Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/9a57b890e277cc6f5dfd7bb1b7d5069fe78b651b.roa
File:                     9a57b890e277cc6f5dfd7bb1b7d5069fe78b651b.roa (raw, json)
Hash identifier:          irbWY3UqYgDQHyZ9ZKU/mnEoBspXRsiqtRAzgFc07Iw=
Subject key identifier:   24:9B:50:47:B1:3A:96:92:15:43:E2:26:7A:27:4E:2B:57:47:56:8B
Certificate issuer:       /CN=a515f3deed148bd93535c46d07e413ea6586a83e
Certificate serial:       02F528
Authority key identifier: D4:CB:45:3A:65:BC:36:CC:DE:0C:C9:AF:34:91:45:E5:81:44:51:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a515f3deed148bd93535c46d07e413ea6586a83e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/9a57b890e277cc6f5dfd7bb1b7d5069fe78b651b.roa
Signing time:             Mon 12 Feb 2024 19:02:12 +0000
ROA not before:           Mon 12 Feb 2024 19:02:12 +0000
ROA not after:            Thu 12 Feb 2026 19:02:12 +0000
asID:                     28428
IP address blocks:        45.174.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193832 (0x2f528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a515f3deed148bd93535c46d07e413ea6586a83e
        Validity
            Not Before: Feb 12 19:02:12 2024 GMT
            Not After : Feb 12 19:02:12 2026 GMT
        Subject: CN=9a57b890e277cc6f5dfd7bb1b7d5069fe78b651b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:e8:6b:aa:c5:e4:4a:49:d0:5f:d2:f0:4e:
                    50:20:85:54:3d:60:44:61:a8:17:29:96:44:23:58:
                    57:87:33:ed:07:57:33:72:e6:55:19:be:d2:e8:e6:
                    4a:1d:3c:29:23:7f:c5:73:eb:4f:fa:4d:1f:5b:6a:
                    60:e7:24:60:b4:be:ae:e1:75:0f:1e:e5:c2:0c:ad:
                    d9:d0:52:2e:97:56:13:7e:9e:a4:b7:a3:88:aa:86:
                    df:ed:5f:fb:b6:4a:7a:82:28:45:38:83:eb:61:04:
                    dd:37:72:15:9f:19:cd:54:68:fe:73:c9:e7:79:0f:
                    a0:43:1b:a1:c9:46:ec:23:8d:b4:7d:49:4c:82:eb:
                    41:81:81:9c:50:2a:34:18:ea:98:f0:7c:78:1a:10:
                    0f:2d:e4:e7:61:10:8b:15:9c:25:d9:a5:36:1f:33:
                    c8:76:06:a8:58:5c:6b:d9:48:0a:c9:ec:07:ad:76:
                    73:ac:3b:d0:75:c3:31:d0:37:0e:8d:26:d3:e4:fb:
                    32:91:22:64:7a:13:c7:51:1e:85:2d:30:e4:8c:2b:
                    20:f8:21:6e:0e:6f:cd:16:74:6e:81:08:19:5b:9e:
                    df:d2:ee:64:56:d5:9b:4f:91:ac:19:eb:81:fb:30:
                    49:54:99:83:5c:e8:31:0b:8e:98:4c:31:9b:f4:23:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9B:50:47:B1:3A:96:92:15:43:E2:26:7A:27:4E:2B:57:47:56:8B
            X509v3 Authority Key Identifier:
                keyid:D4:CB:45:3A:65:BC:36:CC:DE:0C:C9:AF:34:91:45:E5:81:44:51:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a515f3deed148bd93535c46d07e413ea6586a83e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/9a57b890e277cc6f5dfd7bb1b7d5069fe78b651b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/a515f3deed148bd93535c46d07e413ea6586a83e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:ba:1c:0b:42:72:dd:a0:c4:2a:00:0f:80:79:19:9a:b8:
         7f:2f:20:67:5e:78:c5:b0:ec:96:37:c9:1b:ea:3a:f7:e4:91:
         14:c7:c7:f4:68:35:eb:22:5c:ea:cc:0c:09:d9:bc:62:c6:21:
         5d:3a:4c:ea:f7:55:65:c6:8c:0d:31:b3:00:30:d0:a8:cd:04:
         e3:09:7b:49:7d:2a:cc:69:05:f8:f3:ef:37:7a:59:28:a1:14:
         80:5f:5a:aa:36:20:35:49:67:1c:1d:4d:b3:73:89:4b:13:c4:
         01:05:8f:29:b8:00:d7:3d:91:34:2b:98:cf:b2:62:21:15:aa:
         94:67:0b:bc:bf:27:78:d9:75:28:d0:88:a8:76:9f:6c:d2:4f:
         d5:d3:7f:4c:58:99:d1:07:e6:72:b1:ee:31:ba:39:d6:74:7d:
         9b:b7:80:0e:2d:e0:64:4a:2b:b8:39:ef:27:4a:ac:49:c8:e6:
         c4:32:85:d0:75:7c:d7:4a:60:11:7e:ff:9a:48:d2:54:52:c6:
         a7:09:6a:84:b5:b7:af:c4:8e:52:c4:40:90:fb:c3:6e:98:c3:
         25:5e:1d:6e:0e:2d:76:4b:f7:f9:1f:6e:dc:46:82:37:81:eb:
         50:39:46:15:9b:69:a6:d0:41:5b:e0:a3:a7:81:0e:c6:2a:8d:
         2b:cb:31:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAvUoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
MTVmM2RlZWQxNDhiZDkzNTM1YzQ2ZDA3ZTQxM2VhNjU4NmE4M2UwHhcNMjQwMjEy
MTkwMjEyWhcNMjYwMjEyMTkwMjEyWjAzMTEwLwYDVQQDEyg5YTU3Yjg5MGUyNzdj
YzZmNWRmZDdiYjFiN2Q1MDY5ZmU3OGI2NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm5voa6rF5EpJ0F/S8E5QIIVUPWBEYagXKZZEI1hXhzPtB1cz
cuZVGb7S6OZKHTwpI3/Fc+tP+k0fW2pg5yRgtL6u4XUPHuXCDK3Z0FIul1YTfp6k
t6OIqobf7V/7tkp6gihFOIPrYQTdN3IVnxnNVGj+c8nneQ+gQxuhyUbsI420fUlM
gutBgYGcUCo0GOqY8Hx4GhAPLeTnYRCLFZwl2aU2HzPIdgaoWFxr2UgKyewHrXZz
rDvQdcMx0DcOjSbT5PsykSJkehPHUR6FLTDkjCsg+CFuDm/NFnRugQgZW57f0u5k
VtWbT5GsGeuB+zBJVJmDXOgxC46YTDGb9CNMoQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCSbUEexOpaSFUPiJnonTitXR1aLMB8GA1UdIwQYMBaAFNTLRTplvDbM3gzJ
rzSRReWBRFFwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTUxNWYz
ZGVlZDE0OGJkOTM1MzVjNDZkMDdlNDEzZWE2NTg2YTgzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2RkNDY3YjYtM2Y2NC00YWY3LThlZTItNTYwNjZh
NTI2ZDQwLzlhNTdiODkwZTI3N2NjNmY1ZGZkN2JiMWI3ZDUwNjlmZTc4YjY1MWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZGQ0NjdiNi0zZjY0LTRhZjctOGVlMi01NjA2
NmE1MjZkNDAvYTUxNWYzZGVlZDE0OGJkOTM1MzVjNDZkMDdlNDEzZWE2NTg2YTgz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2uLDANBgkqhkiG9w0BAQsFAAOCAQEAaxC6HAtCct2gxCoA
D4B5GZq4fy8gZ154xbDsljfJG+o69+SRFMfH9Gg16yJc6swMCdm8YsYhXTpM6vdV
ZcaMDTGzADDQqM0E4wl7SX0qzGkF+PPvN3pZKKEUgF9aqjYgNUlnHB1Ns3OJSxPE
AQWPKbgA1z2RNCuYz7JiIRWqlGcLvL8neNl1KNCIqHafbNJP1dN/TFiZ0QfmcrHu
Mbo51nR9m7eADi3gZEoruDnvJ0qsScjmxDKF0HV810pgEX7/mkjSVFLGpwlqhLW3
r8SOUsRAkPvDbpjDJV4dbg4tdkv3+R9u3EaCN4HrUDlGFZtpptBBW+Cjp4EOxiqN
K8sxaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-ams.rpki-client.org