Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/f70a7281f480fcba39e3ab74ec40dc355d8bf15a.roa
File:                     f70a7281f480fcba39e3ab74ec40dc355d8bf15a.roa (raw, json)
Hash identifier:          ZqH1zS3LsYPtFI1wpXqNVbCjwo2Qs7CfwYMz5keED3c=
Subject key identifier:   D1:7A:A8:98:76:5E:E8:03:FF:BD:CC:47:52:CC:BD:7C:63:83:E5:84
Certificate issuer:       /CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
Certificate serial:       0222F8
Authority key identifier: 43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/f70a7281f480fcba39e3ab74ec40dc355d8bf15a.roa
Signing time:             Fri 28 Jul 2023 19:53:25 +0000
ROA not before:           Thu 27 Jul 2023 19:53:25 +0000
ROA not after:            Mon 28 Jul 2025 19:53:25 +0000
asID:                     266876
IP address blocks:        45.160.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140024 (0x222f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
        Validity
            Not Before: Jul 27 19:53:25 2023 GMT
            Not After : Jul 28 19:53:25 2025 GMT
        Subject: CN=f70a7281f480fcba39e3ab74ec40dc355d8bf15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:31:50:c7:10:f5:f9:82:24:93:4d:79:6b:
                    15:fe:7e:99:d8:15:5e:5b:54:61:bc:8a:9f:2a:47:
                    75:7b:3a:b6:c3:ef:3c:8b:45:6f:dc:90:76:26:64:
                    ca:eb:62:4c:66:6c:11:3d:bb:69:96:7b:57:61:ba:
                    1d:0a:91:6e:b0:42:7b:a2:d1:c6:46:3b:0c:8a:c8:
                    80:2a:db:77:d9:5a:15:1b:07:59:7f:2c:ea:05:39:
                    90:e2:48:ba:98:70:e2:fa:2e:9c:8b:87:c4:e8:c0:
                    31:be:53:1a:8f:9c:f8:23:ab:6f:38:46:11:1c:5d:
                    7d:47:d4:b6:b9:75:47:2d:1d:1b:38:f1:5d:08:ac:
                    26:b4:e2:7c:06:66:a3:d5:d1:f0:80:02:8f:eb:53:
                    65:2f:ea:fa:c6:af:d4:be:7d:0f:25:5a:b3:2b:57:
                    35:d1:4e:df:a2:25:bc:7e:eb:25:08:24:11:14:4c:
                    8b:45:16:0a:8e:64:14:7e:6a:b1:3f:b3:04:04:2e:
                    2e:ba:37:5f:ab:7b:88:1f:21:b0:48:c2:84:ee:56:
                    48:72:a3:17:f6:58:e8:25:b9:98:06:5a:4d:30:5f:
                    f4:70:4f:0b:cd:eb:a1:66:17:9b:b0:28:c0:9d:b2:
                    74:b1:a7:80:23:73:10:d3:94:6d:c2:fb:25:33:73:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:A8:98:76:5E:E8:03:FF:BD:CC:47:52:CC:BD:7C:63:83:E5:84
            X509v3 Authority Key Identifier:
                keyid:43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/f70a7281f480fcba39e3ab74ec40dc355d8bf15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:44:7a:6a:a1:cc:72:2a:20:38:df:ef:bf:d0:9b:1f:f6:7b:
         29:03:f2:de:d6:72:f7:98:0c:be:d8:d6:01:c4:5e:df:17:18:
         bc:9f:af:9d:f5:00:f3:9a:d3:9c:6c:bc:f3:3c:5f:53:20:97:
         57:60:1d:15:d4:88:cc:7a:d0:49:cc:a4:7a:ac:bc:b7:60:22:
         12:83:ad:83:cf:9c:0a:91:92:ce:45:9a:71:df:c9:79:70:44:
         37:66:ea:9b:4e:3a:78:35:3a:b6:fb:0c:00:06:44:e7:5c:89:
         06:3c:fe:63:af:7b:c9:98:cd:94:a6:6d:90:a5:ee:73:d5:1a:
         fc:e9:69:c4:7f:a1:55:ba:97:cd:c2:1a:c3:5e:73:8e:1b:03:
         59:59:2d:d1:8a:60:53:d7:29:49:0b:55:d2:50:d8:f2:4f:84:
         05:f3:1b:dc:6f:eb:f7:ff:cd:61:9b:97:b0:5b:69:b2:66:0a:
         bf:1e:f9:98:6a:99:ba:c5:33:bf:95:9b:fd:14:69:ae:5b:33:
         97:1e:96:89:0b:14:bd:02:e3:12:7c:c4:32:a8:ac:f7:b1:56:
         1d:40:9e:23:c0:8f:80:16:aa:88:be:03:88:4e:d8:c1:04:be:
         98:18:10:25:1e:f8:1b:b5:42:db:cc:4e:f8:d7:c5:c7:62:4d:
         41:d3:56:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAiL4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
OWIxYzMzMjY5ZmQ3N2VlMDkwOGRkMzRkNGE2NTljYWZiYjI0MzAwHhcNMjMwNzI3
MTk1MzI1WhcNMjUwNzI4MTk1MzI1WjAzMTEwLwYDVQQDEyhmNzBhNzI4MWY0ODBm
Y2JhMzllM2FiNzRlYzQwZGMzNTVkOGJmMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAka8xUMcQ9fmCJJNNeWsV/n6Z2BVeW1RhvIqfKkd1ezq2w+88
i0Vv3JB2JmTK62JMZmwRPbtplntXYbodCpFusEJ7otHGRjsMisiAKtt32VoVGwdZ
fyzqBTmQ4ki6mHDi+i6ci4fE6MAxvlMaj5z4I6tvOEYRHF19R9S2uXVHLR0bOPFd
CKwmtOJ8Bmaj1dHwgAKP61NlL+r6xq/Uvn0PJVqzK1c10U7foiW8fuslCCQRFEyL
RRYKjmQUfmqxP7MEBC4uujdfq3uIHyGwSMKE7lZIcqMX9ljoJbmYBlpNMF/0cE8L
zeuhZhebsCjAnbJ0saeAI3MQ05RtwvslM3MerQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNF6qJh2XugD/73MR1LMvXxjg+WEMB8GA1UdIwQYMBaAFEPO1rZ3e1lt2ac0
BgGr4eMnVwFSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ5YjFj
MzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzJjZmM3MDQtYTdiMC00ZjIyLTg4NDEtNjY2YmQz
YzM5NDkyL2Y3MGE3MjgxZjQ4MGZjYmEzOWUzYWI3NGVjNDBkYzM1NWQ4YmYxNWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMmNmYzcwNC1hN2IwLTRmMjItODg0MS02NjZi
ZDNjMzk0OTIvZGQ5YjFjMzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2gITANBgkqhkiG9w0BAQsFAAOCAQEACUR6aqHMciogON/v
v9CbH/Z7KQPy3tZy95gMvtjWAcRe3xcYvJ+vnfUA85rTnGy88zxfUyCXV2AdFdSI
zHrQScykeqy8t2AiEoOtg8+cCpGSzkWacd/JeXBEN2bqm046eDU6tvsMAAZE51yJ
Bjz+Y697yZjNlKZtkKXuc9Ua/OlpxH+hVbqXzcIaw15zjhsDWVkt0YpgU9cpSQtV
0lDY8k+EBfMb3G/r9//NYZuXsFtpsmYKvx75mGqZusUzv5Wb/RRprlszlx6WiQsU
vQLjEnzEMqis97FWHUCeI8CPgBaqiL4DiE7YwQS+mBgQJR74G7VC28xO+NfFx2JN
QdNWOA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org