Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/110eed28da505fc1e375920409b5a8a0a0c04d25.roa
File:                     110eed28da505fc1e375920409b5a8a0a0c04d25.roa (raw, json)
Hash identifier:          Rsu49FTXYnh6bSPleRZwXk/psxfrA1H68aStlByOqFE=
Subject key identifier:   21:D9:06:85:2B:2D:1F:F3:56:C3:7D:61:3E:A5:01:CC:18:82:11:40
Certificate issuer:       /CN=bce920cc53ed6dc0af3febc31cab5b52dff302fa
Certificate serial:       0BE2F9
Authority key identifier: 82:61:8B:57:DB:A6:EE:6D:FB:F8:BB:41:A8:2B:9F:DB:E0:6D:FB:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bce920cc53ed6dc0af3febc31cab5b52dff302fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/110eed28da505fc1e375920409b5a8a0a0c04d25.roa
Signing time:             Wed 24 Mar 2021 14:34:13 +0000
ROA not before:           Wed 24 Mar 2021 14:34:13 +0000
ROA not after:            Tue 24 Mar 2026 14:34:13 +0000
asID:                     7049
IP address blocks:        45.175.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779001 (0xbe2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce920cc53ed6dc0af3febc31cab5b52dff302fa
        Validity
            Not Before: Mar 24 14:34:13 2021 GMT
            Not After : Mar 24 14:34:13 2026 GMT
        Subject: CN=110eed28da505fc1e375920409b5a8a0a0c04d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:a0:2f:b1:c0:ff:11:ed:9a:83:cb:48:40:
                    64:48:2e:5d:35:3f:01:0c:06:de:8d:11:ec:bf:99:
                    cc:e2:ca:ef:7e:40:b5:f0:8a:50:24:32:09:7b:29:
                    d1:29:33:4e:d5:e0:bd:e9:22:0c:56:be:d2:c1:82:
                    0f:a5:65:e1:2a:fa:27:31:91:6c:71:0a:23:0a:e0:
                    e0:4c:4a:e0:ee:bc:ad:2e:78:98:18:5b:79:e8:80:
                    f2:8a:ea:cc:da:e1:f0:73:73:82:3a:9b:d4:44:aa:
                    15:02:43:0d:3b:80:1e:6d:d4:b6:b0:2f:2b:77:76:
                    4c:72:25:c1:fd:2c:8b:d7:44:21:1b:3a:7a:78:5d:
                    68:7c:94:5b:a4:a0:a9:77:26:c2:0f:60:fc:2f:37:
                    7c:7b:6e:22:1c:e3:76:29:16:ef:29:df:7d:7e:ab:
                    0e:73:41:92:46:7e:cf:7d:07:92:8e:28:e5:7c:b5:
                    6e:e3:0b:28:73:44:eb:e1:c8:df:8b:60:03:d3:30:
                    2e:7d:10:ba:88:bb:b7:b9:93:93:d8:67:23:f8:8f:
                    15:e8:de:3a:d4:ee:39:18:3e:6b:1e:11:6d:3c:52:
                    96:34:e2:36:13:b1:19:62:53:c3:24:38:d9:7b:35:
                    25:28:2d:57:71:4f:9f:ab:74:d9:7d:15:57:9e:a5:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:06:85:2B:2D:1F:F3:56:C3:7D:61:3E:A5:01:CC:18:82:11:40
            X509v3 Authority Key Identifier:
                keyid:82:61:8B:57:DB:A6:EE:6D:FB:F8:BB:41:A8:2B:9F:DB:E0:6D:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bce920cc53ed6dc0af3febc31cab5b52dff302fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/110eed28da505fc1e375920409b5a8a0a0c04d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:3f:1c:88:c6:15:8c:2f:71:2c:1c:93:b1:f1:79:a0:86:
         e1:a4:76:41:ed:cf:cc:5f:0c:71:38:84:ab:cb:69:50:88:b1:
         7f:1b:36:24:2e:27:be:13:28:1c:18:46:82:d3:ca:5f:44:e2:
         cf:d0:92:15:59:6a:60:07:9b:9b:37:3b:c9:53:20:63:22:d7:
         fa:c1:ce:70:7f:83:53:31:ac:54:3c:93:08:78:98:9d:31:77:
         c0:b3:5a:5a:e1:6a:c6:4e:04:a0:23:ca:a0:7e:79:a9:98:6c:
         85:3b:c9:c6:e6:90:e9:52:f9:27:33:69:6f:74:9b:86:23:a1:
         a0:e0:0f:dc:c7:3b:a2:96:ba:07:78:62:94:92:c0:17:12:b8:
         d8:d3:ad:ec:a8:d9:d5:ec:4a:6b:15:c6:8b:1b:d1:04:2e:6b:
         d3:23:2f:68:ca:7c:a8:dd:4c:21:a2:9d:91:63:10:df:e4:a7:
         5d:55:85:d8:93:34:2a:c7:d1:79:09:61:c6:fd:66:43:cb:e5:
         0a:73:83:ec:06:13:6e:fa:f6:7b:da:d1:9d:d6:21:63:9c:29:
         2f:c2:fb:66:12:e5:a3:8e:ab:d6:46:7d:da:5c:3c:13:3f:bb:
         c9:8b:c4:c8:24:e4:aa:69:03:6b:89:28:87:ed:56:08:cb:bb:
         48:91:c9:c8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC+L5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
ZTkyMGNjNTNlZDZkYzBhZjNmZWJjMzFjYWI1YjUyZGZmMzAyZmEwHhcNMjEwMzI0
MTQzNDEzWhcNMjYwMzI0MTQzNDEzWjAzMTEwLwYDVQQDEygxMTBlZWQyOGRhNTA1
ZmMxZTM3NTkyMDQwOWI1YThhMGEwYzA0ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzlugL7HA/xHtmoPLSEBkSC5dNT8BDAbejRHsv5nM4srvfkC1
8IpQJDIJeynRKTNO1eC96SIMVr7SwYIPpWXhKvonMZFscQojCuDgTErg7rytLniY
GFt56IDyiurM2uHwc3OCOpvURKoVAkMNO4AebdS2sC8rd3ZMciXB/SyL10QhGzp6
eF1ofJRbpKCpdybCD2D8Lzd8e24iHON2KRbvKd99fqsOc0GSRn7PfQeSjijlfLVu
4wsoc0Tr4cjfi2AD0zAufRC6iLu3uZOT2Gcj+I8V6N461O45GD5rHhFtPFKWNOI2
E7EZYlPDJDjZezUlKC1XcU+fq3TZfRVXnqUJLwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCHZBoUrLR/zVsN9YT6lAcwYghFAMB8GA1UdIwQYMBaAFIJhi1fbpu5t+/i7
Qagrn9vgbftTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmNlOTIw
Y2M1M2VkNmRjMGFmM2ZlYmMzMWNhYjViNTJkZmYzMDJmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2YzYzYxN2MtODQ0MC00YWJlLTljMDMtOTA5MjNl
YjFmY2QwLzExMGVlZDI4ZGE1MDVmYzFlMzc1OTIwNDA5YjVhOGEwYTBjMDRkMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZjNjNjE3Yy04NDQwLTRhYmUtOWMwMy05MDky
M2ViMWZjZDAvYmNlOTIwY2M1M2VkNmRjMGFmM2ZlYmMzMWNhYjViNTJkZmYzMDJm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2vFTANBgkqhkiG9w0BAQsFAAOCAQEAoLA/HIjGFYwvcSwc
k7HxeaCG4aR2Qe3PzF8McTiEq8tpUIixfxs2JC4nvhMoHBhGgtPKX0Tiz9CSFVlq
YAebmzc7yVMgYyLX+sHOcH+DUzGsVDyTCHiYnTF3wLNaWuFqxk4EoCPKoH55qZhs
hTvJxuaQ6VL5JzNpb3SbhiOhoOAP3Mc7opa6B3hilJLAFxK42NOt7KjZ1exKaxXG
ixvRBC5r0yMvaMp8qN1MIaKdkWMQ3+SnXVWF2JM0KsfReQlhxv1mQ8vlCnOD7AYT
bvr2e9rRndYhY5wpL8L7ZhLlo46r1kZ92lw8Ez+7yYvEyCTkqmkDa4koh+1WCMu7
SJHJyA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org