Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/f2d9f033e455c09a4012c84aa1329bb7f5d67b77.roa
File:                     f2d9f033e455c09a4012c84aa1329bb7f5d67b77.roa (raw, json)
Hash identifier:          9IKp0C78KHdOWDgUPTaxVBSTS1FrjxYoTg+Gmyqf3ww=
Subject key identifier:   4E:07:6A:B5:54:97:71:0A:A8:C3:B0:FF:3A:1A:74:D4:D2:D6:CA:B8
Certificate issuer:       /CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
Certificate serial:       01AAC6
Authority key identifier: B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/f2d9f033e455c09a4012c84aa1329bb7f5d67b77.roa
Signing time:             Sat 01 Jul 2023 01:00:49 +0000
ROA not before:           Fri 30 Jun 2023 01:00:48 +0000
ROA not after:            Tue 01 Jul 2025 01:00:48 +0000
asID:                     269811
IP address blocks:        45.185.186.0/24 maxlen: 24
                          45.185.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109254 (0x1aac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
        Validity
            Not Before: Jun 30 01:00:48 2023 GMT
            Not After : Jul  1 01:00:48 2025 GMT
        Subject: CN=f2d9f033e455c09a4012c84aa1329bb7f5d67b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:b9:34:11:4f:bf:2f:3a:c0:d8:8a:a1:f3:
                    2a:50:a0:dd:82:26:a8:8d:57:81:fc:95:1f:65:c7:
                    ba:28:ac:d0:8d:b1:7f:0a:61:16:3f:7c:4d:fe:15:
                    d4:4d:72:95:b8:65:62:52:85:cd:0b:01:95:8b:2b:
                    f9:6c:e4:aa:9c:59:f8:ed:8f:c1:f3:72:1b:69:93:
                    b3:5f:7b:73:a4:68:e6:af:c7:7c:a4:6f:a6:49:b8:
                    c3:26:20:6c:e1:3c:79:3b:2b:18:07:92:be:13:8d:
                    2a:53:52:bc:42:4e:1f:24:a1:c1:86:07:54:c5:3a:
                    a6:6b:63:62:14:03:9b:a6:c1:27:33:6c:d5:b0:77:
                    1a:3b:ae:aa:13:d7:47:94:46:05:31:e3:fb:24:09:
                    c5:bd:75:ac:7d:e1:1e:2b:d4:90:e8:dc:b8:82:f7:
                    50:6a:72:a9:6f:7e:15:bd:83:8f:f8:5f:64:a3:21:
                    d9:a4:01:7d:be:de:af:1e:a4:ec:97:4a:a8:da:2b:
                    71:2b:fd:89:2b:02:ff:3d:1c:ae:a2:65:cd:34:f7:
                    1e:ca:c5:3e:fd:e6:4a:70:84:53:20:aa:d3:89:31:
                    f4:07:40:7d:d7:29:ce:0b:d6:10:c5:68:bc:30:05:
                    07:d2:b3:c6:9f:de:55:45:fe:fb:ac:fb:3d:f0:a0:
                    86:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:6A:B5:54:97:71:0A:A8:C3:B0:FF:3A:1A:74:D4:D2:D6:CA:B8
            X509v3 Authority Key Identifier:
                keyid:B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/f2d9f033e455c09a4012c84aa1329bb7f5d67b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:43:79:5b:a4:2d:6b:00:04:15:05:22:91:aa:81:db:b4:ca:
         c4:14:57:bf:16:d1:2f:4e:93:d9:e0:c3:e3:b3:b9:50:a4:ee:
         2c:8f:97:c2:65:04:45:02:63:e5:dc:ff:6d:80:1f:27:73:61:
         c7:54:b8:ef:60:92:86:bc:6d:c4:8f:04:c9:72:c1:b6:b5:64:
         3c:74:bc:d9:0a:7f:ac:82:e6:7b:92:95:d7:9c:5e:45:88:fd:
         d5:f5:29:e7:d2:b7:04:31:65:d9:3b:cf:dc:41:91:ae:9c:44:
         ba:67:8f:0c:e1:68:30:f0:93:0c:d1:2d:39:4a:af:52:ef:d5:
         c3:38:f9:f5:7f:ed:37:4d:64:77:23:96:46:c9:c8:8d:74:57:
         04:e4:c3:a5:0f:8d:07:2f:77:ac:4a:39:56:23:94:34:18:b9:
         23:d5:ba:cf:a7:fb:40:4e:04:24:b2:94:30:f0:01:95:d7:b2:
         c5:2e:f3:4a:05:b9:76:b4:2e:3c:30:0d:30:37:bb:21:3e:e4:
         7b:d7:81:02:89:45:ac:3e:e1:e9:0c:8e:16:93:55:36:67:64:
         f3:01:10:0f:f6:45:09:6f:d7:86:29:87:67:3c:7b:84:1f:7d:
         74:bc:e1:b9:51:2a:a8:d1:9c:07:46:69:48:08:fe:c0:f1:5d:
         db:9e:e4:08
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAarGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
YzYzZDVkM2MwOTc5YmQwYzI3YWMzNWQ4ODJmMjlmOWZhYmE1MDkwHhcNMjMwNjMw
MDEwMDQ4WhcNMjUwNzAxMDEwMDQ4WjAzMTEwLwYDVQQDEyhmMmQ5ZjAzM2U0NTVj
MDlhNDAxMmM4NGFhMTMyOWJiN2Y1ZDY3Yjc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1625NBFPvy86wNiKofMqUKDdgiaojVeB/JUfZce6KKzQjbF/
CmEWP3xN/hXUTXKVuGViUoXNCwGViyv5bOSqnFn47Y/B83IbaZOzX3tzpGjmr8d8
pG+mSbjDJiBs4Tx5OysYB5K+E40qU1K8Qk4fJKHBhgdUxTqma2NiFAObpsEnM2zV
sHcaO66qE9dHlEYFMeP7JAnFvXWsfeEeK9SQ6Ny4gvdQanKpb34VvYOP+F9koyHZ
pAF9vt6vHqTsl0qo2itxK/2JKwL/PRyuomXNNPceysU+/eZKcIRTIKrTiTH0B0B9
1ynOC9YQxWi8MAUH0rPGn95VRf77rPs98KCGUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE4HarVUl3EKqMOw/zoadNTS1sq4MB8GA1UdIwQYMBaAFLDDh53Wbn6ed0EP
A5cr434OXLNTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThjNjNk
NWQzYzA5NzliZDBjMjdhYzM1ZDg4MmYyOWY5ZmFiYTUwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGI3Yjc2NGQtZGJjNi00Njc5LThkMDctOWU4NGRl
ZmNhMGEwL2YyZDlmMDMzZTQ1NWMwOWE0MDEyYzg0YWExMzI5YmI3ZjVkNjdiNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YjdiNzY0ZC1kYmM2LTQ2NzktOGQwNy05ZTg0
ZGVmY2EwYTAvZThjNjNkNWQzYzA5NzliZDBjMjdhYzM1ZDg4MmYyOWY5ZmFiYTUw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS25ujANBgkqhkiG9w0BAQsFAAOCAQEAkkN5W6QtawAEFQUi
kaqB27TKxBRXvxbRL06T2eDD47O5UKTuLI+XwmUERQJj5dz/bYAfJ3Nhx1S472CS
hrxtxI8EyXLBtrVkPHS82Qp/rILme5KV15xeRYj91fUp59K3BDFl2TvP3EGRrpxE
umePDOFoMPCTDNEtOUqvUu/Vwzj59X/tN01kdyOWRsnIjXRXBOTDpQ+NBy93rEo5
ViOUNBi5I9W6z6f7QE4EJLKUMPABldeyxS7zSgW5drQuPDANMDe7IT7ke9eBAolF
rD7h6QyOFpNVNmdk8wEQD/ZFCW/XhimHZzx7hB99dLzhuVEqqNGcB0ZpSAj+wPFd
257kCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org