Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/9575a64b060b00a634fafeaba68848033a90abfa.roa
File:                     9575a64b060b00a634fafeaba68848033a90abfa.roa (raw, json)
Hash identifier:          ABkCFAKrYjyu2vZmGRHKUf5eP8KG8MohkZRMKJ6GH4A=
Subject key identifier:   09:10:39:96:35:0D:83:97:DB:87:19:03:15:68:EC:B8:72:06:82:8A
Certificate issuer:       /CN=cf4915c9e7820927bad31711777cdb049ec85e66
Certificate serial:       1769CC
Authority key identifier: F7:25:26:2A:74:53:36:17:8C:F8:ED:98:E6:95:58:E4:6A:64:D6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf4915c9e7820927bad31711777cdb049ec85e66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/9575a64b060b00a634fafeaba68848033a90abfa.roa
Signing time:             Wed 27 Mar 2024 08:30:03 +0000
ROA not before:           Wed 27 Mar 2024 08:30:03 +0000
ROA not after:            Fri 27 Mar 2026 08:30:03 +0000
asID:                     267731
IP address blocks:        45.166.76.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534412 (0x1769cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4915c9e7820927bad31711777cdb049ec85e66
        Validity
            Not Before: Mar 27 08:30:03 2024 GMT
            Not After : Mar 27 08:30:03 2026 GMT
        Subject: CN=9575a64b060b00a634fafeaba68848033a90abfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:10:c0:01:cf:cf:82:d8:cb:ad:28:db:ba:
                    88:f7:c3:51:1e:63:f4:be:4f:dc:4a:ee:cd:e5:01:
                    f4:ae:da:ea:31:e5:c3:0f:87:fd:3c:1d:f0:11:e9:
                    85:29:66:df:a8:8e:96:b2:62:b9:da:da:81:3a:9e:
                    a0:e5:37:92:42:40:2c:b9:12:60:62:7b:da:91:51:
                    6b:48:f6:b2:b9:66:b3:b8:b7:2a:01:4e:94:40:74:
                    ea:77:2f:7d:b0:3b:e2:84:83:a9:8c:1f:d0:16:53:
                    d5:35:a9:00:b2:8d:de:d5:8a:a6:59:0c:06:71:30:
                    de:4b:45:f1:6d:8c:58:2e:9e:04:0d:be:12:31:14:
                    4a:7b:07:51:1d:38:97:6c:5a:d4:57:64:15:cf:0f:
                    1b:57:20:d7:ec:c2:b9:f4:92:fc:08:5a:7f:a4:ac:
                    67:01:48:fc:92:56:7e:0e:96:90:5f:4c:89:ca:df:
                    42:08:a1:b3:ce:df:40:6f:28:58:9e:17:15:11:cb:
                    dc:09:33:64:0c:fd:0b:64:b0:63:9f:1a:cf:4f:11:
                    86:cc:07:fd:43:13:2f:22:fc:a1:c8:f3:c7:ad:d0:
                    00:89:3c:98:fc:bc:57:2d:c7:30:27:b6:b7:fd:ce:
                    89:9c:bf:72:6c:47:e7:cd:8e:35:8b:cf:8a:b2:67:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:39:96:35:0D:83:97:DB:87:19:03:15:68:EC:B8:72:06:82:8A
            X509v3 Authority Key Identifier:
                keyid:F7:25:26:2A:74:53:36:17:8C:F8:ED:98:E6:95:58:E4:6A:64:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf4915c9e7820927bad31711777cdb049ec85e66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/9575a64b060b00a634fafeaba68848033a90abfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/cf4915c9e7820927bad31711777cdb049ec85e66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:ff:3b:62:e8:d8:6f:70:64:8b:cf:b6:a6:15:33:8b:15:90:
         13:1a:2a:cb:37:d8:ef:f2:be:d5:0b:30:d7:c2:76:0c:8b:83:
         6c:e2:38:d4:7d:4f:4e:a6:eb:e7:ff:ca:d6:22:08:ba:bf:0a:
         ab:eb:e7:5c:91:eb:67:d4:f1:81:56:58:fc:4d:55:f4:71:ad:
         04:6c:b5:0b:0d:9a:21:de:d7:20:f7:87:f2:e0:6a:5e:a1:d4:
         77:62:34:0f:ee:25:ea:53:87:17:02:78:2e:c8:8f:f8:08:98:
         2f:2f:b7:3e:7b:06:a2:c7:fe:5c:82:78:b0:8c:4d:de:5d:53:
         12:78:59:d8:e7:a1:b1:fa:93:73:da:26:93:4f:8d:f2:17:d7:
         49:15:02:b3:7f:25:53:f2:c0:ad:d9:63:6b:ad:6d:44:57:b5:
         e7:ec:95:41:71:7b:6c:d8:78:86:46:e8:0a:47:e1:8a:13:88:
         09:02:e4:56:a5:6f:1f:4d:5d:50:f0:dd:b7:cc:bd:2a:d1:15:
         5b:96:04:01:74:a8:2c:d9:a9:07:2e:9c:7c:6e:f4:e0:52:fa:
         14:67:9f:47:2a:d9:19:96:07:a8:80:fe:08:cf:bc:2c:e4:d2:
         ad:be:34:80:6c:ea:24:c1:1a:1c:4b:42:6c:d6:f4:b2:68:02:
         aa:d2:0b:21
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF2nMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
NDkxNWM5ZTc4MjA5MjdiYWQzMTcxMTc3N2NkYjA0OWVjODVlNjYwHhcNMjQwMzI3
MDgzMDAzWhcNMjYwMzI3MDgzMDAzWjAzMTEwLwYDVQQDEyg5NTc1YTY0YjA2MGIw
MGE2MzRmYWZlYWJhNjg4NDgwMzNhOTBhYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr80QwAHPz4LYy60o27qI98NRHmP0vk/cSu7N5QH0rtrqMeXD
D4f9PB3wEemFKWbfqI6WsmK52tqBOp6g5TeSQkAsuRJgYnvakVFrSPayuWazuLcq
AU6UQHTqdy99sDvihIOpjB/QFlPVNakAso3e1YqmWQwGcTDeS0XxbYxYLp4EDb4S
MRRKewdRHTiXbFrUV2QVzw8bVyDX7MK59JL8CFp/pKxnAUj8klZ+DpaQX0yJyt9C
CKGzzt9AbyhYnhcVEcvcCTNkDP0LZLBjnxrPTxGGzAf9QxMvIvyhyPPHrdAAiTyY
/LxXLccwJ7a3/c6JnL9ybEfnzY41i8+KsmcMKQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAkQOZY1DYOX24cZAxVo7LhyBoKKMB8GA1UdIwQYMBaAFPclJip0UzYXjPjt
mOaVWORqZNaCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Y0OTE1
YzllNzgyMDkyN2JhZDMxNzExNzc3Y2RiMDQ5ZWM4NWU2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTE1ZGFlMDgtZTFmOC00NDFjLWI0MmUtMDQxMTVm
MGE2YmY2Lzk1NzVhNjRiMDYwYjAwYTYzNGZhZmVhYmE2ODg0ODAzM2E5MGFiZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MTVkYWUwOC1lMWY4LTQ0MWMtYjQyZS0wNDEx
NWYwYTZiZjYvY2Y0OTE1YzllNzgyMDkyN2JhZDMxNzExNzc3Y2RiMDQ5ZWM4NWU2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2mTDANBgkqhkiG9w0BAQsFAAOCAQEAt/87YujYb3Bki8+2
phUzixWQExoqyzfY7/K+1Qsw18J2DIuDbOI41H1PTqbr5//K1iIIur8Kq+vnXJHr
Z9TxgVZY/E1V9HGtBGy1Cw2aId7XIPeH8uBqXqHUd2I0D+4l6lOHFwJ4LsiP+AiY
Ly+3PnsGosf+XIJ4sIxN3l1TEnhZ2OehsfqTc9omk0+N8hfXSRUCs38lU/LArdlj
a61tRFe15+yVQXF7bNh4hkboCkfhihOICQLkVqVvH01dUPDdt8y9KtEVW5YEAXSo
LNmpBy6cfG704FL6FGefRyrZGZYHqID+CM+8LOTSrb40gGzqJMEaHEtCbNb0smgC
qtILIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org