Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/bb1fc42e19c62b947225abc40b06a7c8bd49240d.roa
File:                     bb1fc42e19c62b947225abc40b06a7c8bd49240d.roa (raw, json)
Hash identifier:          pYzKCqySuovqu/RIVFZFVdew3iidvqlcrZ7SS0n+z5o=
Subject key identifier:   17:60:B5:32:02:BA:4D:D4:C8:32:97:17:A7:9C:F9:4A:15:03:EB:79
Certificate issuer:       /CN=02560e9f9d9ae9402341a28273afd5c0caf17950
Certificate serial:       0480AB
Authority key identifier: 18:DC:46:1A:AA:6C:8A:CD:96:8B:4D:86:A2:8B:6B:F1:A5:BD:9E:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02560e9f9d9ae9402341a28273afd5c0caf17950.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/bb1fc42e19c62b947225abc40b06a7c8bd49240d.roa
Signing time:             Wed 24 Mar 2021 14:29:22 +0000
ROA not before:           Wed 24 Mar 2021 14:29:22 +0000
ROA not after:            Tue 24 Mar 2026 14:29:22 +0000
asID:                     267833
IP address blocks:        45.175.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295083 (0x480ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02560e9f9d9ae9402341a28273afd5c0caf17950
        Validity
            Not Before: Mar 24 14:29:22 2021 GMT
            Not After : Mar 24 14:29:22 2026 GMT
        Subject: CN=bb1fc42e19c62b947225abc40b06a7c8bd49240d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:2d:1a:6e:1f:71:78:c4:d8:6d:13:e0:21:
                    4c:c6:74:2d:3c:15:b4:41:0f:0e:7a:47:eb:a4:7b:
                    69:ef:d8:9d:41:60:37:4d:ff:d0:be:fb:8d:3b:e2:
                    76:74:1e:3a:40:ba:64:af:41:cf:63:fb:4d:c9:e8:
                    c1:df:ed:2e:ab:35:88:cc:fb:89:f4:c2:df:10:aa:
                    2f:b2:90:66:8f:3d:1f:0f:03:8d:f0:4d:b2:46:97:
                    55:5d:f5:56:17:05:a8:63:fa:fd:90:6d:cf:d1:3f:
                    5d:66:21:92:fd:8c:66:f2:c0:2b:f2:0a:44:e3:30:
                    f0:4a:ee:ce:86:30:1d:ae:c2:53:06:bc:3d:b5:18:
                    63:33:95:cd:2f:b8:62:7e:10:b8:1b:56:36:1e:ce:
                    bc:03:18:76:07:bc:6d:a4:92:af:cb:d9:59:f2:28:
                    9a:2f:48:bf:b3:22:51:65:d2:3f:3f:14:ee:bc:7a:
                    b3:ef:b2:0c:c8:52:ec:c7:49:b3:0c:b8:06:ca:c0:
                    f7:d6:6f:e0:0d:3a:3e:92:f4:03:3f:e2:53:46:0e:
                    38:bf:a3:19:af:ce:8f:d5:97:64:39:50:e0:11:5b:
                    04:52:74:6e:da:73:10:2c:61:d3:11:c1:ba:46:0c:
                    95:c1:c4:68:8d:a3:fc:07:95:2e:57:73:7f:57:04:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:60:B5:32:02:BA:4D:D4:C8:32:97:17:A7:9C:F9:4A:15:03:EB:79
            X509v3 Authority Key Identifier:
                keyid:18:DC:46:1A:AA:6C:8A:CD:96:8B:4D:86:A2:8B:6B:F1:A5:BD:9E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02560e9f9d9ae9402341a28273afd5c0caf17950.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/bb1fc42e19c62b947225abc40b06a7c8bd49240d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35d5ca64-26f1-40c7-b5f6-8bbb6de63aec/02560e9f9d9ae9402341a28273afd5c0caf17950.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:94:c0:7a:84:c3:ae:50:c6:65:12:69:5f:39:97:32:15:e6:
         07:ec:cf:87:19:d8:f3:bf:fb:2e:14:61:9a:04:b0:96:f8:99:
         02:99:b1:80:b0:b4:84:a3:91:01:7b:da:dc:49:e5:d9:2d:b3:
         0f:84:48:f9:58:47:a0:28:98:5b:42:f1:b0:2e:37:db:25:c6:
         c3:0a:08:7c:15:15:74:1a:3d:3b:1a:ca:25:39:1d:6b:c6:c1:
         9a:34:4b:22:15:29:75:28:7d:1b:e2:6c:0b:ad:e0:ec:d3:9e:
         6d:e8:ba:c9:a8:fe:33:ec:48:46:e3:d1:28:f5:e3:87:ee:9b:
         de:31:d4:37:0c:6a:85:68:d7:88:f7:5f:f1:5c:53:b4:89:b2:
         87:39:da:18:b2:f6:7b:55:c8:ec:26:99:c5:d9:e3:3c:63:76:
         3f:d5:1e:d4:4b:e5:07:f5:91:ac:3a:3c:2d:b1:5c:aa:34:ca:
         e5:0d:75:a4:f3:a4:88:2e:1b:54:5b:14:bd:07:2b:0e:5c:6a:
         f8:0e:95:b9:5d:cd:b2:00:b4:de:cf:c8:fd:80:66:eb:1f:a4:
         da:6f:d8:df:f8:20:1d:57:b2:97:e3:20:19:a1:5b:df:68:6d:
         2d:cf:81:55:13:41:28:17:ba:bd:c3:6a:af:f4:45:98:9e:44:
         09:55:2b:11
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBICrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAy
NTYwZTlmOWQ5YWU5NDAyMzQxYTI4MjczYWZkNWMwY2FmMTc5NTAwHhcNMjEwMzI0
MTQyOTIyWhcNMjYwMzI0MTQyOTIyWjAzMTEwLwYDVQQDEyhiYjFmYzQyZTE5YzYy
Yjk0NzIyNWFiYzQwYjA2YTdjOGJkNDkyNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmSAtGm4fcXjE2G0T4CFMxnQtPBW0QQ8OekfrpHtp79idQWA3
Tf/QvvuNO+J2dB46QLpkr0HPY/tNyejB3+0uqzWIzPuJ9MLfEKovspBmjz0fDwON
8E2yRpdVXfVWFwWoY/r9kG3P0T9dZiGS/Yxm8sAr8gpE4zDwSu7OhjAdrsJTBrw9
tRhjM5XNL7hifhC4G1Y2Hs68Axh2B7xtpJKvy9lZ8iiaL0i/syJRZdI/PxTuvHqz
77IMyFLsx0mzDLgGysD31m/gDTo+kvQDP+JTRg44v6MZr86P1ZdkOVDgEVsEUnRu
2nMQLGHTEcG6RgyVwcRojaP8B5UuV3N/VwTEmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBdgtTICuk3UyDKXF6ec+UoVA+t5MB8GA1UdIwQYMBaAFBjcRhqqbIrNlotN
hqKLa/GlvZ4HMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDI1NjBl
OWY5ZDlhZTk0MDIzNDFhMjgyNzNhZmQ1YzBjYWYxNzk1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzVkNWNhNjQtMjZmMS00MGM3LWI1ZjYtOGJiYjZk
ZTYzYWVjL2JiMWZjNDJlMTljNjJiOTQ3MjI1YWJjNDBiMDZhN2M4YmQ0OTI0MGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNWQ1Y2E2NC0yNmYxLTQwYzctYjVmNi04YmJi
NmRlNjNhZWMvMDI1NjBlOWY5ZDlhZTk0MDIzNDFhMjgyNzNhZmQ1YzBjYWYxNzk1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2vZDANBgkqhkiG9w0BAQsFAAOCAQEAMJTAeoTDrlDGZRJp
XzmXMhXmB+zPhxnY87/7LhRhmgSwlviZApmxgLC0hKORAXva3Enl2S2zD4RI+VhH
oCiYW0LxsC432yXGwwoIfBUVdBo9OxrKJTkda8bBmjRLIhUpdSh9G+JsC63g7NOe
bei6yaj+M+xIRuPRKPXjh+6b3jHUNwxqhWjXiPdf8VxTtImyhznaGLL2e1XI7CaZ
xdnjPGN2P9Ue1EvlB/WRrDo8LbFcqjTK5Q11pPOkiC4bVFsUvQcrDlxq+A6VuV3N
sgC03s/I/YBm6x+k2m/Y3/ggHVeyl+MgGaFb32htLc+BVRNBKBe6vcNqr/RFmJ5E
CVUrEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org