Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/65119c5352e8cfa0af5a8f1a107c6c959298512e.roa
File:                     65119c5352e8cfa0af5a8f1a107c6c959298512e.roa (raw, json)
Hash identifier:          Bp33y02U326HetzxKbWF5w72SOy1zBAwQFSCHhbrGK0=
Subject key identifier:   AA:95:E7:9E:DB:7C:AA:5B:AB:42:72:33:D1:4A:F4:62:61:11:D0:73
Certificate issuer:       /CN=47a49fbd64a926132f043b187466f97225883214
Certificate serial:       0EED64
Authority key identifier: 57:75:F5:2C:60:16:7C:48:58:8B:A2:4E:A7:B8:A1:E9:E6:AB:ED:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47a49fbd64a926132f043b187466f97225883214.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/65119c5352e8cfa0af5a8f1a107c6c959298512e.roa
Signing time:             Tue 18 Apr 2023 07:45:37 +0000
ROA not before:           Mon 17 Apr 2023 07:45:37 +0000
ROA not after:            Fri 18 Apr 2025 07:45:37 +0000
asID:                     266885
IP address blocks:        45.161.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978276 (0xeed64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a49fbd64a926132f043b187466f97225883214
        Validity
            Not Before: Apr 17 07:45:37 2023 GMT
            Not After : Apr 18 07:45:37 2025 GMT
        Subject: CN=65119c5352e8cfa0af5a8f1a107c6c959298512e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:eb:9d:2b:16:66:b6:8e:89:1d:fb:3c:9c:
                    af:3a:1a:3b:da:59:d8:6b:06:4e:09:ce:10:7a:da:
                    8e:71:09:3c:c0:46:77:bf:a4:06:48:ce:27:8c:76:
                    99:cd:be:6a:81:15:dc:09:86:ba:a7:db:f3:f6:0d:
                    be:38:c4:a0:c8:12:4b:e2:0c:7f:06:a6:74:8e:9f:
                    e1:35:cd:14:10:8e:da:1d:2a:7d:d6:5c:33:dc:2c:
                    5a:c4:da:cc:15:28:07:f5:57:27:ae:77:69:e2:61:
                    b1:4d:14:cb:d2:14:c0:b4:7a:80:f2:c3:9c:cf:8c:
                    75:54:ff:39:d5:79:11:a4:f2:b6:51:db:c2:a7:a5:
                    bf:b7:ed:24:cb:81:76:90:27:fc:9f:1f:42:02:6c:
                    1a:fe:cd:50:d0:67:b4:52:12:2a:f0:e9:85:ba:2f:
                    34:47:50:6f:e6:d0:46:9c:37:53:a5:dc:32:85:32:
                    1c:06:44:b1:60:fb:d1:3b:51:15:eb:8f:b0:c8:c5:
                    f9:a4:07:ce:6a:8a:14:f9:00:26:f1:ec:0f:55:8e:
                    38:da:bd:b0:1a:2e:75:a1:17:6b:de:e2:67:27:4d:
                    2a:98:bc:e5:f1:56:ae:9c:aa:eb:db:64:38:b5:95:
                    f3:9a:33:ea:4e:3e:25:6f:13:be:58:26:d6:42:9b:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:95:E7:9E:DB:7C:AA:5B:AB:42:72:33:D1:4A:F4:62:61:11:D0:73
            X509v3 Authority Key Identifier:
                keyid:57:75:F5:2C:60:16:7C:48:58:8B:A2:4E:A7:B8:A1:E9:E6:AB:ED:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47a49fbd64a926132f043b187466f97225883214.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/65119c5352e8cfa0af5a8f1a107c6c959298512e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/47a49fbd64a926132f043b187466f97225883214.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:02:8c:e7:66:81:f5:b0:c9:8d:14:1a:62:f4:66:ea:45:b1:
         8c:f9:9b:ba:6a:76:0e:2e:9b:fa:3a:cb:0d:6b:3c:8c:ef:95:
         b1:bf:52:8e:f9:19:11:3d:55:c9:46:42:5b:f8:e2:09:61:b5:
         6c:de:ba:ac:e2:3e:95:0a:3b:fd:41:7c:1b:6d:6d:cd:84:33:
         30:ca:c4:42:3f:39:de:1b:30:ee:72:3d:15:56:b9:69:e2:1a:
         d3:7e:88:11:59:8b:b8:18:ff:c0:c9:b0:ef:de:8c:ab:ac:99:
         3c:e7:4b:6f:88:bd:4c:17:a2:c3:1f:d1:d1:85:fb:d4:23:83:
         9f:b4:03:86:4d:70:67:b3:85:db:f9:a1:76:89:a3:aa:8a:78:
         b5:38:d6:2c:40:11:d5:f6:57:09:58:4c:5b:c2:3a:1a:4e:26:
         86:9d:b8:21:05:cb:0e:12:48:3f:cb:6b:23:7f:07:f7:b0:23:
         7b:09:0a:4f:86:73:d6:d2:cd:10:77:d1:b1:97:d0:9e:0e:7c:
         26:86:ee:d8:ae:8b:6c:b9:90:31:e7:e5:77:43:49:e7:9d:2a:
         46:aa:90:8b:49:64:8f:ba:41:ed:b9:a2:44:8a:28:8e:00:9b:
         c9:e7:41:70:27:6b:61:37:8c:4f:53:08:f6:ff:30:e5:f3:0b:
         3b:ee:68:3d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDu1kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
YTQ5ZmJkNjRhOTI2MTMyZjA0M2IxODc0NjZmOTcyMjU4ODMyMTQwHhcNMjMwNDE3
MDc0NTM3WhcNMjUwNDE4MDc0NTM3WjAzMTEwLwYDVQQDEyg2NTExOWM1MzUyZThj
ZmEwYWY1YThmMWExMDdjNmM5NTkyOTg1MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApDTrnSsWZraOiR37PJyvOho72lnYawZOCc4QetqOcQk8wEZ3
v6QGSM4njHaZzb5qgRXcCYa6p9vz9g2+OMSgyBJL4gx/BqZ0jp/hNc0UEI7aHSp9
1lwz3CxaxNrMFSgH9Vcnrndp4mGxTRTL0hTAtHqA8sOcz4x1VP851XkRpPK2UdvC
p6W/t+0ky4F2kCf8nx9CAmwa/s1Q0Ge0UhIq8OmFui80R1Bv5tBGnDdTpdwyhTIc
BkSxYPvRO1EV64+wyMX5pAfOaooU+QAm8ewPVY442r2wGi51oRdr3uJnJ00qmLzl
8VaunKrr22Q4tZXzmjPqTj4lbxO+WCbWQpvM5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKqV557bfKpbq0JyM9FK9GJhEdBzMB8GA1UdIwQYMBaAFFd19SxgFnxIWIui
Tqe4oenmq+0YMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDdhNDlm
YmQ2NGE5MjYxMzJmMDQzYjE4NzQ2NmY5NzIyNTg4MzIxNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGY5YmJlOWEtOTUzYy00YmVjLTgzNTAtNjcwNjAy
ZWIyZTJmLzY1MTE5YzUzNTJlOGNmYTBhZjVhOGYxYTEwN2M2Yzk1OTI5ODUxMmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZjliYmU5YS05NTNjLTRiZWMtODM1MC02NzA2
MDJlYjJlMmYvNDdhNDlmYmQ2NGE5MjYxMzJmMDQzYjE4NzQ2NmY5NzIyNTg4MzIx
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2hdDANBgkqhkiG9w0BAQsFAAOCAQEATwKM52aB9bDJjRQa
YvRm6kWxjPmbump2Di6b+jrLDWs8jO+Vsb9SjvkZET1VyUZCW/jiCWG1bN66rOI+
lQo7/UF8G21tzYQzMMrEQj853hsw7nI9FVa5aeIa036IEVmLuBj/wMmw796Mq6yZ
POdLb4i9TBeiwx/R0YX71CODn7QDhk1wZ7OF2/mhdomjqop4tTjWLEAR1fZXCVhM
W8I6Gk4mhp24IQXLDhJIP8trI38H97AjewkKT4Zz1tLNEHfRsZfQng58Jobu2K6L
bLmQMefld0NJ550qRqqQi0lkj7pB7bmiRIoojgCbyedBcCdrYTeMT1MI9v8w5fML
O+5oPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org