Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/646ec30efc20ccca10ab2acfc420519f731b096f.roa
File:                     646ec30efc20ccca10ab2acfc420519f731b096f.roa (raw, json)
Hash identifier:          GRYfU7lzANJxAvpxRrZqXcmHqAWREOZtcK4a6RGiExY=
Subject key identifier:   47:45:1C:91:F2:00:9D:1B:F1:47:B3:A5:D9:81:B1:D4:86:49:B9:5F
Certificate issuer:       /CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
Certificate serial:       2048
Authority key identifier: E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/646ec30efc20ccca10ab2acfc420519f731b096f.roa
Signing time:             Mon 03 Oct 2022 17:41:40 +0000
ROA not before:           Mon 03 Oct 2022 17:41:12 +0000
ROA not after:            Thu 03 Oct 2024 18:41:12 +0000
asID:                     267735
IP address blocks:        45.167.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8264 (0x2048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
        Validity
            Not Before: Oct  3 17:41:12 2022 GMT
            Not After : Oct  3 18:41:12 2024 GMT
        Subject: CN=646ec30efc20ccca10ab2acfc420519f731b096f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:f8:02:5a:0d:53:80:7e:fe:36:3d:1d:d7:
                    e0:88:6e:53:83:9b:e9:84:4a:d7:10:6e:4e:4e:26:
                    65:02:01:86:93:c8:b5:5d:b9:84:4f:3b:ce:31:c3:
                    44:29:d8:e8:1b:48:b9:aa:1f:f1:c6:c5:b4:a7:d7:
                    9b:d3:cb:fa:43:ba:2d:f1:7a:bd:d2:b6:99:c0:4d:
                    5d:23:50:77:74:53:e4:2d:1d:68:19:c2:b9:e9:45:
                    eb:e4:f8:49:36:44:13:19:d1:f1:5d:66:bb:43:12:
                    b5:08:a6:1c:b3:e3:9d:a0:c5:3c:38:27:39:98:a1:
                    85:10:21:9d:40:27:55:65:42:91:49:62:40:ab:4f:
                    60:32:62:58:e5:4f:26:5a:3b:8d:eb:48:44:ad:93:
                    b8:8a:fa:1c:48:fc:a6:58:61:ae:cf:68:b0:6a:18:
                    87:72:96:c7:d6:d4:66:84:a8:9f:b7:86:5c:55:af:
                    d6:84:33:1f:fa:60:01:13:c8:74:a7:69:f0:a8:5f:
                    58:22:4f:86:32:d7:30:f4:0f:66:9a:4e:31:00:7c:
                    95:3f:ca:ea:84:67:c1:04:b2:37:1a:c3:8e:a8:60:
                    31:ab:38:6a:4d:17:7f:1e:bd:13:48:a5:63:0f:88:
                    e6:a0:5a:d7:05:94:a3:be:ac:e4:c9:52:b9:ff:48:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:45:1C:91:F2:00:9D:1B:F1:47:B3:A5:D9:81:B1:D4:86:49:B9:5F
            X509v3 Authority Key Identifier:
                keyid:E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/646ec30efc20ccca10ab2acfc420519f731b096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:54:b1:a9:aa:bb:83:a6:7e:22:76:25:dc:87:f2:64:07:e1:
         3c:c6:f9:c5:e2:07:c0:db:3f:0a:3b:22:1d:51:d3:20:f3:13:
         4c:08:d7:aa:b8:8e:59:2f:fb:15:28:86:02:10:1c:89:20:6e:
         9a:b0:8b:80:80:34:b0:c3:6b:7c:e1:b2:de:1a:1b:9b:6e:02:
         61:0d:0e:b7:fb:e0:eb:dc:2e:03:a2:6e:0f:71:54:d8:42:8a:
         5d:97:88:3b:36:4a:5e:fd:2b:d7:3f:d1:93:c8:08:9a:46:bc:
         92:91:7e:f1:98:53:e9:c6:11:87:c3:e9:91:66:7d:f0:7b:c6:
         dc:b2:03:7a:4b:9f:a2:0f:ba:f5:0b:47:11:ec:d2:5f:5f:c7:
         d7:b2:56:39:c2:87:97:e3:a1:38:10:dd:d5:93:54:79:fa:c1:
         53:2e:2a:60:55:13:8d:31:32:9d:da:6e:dc:3f:12:27:f8:de:
         b2:e2:f6:7d:61:2c:76:7f:91:43:82:d3:04:d9:ab:6e:b8:43:
         fd:6e:4d:6b:fd:bf:aa:e8:f5:9c:47:e0:72:3d:ae:62:d3:d3:
         db:84:21:cb:26:e2:0f:4f:d8:39:c4:d5:3c:72:60:af:46:02:
         ee:3e:5c:b7:d2:4e:b3:6f:64:ab:dc:58:15:ed:af:de:9b:23:
         92:78:e8:ac
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICIEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmIw
OWQ5Njg0Nzk1ZDhmZGVjNGJiNGFmZTZjYTUzNmUwYTg1NmYzMDAeFw0yMjEwMDMx
NzQxMTJaFw0yNDEwMDMxODQxMTJaMDMxMTAvBgNVBAMTKDY0NmVjMzBlZmMyMGNj
Y2ExMGFiMmFjZmM0MjA1MTlmNzMxYjA5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCINPgCWg1TgH7+Nj0d1+CIblODm+mEStcQbk5OJmUCAYaTyLVd
uYRPO84xw0Qp2OgbSLmqH/HGxbSn15vTy/pDui3xer3StpnATV0jUHd0U+QtHWgZ
wrnpRevk+Ek2RBMZ0fFdZrtDErUIphyz452gxTw4JzmYoYUQIZ1AJ1VlQpFJYkCr
T2AyYljlTyZaO43rSEStk7iK+hxI/KZYYa7PaLBqGIdylsfW1GaEqJ+3hlxVr9aE
Mx/6YAETyHSnafCoX1giT4Yy1zD0D2aaTjEAfJU/yuqEZ8EEsjcaw46oYDGrOGpN
F38evRNIpWMPiOagWtcFlKO+rOTJUrn/SLEVAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUR0UckfIAnRvxR7Ol2YGx1IZJuV8wHwYDVR0jBBgwFoAU5rWPKBHFKotEs/N3
xf0OchqZ2sgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82YjA5ZDk2
ODQ3OTVkOGZkZWM0YmI0YWZlNmNhNTM2ZTBhODU2ZjMwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zY2JlMTZkMC0zZjc2LTQ5ZjEtYTJiYy1hYzZhNmMy
ZGQ0YmUvNjQ2ZWMzMGVmYzIwY2NjYTEwYWIyYWNmYzQyMDUxOWY3MzFiMDk2Zi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNjYmUxNmQwLTNmNzYtNDlmMS1hMmJjLWFjNmE2
YzJkZDRiZS82YjA5ZDk2ODQ3OTVkOGZkZWM0YmI0YWZlNmNhNTM2ZTBhODU2ZjMw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALadZMA0GCSqGSIb3DQEBCwUAA4IBAQCJVLGpqruDpn4idiXc
h/JkB+E8xvnF4gfA2z8KOyIdUdMg8xNMCNequI5ZL/sVKIYCEByJIG6asIuAgDSw
w2t84bLeGhubbgJhDQ63++Dr3C4Dom4PcVTYQopdl4g7Nkpe/SvXP9GTyAiaRryS
kX7xmFPpxhGHw+mRZn3we8bcsgN6S5+iD7r1C0cR7NJfX8fXslY5woeX46E4EN3V
k1R5+sFTLipgVRONMTKd2m7cPxIn+N6y4vZ9YSx2f5FDgtME2atuuEP9bk1r/b+q
6PWcR+ByPa5i09PbhCHLJuIPT9g5xNU8cmCvRgLuPly30k6zb2Sr3FgV7a/emyOS
eOis
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org