Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/8a103bc2eae884f575adee53eec44325fdd6a0ca.roa
File:                     8a103bc2eae884f575adee53eec44325fdd6a0ca.roa (raw, json)
Hash identifier:          PpI1II2ByioNUlTmoHXBQhpV4gIUnWNEmQXDHU8rTg4=
Subject key identifier:   6B:5A:0A:DA:BB:C1:AA:1B:5B:53:B2:51:9B:DD:FA:62:82:DC:1F:B6
Certificate issuer:       /CN=162120a907b927853fa0759b89cb5523b33e976c
Certificate serial:       126CFC
Authority key identifier: C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/8a103bc2eae884f575adee53eec44325fdd6a0ca.roa
Signing time:             Tue 18 Jan 2022 22:26:44 +0000
ROA not before:           Fri 14 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Mar 2027 03:00:00 +0000
asID:                     23487
IP address blocks:        45.178.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207548 (0x126cfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162120a907b927853fa0759b89cb5523b33e976c
        Validity
            Not Before: Jan 14 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2027 GMT
        Subject: CN=8a103bc2eae884f575adee53eec44325fdd6a0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:0c:15:09:57:5d:b6:44:05:63:cd:df:20:
                    58:bb:bf:b9:3a:61:fa:c4:12:b4:c6:91:c9:f9:bc:
                    47:78:db:74:49:6d:0c:33:7e:c2:21:7e:81:cc:d5:
                    c6:57:d2:43:a6:3c:ce:cf:a6:de:62:f6:4f:2d:7b:
                    2a:2d:6e:86:b5:37:a2:a0:59:90:e5:d5:66:d8:38:
                    ae:9d:ca:c7:c3:d9:15:9e:95:b4:d6:d1:5a:b2:24:
                    35:03:8d:fc:55:6c:3d:33:43:b7:68:6f:c7:cd:34:
                    71:d4:6d:c3:6f:de:0a:58:1f:a8:12:2b:1b:83:f4:
                    d8:73:0b:71:a4:55:d8:5d:22:8e:16:14:b2:e3:ac:
                    b2:cf:39:10:53:96:55:89:31:b5:d5:e5:8d:ec:09:
                    81:97:9f:42:ff:2d:d9:73:3d:82:36:11:22:0e:71:
                    e1:75:82:e9:db:9d:c1:70:ae:07:16:10:5a:4d:23:
                    a4:5c:4e:51:81:68:7f:b8:56:bc:6b:d9:c2:a6:5b:
                    c5:d8:a0:c4:e7:fe:41:3a:c9:71:2f:2e:e9:2a:4f:
                    28:15:41:00:5a:9b:18:f9:40:7d:06:aa:85:2d:e6:
                    b7:eb:b2:97:6d:b4:ee:b3:ea:49:a8:75:60:f2:ef:
                    9f:50:9c:13:9a:e1:86:12:56:a6:cf:b7:64:54:14:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:0A:DA:BB:C1:AA:1B:5B:53:B2:51:9B:DD:FA:62:82:DC:1F:B6
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F9:89:CC:E1:DD:AE:C2:D4:AB:AD:77:34:74:8C:1C:CF:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/162120a907b927853fa0759b89cb5523b33e976c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/8a103bc2eae884f575adee53eec44325fdd6a0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/405c3edd-d580-4d5b-b8bd-a6b455bb51ce/162120a907b927853fa0759b89cb5523b33e976c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:f0:3b:db:84:ad:1c:4f:42:ff:a8:ca:48:0f:de:93:23:
         2c:e5:09:86:a4:5d:14:fa:45:d2:5e:fe:2a:82:d9:f1:27:c6:
         21:74:6d:63:3f:b0:27:56:29:c2:cc:24:dd:fd:1d:e1:18:7f:
         6c:33:67:98:f6:3f:15:20:9d:fe:16:e4:db:85:b8:c2:e6:c9:
         c1:87:6f:ef:23:47:12:a6:59:23:91:0f:af:88:03:79:2e:52:
         e0:0a:60:94:b3:9b:1c:5c:7d:9a:c5:38:80:53:39:8e:dc:09:
         2f:68:b7:66:13:e6:6d:ea:b1:d8:23:65:bc:49:ce:84:f7:31:
         8f:b2:9a:e4:a9:9f:d5:23:3c:4f:5c:20:b0:65:44:1e:cc:aa:
         6c:e7:4c:4c:e3:a1:37:2d:88:69:9a:d1:2f:81:17:50:a7:fa:
         7c:c5:8e:67:17:5a:62:d5:46:cf:6c:37:0d:aa:5d:63:c0:a9:
         99:0a:df:f4:10:dc:ed:ca:4d:c0:1d:ae:ce:f0:a9:a8:99:ba:
         48:5e:fa:b7:e5:1e:a2:9e:68:b2:df:a0:5d:73:28:49:93:2e:
         81:93:f8:6c:92:ef:4e:10:d1:95:fa:8e:be:fc:17:26:fc:36:
         81:97:40:94:7f:20:e3:51:d4:24:9a:14:c9:46:3f:b8:c1:91:
         7c:02:97:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEmz8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
MjEyMGE5MDdiOTI3ODUzZmEwNzU5Yjg5Y2I1NTIzYjMzZTk3NmMwHhcNMjIwMTE0
MDMwMDAwWhcNMjcwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4YTEwM2JjMmVhZTg4
NGY1NzVhZGVlNTNlZWM0NDMyNWZkZDZhMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjl0MFQlXXbZEBWPN3yBYu7+5OmH6xBK0xpHJ+bxHeNt0SW0M
M37CIX6BzNXGV9JDpjzOz6beYvZPLXsqLW6GtTeioFmQ5dVm2DiuncrHw9kVnpW0
1tFasiQ1A438VWw9M0O3aG/HzTRx1G3Db94KWB+oEisbg/TYcwtxpFXYXSKOFhSy
46yyzzkQU5ZViTG11eWN7AmBl59C/y3Zcz2CNhEiDnHhdYLp253BcK4HFhBaTSOk
XE5RgWh/uFa8a9nCplvF2KDE5/5BOslxLy7pKk8oFUEAWpsY+UB9BqqFLea367KX
bbTus+pJqHVg8u+fUJwTmuGGElamz7dkVBTsUQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGtaCtq7waobW1OyUZvd+mKC3B+2MB8GA1UdIwQYMBaAFMEq+YnM4d2uwtSr
rXc0dIwcz2L2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTYyMTIw
YTkwN2I5Mjc4NTNmYTA3NTliODljYjU1MjNiMzNlOTc2Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDA1YzNlZGQtZDU4MC00ZDViLWI4YmQtYTZiNDU1
YmI1MWNlLzhhMTAzYmMyZWFlODg0ZjU3NWFkZWU1M2VlYzQ0MzI1ZmRkNmEwY2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MDVjM2VkZC1kNTgwLTRkNWItYjhiZC1hNmI0
NTViYjUxY2UvMTYyMTIwYTkwN2I5Mjc4NTNmYTA3NTliODljYjU1MjNiMzNlOTc2
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2yJjANBgkqhkiG9w0BAQsFAAOCAQEAUqvwO9uErRxPQv+o
ykgP3pMjLOUJhqRdFPpF0l7+KoLZ8SfGIXRtYz+wJ1Ypwswk3f0d4Rh/bDNnmPY/
FSCd/hbk24W4wubJwYdv7yNHEqZZI5EPr4gDeS5S4ApglLObHFx9msU4gFM5jtwJ
L2i3ZhPmbeqx2CNlvEnOhPcxj7Ka5Kmf1SM8T1wgsGVEHsyqbOdMTOOhNy2IaZrR
L4EXUKf6fMWOZxdaYtVGz2w3DapdY8CpmQrf9BDc7cpNwB2uzvCpqJm6SF76t+Ue
op5ost+gXXMoSZMugZP4bJLvThDRlfqOvvwXJvw2gZdAlH8g41HUJJoUyUY/uMGR
fAKXew==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org