Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/d5e12eb3a80aa12bac3065df98005a71d01a90ac.roa
File:                     d5e12eb3a80aa12bac3065df98005a71d01a90ac.roa (raw, json)
Hash identifier:          52OCeSbZTrpl3vmVEdzkYSl6JS3QNgu8MW6JAqIyMNc=
Subject key identifier:   AD:39:08:AE:CA:EC:46:63:01:32:17:40:56:ED:71:E4:0A:CA:EE:0A
Certificate issuer:       /CN=cf4915c9e7820927bad31711777cdb049ec85e66
Certificate serial:       056527
Authority key identifier: F7:25:26:2A:74:53:36:17:8C:F8:ED:98:E6:95:58:E4:6A:64:D6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf4915c9e7820927bad31711777cdb049ec85e66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/d5e12eb3a80aa12bac3065df98005a71d01a90ac.roa
Signing time:             Mon 28 Mar 2022 15:05:20 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     267731
IP address blocks:        45.166.76.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353575 (0x56527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4915c9e7820927bad31711777cdb049ec85e66
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=d5e12eb3a80aa12bac3065df98005a71d01a90ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:46:25:71:37:79:86:bb:57:36:aa:09:c8:7d:
                    10:0a:66:6b:73:c3:a8:40:eb:71:f6:6d:16:4b:2d:
                    15:cb:65:d2:39:ef:7f:ae:a9:33:b3:6f:71:5c:62:
                    3f:51:fb:a1:81:7b:04:55:45:57:10:b2:50:c9:6d:
                    e7:cf:11:f3:7f:c6:84:26:53:2b:1b:8a:a1:c2:5f:
                    d3:d9:4d:b8:18:64:19:8b:dd:61:f8:36:bd:7e:14:
                    2e:6e:61:ee:a7:69:a0:6e:8d:74:23:b0:73:fc:a4:
                    a3:c5:74:a1:e5:09:00:df:ea:93:7a:5c:4c:bf:b1:
                    1c:e7:73:ab:d5:a5:75:d5:d3:d8:12:69:2a:2a:d0:
                    38:64:9f:4d:8f:85:dc:e3:73:98:69:c1:ee:e7:f4:
                    11:e8:af:0d:e6:45:1c:1e:2b:20:cb:52:72:0f:10:
                    b9:0e:22:da:94:47:e8:97:36:c8:66:b8:df:57:43:
                    09:7b:67:2d:6c:b8:f2:08:d2:74:af:52:ed:5c:c1:
                    00:77:7f:83:6b:de:9a:1b:d9:2f:77:8c:1f:c7:40:
                    1f:26:6c:00:26:d3:9b:75:a5:fa:ce:5e:ba:1d:2b:
                    03:9c:1b:1c:fe:2c:bc:fb:a1:25:f8:fb:49:24:12:
                    48:45:bf:ef:69:aa:ae:50:c8:50:b3:76:10:43:5c:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:08:AE:CA:EC:46:63:01:32:17:40:56:ED:71:E4:0A:CA:EE:0A
            X509v3 Authority Key Identifier:
                keyid:F7:25:26:2A:74:53:36:17:8C:F8:ED:98:E6:95:58:E4:6A:64:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf4915c9e7820927bad31711777cdb049ec85e66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/d5e12eb3a80aa12bac3065df98005a71d01a90ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/cf4915c9e7820927bad31711777cdb049ec85e66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:f1:53:c9:3b:1a:d4:a8:46:c8:7a:0d:0a:3d:4b:02:d6:
         ab:e1:20:ab:53:70:28:2e:c9:66:1b:75:f1:d7:bc:e1:4c:41:
         5b:7b:32:6d:2e:9c:d5:71:36:40:8c:ac:6d:50:c4:03:dc:47:
         77:09:48:e5:24:0f:b7:be:77:69:fd:70:52:28:18:d2:21:98:
         ce:dc:57:c1:71:ae:f5:dc:9f:0e:bf:5d:16:b2:17:f9:a7:58:
         9c:3b:28:83:b9:7e:70:e4:41:6e:11:76:38:2f:52:17:fc:e7:
         61:d5:be:90:3e:df:80:89:eb:08:99:79:a9:c9:b7:46:73:44:
         ed:32:a6:11:2c:9c:58:dd:d7:05:33:28:95:15:9b:5f:eb:81:
         6a:90:e4:0b:b7:81:3e:49:d9:d4:61:b2:52:b0:10:6f:ad:b1:
         db:33:a5:69:64:77:06:28:fe:b6:1a:02:a1:9e:16:8b:b0:31:
         f5:ca:74:51:a1:e0:9f:0c:b9:2f:b8:6a:3a:ae:2a:36:d0:27:
         0f:5d:0d:9c:97:b8:a8:88:e3:8f:7a:44:84:f5:9a:06:11:c4:
         c8:26:fe:c1:29:3e:b0:14:c8:33:03:07:39:47:1a:13:da:33:
         5a:42:04:9c:14:41:c8:9d:06:ea:1f:32:14:5a:98:7a:78:ad:
         7f:36:39:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBWUnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
NDkxNWM5ZTc4MjA5MjdiYWQzMTcxMTc3N2NkYjA0OWVjODVlNjYwHhcNMjIwMzI4
MDMwMDAwWhcNMjQwMzI4MDMwMDAwWjAzMTEwLwYDVQQDEyhkNWUxMmViM2E4MGFh
MTJiYWMzMDY1ZGY5ODAwNWE3MWQwMWE5MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7EYlcTd5hrtXNqoJyH0QCmZrc8OoQOtx9m0WSy0Vy2XSOe9/
rqkzs29xXGI/UfuhgXsEVUVXELJQyW3nzxHzf8aEJlMrG4qhwl/T2U24GGQZi91h
+Da9fhQubmHup2mgbo10I7Bz/KSjxXSh5QkA3+qTelxMv7Ec53Or1aV11dPYEmkq
KtA4ZJ9Nj4Xc43OYacHu5/QR6K8N5kUcHisgy1JyDxC5DiLalEfolzbIZrjfV0MJ
e2ctbLjyCNJ0r1LtXMEAd3+Da96aG9kvd4wfx0AfJmwAJtObdaX6zl66HSsDnBsc
/iy8+6El+PtJJBJIRb/vaaquUMhQs3YQQ1ygrQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK05CK7K7EZjATIXQFbtceQKyu4KMB8GA1UdIwQYMBaAFPclJip0UzYXjPjt
mOaVWORqZNaCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Y0OTE1
YzllNzgyMDkyN2JhZDMxNzExNzc3Y2RiMDQ5ZWM4NWU2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTE1ZGFlMDgtZTFmOC00NDFjLWI0MmUtMDQxMTVm
MGE2YmY2L2Q1ZTEyZWIzYTgwYWExMmJhYzMwNjVkZjk4MDA1YTcxZDAxYTkwYWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MTVkYWUwOC1lMWY4LTQ0MWMtYjQyZS0wNDEx
NWYwYTZiZjYvY2Y0OTE1YzllNzgyMDkyN2JhZDMxNzExNzc3Y2RiMDQ5ZWM4NWU2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2mTDANBgkqhkiG9w0BAQsFAAOCAQEAHJnxU8k7GtSoRsh6
DQo9SwLWq+Egq1NwKC7JZht18de84UxBW3sybS6c1XE2QIysbVDEA9xHdwlI5SQP
t753af1wUigY0iGYztxXwXGu9dyfDr9dFrIX+adYnDsog7l+cORBbhF2OC9SF/zn
YdW+kD7fgInrCJl5qcm3RnNE7TKmESycWN3XBTMolRWbX+uBapDkC7eBPknZ1GGy
UrAQb62x2zOlaWR3Bij+thoCoZ4Wi7Ax9cp0UaHgnwy5L7hqOq4qNtAnD10NnJe4
qIjjj3pEhPWaBhHEyCb+wSk+sBTIMwMHOUcaE9ozWkIEnBRByJ0G6h8yFFqYenit
fzY5IA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org