Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/7aa9f0121a45b1263dde5ee3d5a03706eff4fc9a.roa
File:                     7aa9f0121a45b1263dde5ee3d5a03706eff4fc9a.roa (raw, json)
Hash identifier:          LaDWZSt4DJRwj+mUl456pAmOUCB8vpZxrDXR5HzMdTc=
Subject key identifier:   E5:99:3B:36:B1:D0:D9:36:0B:EE:18:0E:09:5B:63:B1:2B:B9:AA:8F
Certificate issuer:       /CN=e98b3a7ddef8f773492165299fd1cc4c656e96c9
Certificate serial:       0C4849
Authority key identifier: 1C:59:56:31:DA:F6:42:96:39:A6:50:40:F5:B3:C6:BC:E5:1D:23:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/7aa9f0121a45b1263dde5ee3d5a03706eff4fc9a.roa
Signing time:             Wed 24 Mar 2021 14:46:17 +0000
ROA not before:           Wed 24 Mar 2021 14:46:17 +0000
ROA not after:            Tue 24 Mar 2026 14:46:17 +0000
asID:                     266694
IP address blocks:        45.229.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804937 (0xc4849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98b3a7ddef8f773492165299fd1cc4c656e96c9
        Validity
            Not Before: Mar 24 14:46:17 2021 GMT
            Not After : Mar 24 14:46:17 2026 GMT
        Subject: CN=7aa9f0121a45b1263dde5ee3d5a03706eff4fc9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:fc:fd:8e:11:ef:5e:b7:b8:c3:31:05:34:
                    20:cf:69:8f:20:95:5b:ee:b5:e2:c8:75:a9:b9:29:
                    b5:53:52:e4:2b:94:bb:07:51:2c:bb:87:6f:52:0c:
                    66:67:e4:1b:52:4d:c4:66:03:77:9b:b5:79:e4:da:
                    68:ca:ca:6f:48:7f:03:e6:41:1b:90:a8:8b:1b:e4:
                    72:74:e4:7a:4d:74:64:99:2c:5b:9c:7c:f9:ea:d4:
                    32:46:bd:c3:f2:90:82:41:15:71:26:04:ee:48:2d:
                    d4:df:fc:5a:5a:fb:b1:89:1b:a7:52:f1:7b:47:05:
                    2c:15:5e:87:05:3d:e9:ba:b9:70:0a:bd:98:14:f7:
                    22:04:b9:22:bc:7f:78:b8:66:f5:af:0e:f0:88:9b:
                    85:e7:65:c4:40:5d:86:01:d2:ca:cf:84:8d:3d:ca:
                    79:2f:da:9a:12:8a:a5:e0:b9:78:b2:69:69:00:cf:
                    53:14:86:8f:be:05:59:2f:0b:4a:47:7f:3a:46:92:
                    23:c5:e0:fe:d8:0e:96:14:35:52:77:6c:f8:ad:8c:
                    1d:a0:38:8c:61:af:67:7a:3d:2e:c1:2f:82:4e:26:
                    52:84:91:9d:20:0b:12:2d:fd:48:6e:fa:1c:f6:00:
                    f1:7e:4d:eb:00:b1:78:48:89:c4:8d:85:c0:aa:c5:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:3B:36:B1:D0:D9:36:0B:EE:18:0E:09:5B:63:B1:2B:B9:AA:8F
            X509v3 Authority Key Identifier:
                keyid:1C:59:56:31:DA:F6:42:96:39:A6:50:40:F5:B3:C6:BC:E5:1D:23:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/7aa9f0121a45b1263dde5ee3d5a03706eff4fc9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/e98b3a7ddef8f773492165299fd1cc4c656e96c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:49:7e:ee:84:3a:81:e4:0f:bb:f4:eb:a4:ed:18:16:58:
         6e:f6:f1:3a:c7:0f:01:f1:4b:8e:96:07:de:04:16:c6:d5:3b:
         6c:55:7b:c4:40:80:92:26:83:b7:e6:6f:56:f5:06:a0:d1:8a:
         ea:9c:4e:32:65:d8:89:64:1e:ca:5b:74:fc:11:58:0e:95:f3:
         58:e9:43:f6:64:0f:5f:f5:a7:4d:5e:2a:be:23:de:4b:ee:20:
         73:54:01:9d:6f:b6:08:8d:68:63:f2:c2:60:d2:9c:51:01:54:
         39:33:12:b5:2f:2b:5a:71:73:29:34:d0:83:2c:37:f0:96:70:
         c7:d6:f0:e6:a2:94:74:82:b3:2b:58:bd:99:91:db:b3:3a:01:
         7e:c9:46:f7:8c:f2:6d:87:0d:9e:18:45:6e:1f:f4:b5:87:78:
         a2:cd:f7:c7:b1:a0:29:7b:55:1e:6d:ed:9b:2f:ad:51:75:46:
         fe:a3:00:bc:a9:a1:87:16:9e:81:a2:f5:2c:d9:8a:dd:c9:4c:
         ee:33:ea:2a:77:2c:d7:1f:d6:48:66:d3:11:67:7d:3a:b7:d4:
         c0:af:ea:fb:cb:b1:4d:62:6c:e5:9f:de:4a:65:8c:51:0d:d5:
         21:00:0c:a7:f2:b1:52:25:ac:d2:a4:50:1e:9d:78:3c:d5:de:
         8b:34:84:aa
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDEhJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
OGIzYTdkZGVmOGY3NzM0OTIxNjUyOTlmZDFjYzRjNjU2ZTk2YzkwHhcNMjEwMzI0
MTQ0NjE3WhcNMjYwMzI0MTQ0NjE3WjAzMTEwLwYDVQQDEyg3YWE5ZjAxMjFhNDVi
MTI2M2RkZTVlZTNkNWEwMzcwNmVmZjRmYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1L78/Y4R7163uMMxBTQgz2mPIJVb7rXiyHWpuSm1U1LkK5S7
B1Esu4dvUgxmZ+QbUk3EZgN3m7V55NpoyspvSH8D5kEbkKiLG+RydOR6TXRkmSxb
nHz56tQyRr3D8pCCQRVxJgTuSC3U3/xaWvuxiRunUvF7RwUsFV6HBT3purlwCr2Y
FPciBLkivH94uGb1rw7wiJuF52XEQF2GAdLKz4SNPcp5L9qaEoql4Ll4smlpAM9T
FIaPvgVZLwtKR386RpIjxeD+2A6WFDVSd2z4rYwdoDiMYa9nej0uwS+CTiZShJGd
IAsSLf1Ibvoc9gDxfk3rALF4SInEjYXAqsUyYQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOWZOzax0Nk2C+4YDglbY7EruaqPMB8GA1UdIwQYMBaAFBxZVjHa9kKWOaZQ
QPWzxrzlHSPqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk4YjNh
N2RkZWY4Zjc3MzQ5MjE2NTI5OWZkMWNjNGM2NTZlOTZjOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzYxMGNjOTYtNjJjNS00OTk4LWE5NTYtYjk0MzBj
OTc5NDU4LzdhYTlmMDEyMWE0NWIxMjYzZGRlNWVlM2Q1YTAzNzA2ZWZmNGZjOWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNjEwY2M5Ni02MmM1LTQ5OTgtYTk1Ni1iOTQz
MGM5Nzk0NTgvZTk4YjNhN2RkZWY4Zjc3MzQ5MjE2NTI5OWZkMWNjNGM2NTZlOTZj
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3lqDANBgkqhkiG9w0BAQsFAAOCAQEAfWdJfu6EOoHkD7v0
66TtGBZYbvbxOscPAfFLjpYH3gQWxtU7bFV7xECAkiaDt+ZvVvUGoNGK6pxOMmXY
iWQeylt0/BFYDpXzWOlD9mQPX/WnTV4qviPeS+4gc1QBnW+2CI1oY/LCYNKcUQFU
OTMStS8rWnFzKTTQgyw38JZwx9bw5qKUdIKzK1i9mZHbszoBfslG94zybYcNnhhF
bh/0tYd4os33x7GgKXtVHm3tmy+tUXVG/qMAvKmhhxaegaL1LNmK3clM7jPqKncs
1x/WSGbTEWd9OrfUwK/q+8uxTWJs5Z/eSmWMUQ3VIQAMp/KxUiWs0qRQHp14PNXe
izSEqg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org