1a:09:51:b3:7e:10:b3:3a:4e:e4:73:f0:dd:e0:1d:
         2a:11:be:45:22:2f:33:77:97:fd:1a:48:eb:b8:a8:32:9d:b7:
         9e:f8:4d:92:d4:82:ba:f1:8f:9c:5c:09:9b:06:64:c4:4c:f1:
         f9:24:f5:c1:d8:81:63:ab:bf:7a:13:95:00:85:67:ec:1c:f6:
         b1:b8:f8:f8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAigIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
OWIxYzMzMjY5ZmQ3N2VlMDkwOGRkMzRkNGE2NTljYWZiYjI0MzAwHhcNMjMwNzI3
MTk1MzM5WhcNMjUwNzI4MTk1MzM5WjAzMTEwLwYDVQQDEygxZGYxMjg0MjRlMTJi
NDMyM2QzMDY2ZThjY2U0NGJhMjNjNzMwYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAptQRSJoRrIz5sVQ/ajr4v2HpMCtYpSVKKg8IMqkXCDnSzgcK
mReXOsphI/F9O39Yvaq9RzJqV4NX1lpGS6s4xZ5/tV6FvewE7XK/2N0wzhmQcSwt
366MuwIYFp9kzDQY3JlpgppdmtGWZhgxR9wZa44/k7YLeI4oZOijhZWXtGhoOtZy
wf5Oqd7pfn6wbIkhsQ1AXAcYdIaR8E/9io5P0/dDJskd7N6rGm9bOJ6xPDuHAZg9
ebs2eR5X2uNkRcqx9ypAQmHHMPvjIig73qJTJ44vEFKyPKrFti6DeHpL2WhGbD5T
FpdVGjSSCMyz06iff0AIvYP2VYPWNEcBG00CKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI98MY2Ucvaz2rz386x/m+vVNybbMB8GA1UdIwQYMBaAFEPO1rZ3e1lt2ac0
BgGr4eMnVwFSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ5YjFj
MzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzJjZmM3MDQtYTdiMC00ZjIyLTg4NDEtNjY2YmQz
YzM5NDkyLzFkZjEyODQyNGUxMmI0MzIzZDMwNjZlOGNjZTQ0YmEyM2M3MzBhMzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMmNmYzcwNC1hN2IwLTRmMjItODg0MS02NjZi
ZDNjMzk0OTIvZGQ5YjFjMzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2gIjANBgkqhkiG9w0BAQsFAAOCAQEAZWK+mWqJnjeVY235
RdfEqt1Yi+IeCSdU4skjkgmiroblhX8VrzbxeciuS5ZDnbbhCX6wb/Bt7XHXoH19
WWQtmUwiNAe4Zj9I7G0/IYLeZ9h8D2+TSo0eT8Wn2CpRJ+2u1CLDOFZ2G5XUa7EH
9aSxcbH1kkRf2c7uoFe253QKQOMIQa1T2Qio0MQygGLjOKeG86LtwXoJ5vL3f7+a
shjF2GzliE/QirOs30hPw0cXLAuwjeliBVJtGglRs34QszpO5HPw3eAdKhG+RSIv
M3eX/RpI67ioMp23nvhNktSCuvGPnFwJmwZkxEzx+ST1wdiBY6u/ehOVAIVn7Bz2
sbj4+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org