Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/54adab4e4cb0cfebc52fc3d948dda8e25a28abdd.roa
File:                     54adab4e4cb0cfebc52fc3d948dda8e25a28abdd.roa (raw, json)
Hash identifier:          pxpD34yY8SXJtGc8OjlofDxit3/rqkYsMH8TcGUZbwo=
Subject key identifier:   B1:D7:32:B5:D9:D2:7A:0A:8F:BD:A2:C3:47:0D:4C:E3:68:BF:83:AB
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       086340
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/54adab4e4cb0cfebc52fc3d948dda8e25a28abdd.roa
Signing time:             Tue 27 Feb 2024 00:51:25 +0000
ROA not before:           Tue 27 Feb 2024 00:51:25 +0000
ROA not after:            Fri 27 Feb 2026 00:51:25 +0000
asID:                     11172
IP address blocks:        148.245.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549696 (0x86340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:51:25 2024 GMT
            Not After : Feb 27 00:51:25 2026 GMT
        Subject: CN=54adab4e4cb0cfebc52fc3d948dda8e25a28abdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:7c:ea:ea:dc:a3:96:9a:27:2b:b5:06:ed:
                    00:8f:e8:59:7e:89:5c:6a:2b:26:86:bf:b7:39:e4:
                    bf:f8:f9:a7:a3:27:f4:62:1f:e9:20:76:33:70:9d:
                    37:4d:a7:f0:5e:0d:0a:13:d1:85:e1:a4:dd:9f:41:
                    d5:ac:08:47:f0:b9:0e:28:17:43:0a:72:12:a4:70:
                    3e:a4:0c:a5:15:ab:cc:32:76:87:55:5d:9c:b8:3e:
                    b4:5f:22:66:e2:a3:1b:f6:89:22:ec:04:a8:e6:ff:
                    30:cf:55:b5:a8:1e:ec:d8:0b:ee:a3:fc:7b:b4:40:
                    6d:68:a8:a4:28:f9:a6:e1:c8:69:de:5b:bd:7d:90:
                    b5:1d:74:97:b7:10:15:bc:ba:dc:7e:a3:bb:a7:51:
                    10:e4:0f:22:52:50:00:86:64:1c:ed:2d:77:bf:c9:
                    30:9a:ae:8b:cb:f8:e9:67:b8:d9:90:e3:c6:c7:d0:
                    b4:f7:a3:8e:64:2f:c4:5e:5f:d5:bc:42:25:83:8f:
                    21:d4:86:12:a3:1b:c6:44:9b:67:98:da:b2:1c:9d:
                    1b:d5:a0:48:f7:64:d4:86:ed:e1:78:8a:3f:ef:f3:
                    96:00:aa:b0:9d:a4:f6:e6:1a:78:6f:2d:0f:89:6a:
                    7f:c1:48:9a:94:0c:5f:ba:48:ac:28:40:22:52:0b:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D7:32:B5:D9:D2:7A:0A:8F:BD:A2:C3:47:0D:4C:E3:68:BF:83:AB
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/54adab4e4cb0cfebc52fc3d948dda8e25a28abdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:32:74:c5:4b:75:ae:07:30:89:3f:83:1f:d4:a6:7f:18:29:
         66:48:20:28:5f:56:e2:d1:85:78:31:3c:ea:ca:44:7d:2f:ff:
         e4:98:68:64:fc:36:15:ae:60:49:8e:5f:a9:f7:98:48:0b:81:
         d9:ce:7e:79:83:ee:1f:21:ed:94:4f:4b:1e:41:9f:d9:a6:b5:
         00:2c:30:ba:ad:17:8e:18:84:ca:b6:31:2b:97:fe:3b:84:48:
         3b:04:1e:ef:5e:9f:e5:db:66:1d:83:74:79:47:19:e7:ab:77:
         5b:3e:f6:e0:6d:cd:59:16:eb:52:bf:b4:2e:9f:82:06:df:b2:
         f8:a0:aa:f3:eb:3f:e9:9b:26:99:07:3f:1c:1b:26:d5:7e:fb:
         1c:70:3f:56:16:7b:b2:b6:de:d9:d4:22:62:e4:dd:41:04:55:
         ef:c1:5c:31:18:87:4a:b3:c5:61:90:80:22:b2:38:93:20:0e:
         e1:07:e2:c6:f2:12:4c:11:db:25:75:0e:ba:e6:a5:bb:54:e3:
         c3:2a:25:0c:38:55:c1:07:5e:89:97:9a:9d:25:2e:36:5e:07:
         08:6d:21:0b:64:b5:6c:8c:3e:d0:27:de:ae:bf:04:71:42:92:
         ca:6c:a1:29:cf:d1:1c:6f:df:62:6c:77:96:a3:c1:d9:61:5d:
         31:88:2a:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCGNAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
OWUwMjA3ZWY2MjI4ZjdmNWQ1OTk1YWUzNjc5ZGM4MWFhZjMxNTYwHhcNMjQwMjI3
MDA1MTI1WhcNMjYwMjI3MDA1MTI1WjAzMTEwLwYDVQQDEyg1NGFkYWI0ZTRjYjBj
ZmViYzUyZmMzZDk0OGRkYThlMjVhMjhhYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAga586urco5aaJyu1Bu0Aj+hZfolcaismhr+3OeS/+Pmnoyf0
Yh/pIHYzcJ03TafwXg0KE9GF4aTdn0HVrAhH8LkOKBdDCnISpHA+pAylFavMMnaH
VV2cuD60XyJm4qMb9oki7ASo5v8wz1W1qB7s2Avuo/x7tEBtaKikKPmm4chp3lu9
fZC1HXSXtxAVvLrcfqO7p1EQ5A8iUlAAhmQc7S13v8kwmq6Ly/jpZ7jZkOPGx9C0
96OOZC/EXl/VvEIlg48h1IYSoxvGRJtnmNqyHJ0b1aBI92TUhu3heIo/7/OWAKqw
naT25hp4by0PiWp/wUialAxfukisKEAiUguH1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLHXMrXZ0noKj72iw0cNTONov4OrMB8GA1UdIwQYMBaAFJ6PZLBnPvGgjB6o
2IpJytQ+j8OJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjI5ZTAy
MDdlZjYyMjhmN2Y1ZDU5OTVhZTM2NzlkYzgxYWFmMzE1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZlOWJjNjEtMTg2YS00NWRiLTlhN2EtMTFlMTAy
YTkwYmY0LzU0YWRhYjRlNGNiMGNmZWJjNTJmYzNkOTQ4ZGRhOGUyNWEyOGFiZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmU5YmM2MS0xODZhLTQ1ZGItOWE3YS0xMWUx
MDJhOTBiZjQvYjI5ZTAyMDdlZjYyMjhmN2Y1ZDU5OTVhZTM2NzlkYzgxYWFmMzE1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJT1hzANBgkqhkiG9w0BAQsFAAOCAQEAAzJ0xUt1rgcwiT+D
H9SmfxgpZkggKF9W4tGFeDE86spEfS//5JhoZPw2Fa5gSY5fqfeYSAuB2c5+eYPu
HyHtlE9LHkGf2aa1ACwwuq0XjhiEyrYxK5f+O4RIOwQe716f5dtmHYN0eUcZ56t3
Wz724G3NWRbrUr+0Lp+CBt+y+KCq8+s/6ZsmmQc/HBsm1X77HHA/VhZ7srbe2dQi
YuTdQQRV78FcMRiHSrPFYZCAIrI4kyAO4QfixvISTBHbJXUOuualu1TjwyolDDhV
wQdeiZeanSUuNl4HCG0hC2S1bIw+0Cferr8EcUKSymyhKc/RHG/fYmx3lqPB2WFd
MYgqJg==
-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org