Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/f25f10a74ed166b7dfde777199b8ff1fe288e092.roa
File:                     f25f10a74ed166b7dfde777199b8ff1fe288e092.roa (raw, json)
Hash identifier:          nF/rhNakLlJWubbl2kaqlh5ta8XOp16B7fckEfxmkZU=
Subject key identifier:   80:95:F8:FE:57:51:7B:39:C1:FB:5A:E4:2D:5F:4D:72:39:F4:92:89
Certificate issuer:       /CN=4f47bb7ead910781563dc199e18418c34ecf5877
Certificate serial:       E206
Authority key identifier: BE:4B:B9:99:56:DC:C3:A2:22:FC:19:2E:E0:5B:B0:34:71:44:3A:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f47bb7ead910781563dc199e18418c34ecf5877.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/f25f10a74ed166b7dfde777199b8ff1fe288e092.roa
Signing time:             Thu 11 May 2023 19:38:05 +0000
ROA not before:           Wed 10 May 2023 19:38:05 +0000
ROA not after:            Sun 11 May 2025 19:38:05 +0000
asID:                     265615
IP address blocks:        45.190.240.0/24 maxlen: 24
                          45.190.241.0/24 maxlen: 24
                          45.190.242.0/24 maxlen: 24
                          45.190.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57862 (0xe206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f47bb7ead910781563dc199e18418c34ecf5877
        Validity
            Not Before: May 10 19:38:05 2023 GMT
            Not After : May 11 19:38:05 2025 GMT
        Subject: CN=f25f10a74ed166b7dfde777199b8ff1fe288e092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:9f:5c:45:bb:fb:e9:92:31:03:ef:66:6c:
                    33:e2:60:44:13:8a:08:33:7d:03:dd:1a:90:76:dd:
                    24:ce:b2:1f:1b:7c:94:de:19:e7:e9:3d:38:01:fb:
                    e0:0f:82:27:e4:7e:ad:24:59:59:05:23:c5:6b:c1:
                    63:ba:68:d4:bf:b3:0e:7a:f9:22:7f:88:e8:7f:bc:
                    1f:b9:88:b0:45:88:75:21:1f:1a:f9:0e:f0:7f:54:
                    21:6c:d7:59:62:b7:ef:8b:87:24:27:b6:6f:b1:ca:
                    f0:b5:f0:b0:aa:c1:aa:e2:98:18:5a:05:2b:eb:fd:
                    ef:74:94:f8:83:5d:c5:a9:9f:ee:b8:b0:cf:75:44:
                    cf:c9:a6:d9:14:fa:ec:a8:fc:19:36:8c:97:19:b2:
                    5e:95:b5:9b:ce:20:d5:ea:1e:49:ed:e7:6e:5e:62:
                    67:dd:2f:63:fb:27:43:5a:03:8b:35:26:45:49:53:
                    10:35:d9:c6:9d:42:91:9a:b5:c3:a5:c2:e4:f0:c0:
                    51:53:ca:34:9a:dc:7e:fe:28:cf:e6:28:38:d5:f4:
                    f2:f9:37:6d:51:39:e4:26:16:89:32:1f:99:67:67:
                    90:65:10:b7:83:e2:e1:6e:f2:a3:36:7a:e5:1e:4f:
                    02:e3:06:74:03:e9:b5:b2:39:e7:19:61:67:dd:21:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:95:F8:FE:57:51:7B:39:C1:FB:5A:E4:2D:5F:4D:72:39:F4:92:89
            X509v3 Authority Key Identifier:
                keyid:BE:4B:B9:99:56:DC:C3:A2:22:FC:19:2E:E0:5B:B0:34:71:44:3A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f47bb7ead910781563dc199e18418c34ecf5877.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/f25f10a74ed166b7dfde777199b8ff1fe288e092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/4f47bb7ead910781563dc199e18418c34ecf5877.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:21:c0:62:cc:70:a8:d9:c1:aa:d1:03:47:f7:16:6b:1a:95:
         81:fd:5b:9c:f1:ca:d9:fd:06:06:46:f6:5f:d1:31:b9:5d:94:
         17:1f:18:6c:ef:11:62:b0:f2:2b:37:6c:d9:4b:07:09:f2:3e:
         63:91:e6:26:cf:bf:70:ae:59:4a:a7:39:91:e1:4a:d2:2d:99:
         b3:03:ff:bb:d8:83:c0:3c:ba:96:19:db:4f:d6:48:39:9a:16:
         14:ee:43:e9:cb:0d:e2:ab:29:0d:a4:ad:1f:fd:2a:d4:48:d5:
         36:47:77:0d:80:8b:8d:ca:10:a3:82:bf:5e:b1:c5:d8:6d:bb:
         e0:47:be:a3:ec:aa:37:ee:42:ed:8b:d7:af:d9:d4:dc:a4:6f:
         8e:58:69:b9:dc:e7:0b:a3:06:d1:c9:6e:5e:98:e3:9b:28:1e:
         be:41:d4:c7:e6:5c:ea:7b:eb:15:eb:40:bd:61:77:cd:de:8d:
         74:1e:72:dc:01:3f:2d:0d:10:b5:be:ea:e6:79:1b:1c:90:04:
         2a:64:4e:83:67:4a:b5:85:9d:e5:fd:cd:73:a2:11:78:47:84:
         73:2a:73:58:44:12:4b:88:4e:aa:08:ce:20:7d:96:a1:8b:66:
         a3:b0:68:d6:f9:f2:c1:84:39:1f:99:92:d9:96:f9:67:88:2d:
         8d:de:95:dd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOIGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm
NDdiYjdlYWQ5MTA3ODE1NjNkYzE5OWUxODQxOGMzNGVjZjU4NzcwHhcNMjMwNTEw
MTkzODA1WhcNMjUwNTExMTkzODA1WjAzMTEwLwYDVQQDEyhmMjVmMTBhNzRlZDE2
NmI3ZGZkZTc3NzE5OWI4ZmYxZmUyODhlMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgc+fXEW7++mSMQPvZmwz4mBEE4oIM30D3RqQdt0kzrIfG3yU
3hnn6T04AfvgD4In5H6tJFlZBSPFa8FjumjUv7MOevkif4jof7wfuYiwRYh1IR8a
+Q7wf1QhbNdZYrfvi4ckJ7ZvscrwtfCwqsGq4pgYWgUr6/3vdJT4g13FqZ/uuLDP
dUTPyabZFPrsqPwZNoyXGbJelbWbziDV6h5J7eduXmJn3S9j+ydDWgOLNSZFSVMQ
NdnGnUKRmrXDpcLk8MBRU8o0mtx+/ijP5ig41fTy+TdtUTnkJhaJMh+ZZ2eQZRC3
g+LhbvKjNnrlHk8C4wZ0A+m1sjnnGWFn3SHOYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFICV+P5XUXs5wfta5C1fTXI59JKJMB8GA1UdIwQYMBaAFL5LuZlW3MOiIvwZ
LuBbsDRxRDrmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGY0N2Ji
N2VhZDkxMDc4MTU2M2RjMTk5ZTE4NDE4YzM0ZWNmNTg3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzM0NjE2ZWUtNzRlMS00ZDZmLWIwOGQtY2ZmMjlj
MDAxNzc2L2YyNWYxMGE3NGVkMTY2YjdkZmRlNzc3MTk5YjhmZjFmZTI4OGUwOTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMzQ2MTZlZS03NGUxLTRkNmYtYjA4ZC1jZmYy
OWMwMDE3NzYvNGY0N2JiN2VhZDkxMDc4MTU2M2RjMTk5ZTE4NDE4YzM0ZWNmNTg3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2+8DANBgkqhkiG9w0BAQsFAAOCAQEAUyHAYsxwqNnBqtED
R/cWaxqVgf1bnPHK2f0GBkb2X9ExuV2UFx8YbO8RYrDyKzds2UsHCfI+Y5HmJs+/
cK5ZSqc5keFK0i2ZswP/u9iDwDy6lhnbT9ZIOZoWFO5D6csN4qspDaStH/0q1EjV
Nkd3DYCLjcoQo4K/XrHF2G274Ee+o+yqN+5C7YvXr9nU3KRvjlhpudznC6MG0clu
XpjjmygevkHUx+Zc6nvrFetAvWF3zd6NdB5y3AE/LQ0Qtb7q5nkbHJAEKmROg2dK
tYWd5f3Nc6IReEeEcypzWEQSS4hOqgjOIH2WoYtmo7Bo1vnywYQ5H5mS2Zb5Z4gt
jd6V3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org