Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/257fa4084d16cea4ad1c7dc29e6fe27fadd96fef.roa
File:                     257fa4084d16cea4ad1c7dc29e6fe27fadd96fef.roa (raw, json)
Hash identifier:          OeIU8cEFsXyvDSh/ujFLs9dbTvplG4dw+1NPWxNaDmE=
Subject key identifier:   6E:D3:27:DB:86:63:67:2D:5C:11:FD:EE:A2:BB:6F:75:EF:78:6E:69
Certificate issuer:       /CN=ccdb97cf62e833130f9a26635a4dd549cfb148ee
Certificate serial:       26F982
Authority key identifier: 58:B3:52:F4:7C:1F:FE:E8:12:53:83:B4:E5:57:57:D4:7A:79:62:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccdb97cf62e833130f9a26635a4dd549cfb148ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/257fa4084d16cea4ad1c7dc29e6fe27fadd96fef.roa
Signing time:             Thu 15 Feb 2024 16:19:28 +0000
ROA not before:           Thu 15 Feb 2024 16:19:28 +0000
ROA not after:            Sun 15 Feb 2026 16:19:28 +0000
asID:                     266786
IP address blocks:        45.226.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554242 (0x26f982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdb97cf62e833130f9a26635a4dd549cfb148ee
        Validity
            Not Before: Feb 15 16:19:28 2024 GMT
            Not After : Feb 15 16:19:28 2026 GMT
        Subject: CN=257fa4084d16cea4ad1c7dc29e6fe27fadd96fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:e2:70:b4:26:d2:2b:e9:b2:e9:57:fa:a0:
                    b3:ba:1c:3c:a5:df:4c:79:c1:90:3e:eb:05:79:44:
                    11:ec:26:04:aa:e0:20:96:7b:32:78:d3:d5:b1:01:
                    b4:88:57:6c:42:57:ce:ba:10:09:54:9f:82:1f:90:
                    c4:61:4c:b1:ef:5a:04:51:ad:f2:d8:1e:fe:a6:af:
                    dd:c5:89:b3:15:29:06:b9:96:1f:9c:ef:ae:5c:c2:
                    85:d3:da:35:91:c0:7f:35:01:f3:a1:f4:35:44:0f:
                    9a:0e:0d:f6:b8:b6:0e:e4:b1:83:13:1d:d0:ee:29:
                    17:17:88:75:d1:47:88:92:08:65:1b:6e:02:63:cd:
                    ac:d2:70:2a:b1:98:e0:66:14:f1:af:e4:b3:23:5e:
                    f8:b4:88:60:f5:cd:2b:be:02:66:0c:33:c7:92:f9:
                    ed:17:39:8d:fe:c0:32:04:1d:f4:cb:51:e7:2c:72:
                    31:4f:fa:eb:67:2f:62:8a:87:6b:2e:32:16:7a:d3:
                    00:91:d1:00:df:70:6c:ca:08:0e:6c:a6:e4:e4:95:
                    14:22:bd:26:50:52:46:6d:cb:09:f5:98:46:6a:b0:
                    aa:4a:c5:2d:47:a0:8f:13:53:31:a7:7c:c6:b4:67:
                    99:b8:cb:0c:cc:ea:c1:fc:38:4f:a5:43:78:8b:8f:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:27:DB:86:63:67:2D:5C:11:FD:EE:A2:BB:6F:75:EF:78:6E:69
            X509v3 Authority Key Identifier:
                keyid:58:B3:52:F4:7C:1F:FE:E8:12:53:83:B4:E5:57:57:D4:7A:79:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccdb97cf62e833130f9a26635a4dd549cfb148ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/257fa4084d16cea4ad1c7dc29e6fe27fadd96fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/ccdb97cf62e833130f9a26635a4dd549cfb148ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:d0:e8:aa:4d:b5:9d:b2:2b:cc:1e:08:95:1e:d5:70:06:
         92:9d:ea:7a:e3:ab:73:43:50:55:00:e8:8b:95:8f:ae:c4:76:
         3c:c2:7e:fd:5d:8c:cf:86:f5:0b:de:40:53:57:87:18:36:cd:
         1e:84:92:fd:d1:6f:50:c1:dd:6f:59:02:0e:a0:8e:66:e9:59:
         01:e7:2e:38:cf:43:a8:7b:5b:53:7e:31:05:43:d6:ee:26:cb:
         93:a1:12:6b:1e:4d:01:81:25:33:71:15:8a:e1:37:68:2a:2a:
         02:1b:5f:e0:32:d0:9c:fe:e8:08:f1:7c:0a:71:86:50:01:d4:
         a5:dd:64:0b:ce:95:f2:92:45:d1:67:26:91:5b:81:b3:90:57:
         ad:ef:68:e6:22:5b:4e:84:2f:d7:55:5e:45:37:19:89:5b:f3:
         a2:07:d8:9e:7e:ca:f7:ea:e7:ca:7b:21:e4:2d:2a:63:c6:96:
         73:2d:6f:3d:84:ed:7e:0b:74:47:de:64:57:0b:54:b3:94:67:
         ea:37:0a:a4:cd:04:ae:da:f9:df:a6:0d:a8:4a:66:9c:e5:1e:
         8a:23:40:05:81:f1:d9:15:07:be:42:92:f9:3c:b6:32:19:42:
         3e:54:65:63:1e:48:c6:bf:2b:91:29:fb:22:39:40:b2:4a:af:
         bc:63:6a:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJvmCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNj
ZGI5N2NmNjJlODMzMTMwZjlhMjY2MzVhNGRkNTQ5Y2ZiMTQ4ZWUwHhcNMjQwMjE1
MTYxOTI4WhcNMjYwMjE1MTYxOTI4WjAzMTEwLwYDVQQDEygyNTdmYTQwODRkMTZj
ZWE0YWQxYzdkYzI5ZTZmZTI3ZmFkZDk2ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlMTicLQm0ivpsulX+qCzuhw8pd9MecGQPusFeUQR7CYEquAg
lnsyeNPVsQG0iFdsQlfOuhAJVJ+CH5DEYUyx71oEUa3y2B7+pq/dxYmzFSkGuZYf
nO+uXMKF09o1kcB/NQHzofQ1RA+aDg32uLYO5LGDEx3Q7ikXF4h10UeIkghlG24C
Y82s0nAqsZjgZhTxr+SzI174tIhg9c0rvgJmDDPHkvntFzmN/sAyBB30y1HnLHIx
T/rrZy9iiodrLjIWetMAkdEA33BsyggObKbk5JUUIr0mUFJGbcsJ9ZhGarCqSsUt
R6CPE1Mxp3zGtGeZuMsMzOrB/DhPpUN4i4/xXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG7TJ9uGY2ctXBH97qK7b3XveG5pMB8GA1UdIwQYMBaAFFizUvR8H/7oElOD
tOVXV9R6eWIdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2NkYjk3
Y2Y2MmU4MzMxMzBmOWEyNjYzNWE0ZGQ1NDljZmIxNDhlZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTBkMGZjYmMtZjQ4Ny00MDg3LTk1ZGUtOGNmYzg0
N2JjOWFkLzI1N2ZhNDA4NGQxNmNlYTRhZDFjN2RjMjllNmZlMjdmYWRkOTZmZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MGQwZmNiYy1mNDg3LTQwODctOTVkZS04Y2Zj
ODQ3YmM5YWQvY2NkYjk3Y2Y2MmU4MzMxMzBmOWEyNjYzNWE0ZGQ1NDljZmIxNDhl
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3iuDANBgkqhkiG9w0BAQsFAAOCAQEAA8nQ6KpNtZ2yK8we
CJUe1XAGkp3qeuOrc0NQVQDoi5WPrsR2PMJ+/V2Mz4b1C95AU1eHGDbNHoSS/dFv
UMHdb1kCDqCOZulZAecuOM9DqHtbU34xBUPW7ibLk6ESax5NAYElM3EViuE3aCoq
Ahtf4DLQnP7oCPF8CnGGUAHUpd1kC86V8pJF0WcmkVuBs5BXre9o5iJbToQv11Ve
RTcZiVvzogfYnn7K9+rnynsh5C0qY8aWcy1vPYTtfgt0R95kVwtUs5Rn6jcKpM0E
rtr536YNqEpmnOUeiiNABYHx2RUHvkKS+Ty2MhlCPlRlYx5Ixr8rkSn7IjlAskqv
vGNqow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org