Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/b4d0d94b4f6853835ec1605140f6af74a52245d8.roa
File:                     b4d0d94b4f6853835ec1605140f6af74a52245d8.roa (raw, json)
Hash identifier:          8YuwJtnSlJD/87BT4Aq8alvoS4Kr8iXQoPK6PI2MyX4=
Subject key identifier:   83:36:7A:9A:93:2E:31:85:02:B0:14:C0:1A:07:B7:9F:96:08:F6:A6
Certificate issuer:       /CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
Certificate serial:       0BA596
Authority key identifier: 52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/b4d0d94b4f6853835ec1605140f6af74a52245d8.roa
Signing time:             Mon 08 May 2023 17:17:52 +0000
ROA not before:           Sun 07 May 2023 17:17:52 +0000
ROA not after:            Thu 08 May 2025 17:17:52 +0000
asID:                     265605
IP address blocks:        45.188.164.0/22 maxlen: 22
                          45.188.164.0/24 maxlen: 24
                          45.188.164.0/23 maxlen: 23
                          45.188.166.0/24 maxlen: 24
                          45.188.165.0/24 maxlen: 24
                          45.188.167.0/24 maxlen: 24
                          45.188.166.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763286 (0xba596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
        Validity
            Not Before: May  7 17:17:52 2023 GMT
            Not After : May  8 17:17:52 2025 GMT
        Subject: CN=b4d0d94b4f6853835ec1605140f6af74a52245d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:b5:fc:72:c4:9a:c6:f5:e2:ce:b0:c0:d7:
                    a2:7f:e4:db:0e:dd:d1:17:8c:c6:22:2f:e1:54:05:
                    54:28:7b:34:ed:16:8b:2f:53:5a:db:91:42:32:20:
                    00:68:c1:9e:86:15:54:6a:44:3b:a1:c9:02:54:27:
                    7f:4c:75:51:20:80:7d:31:76:94:ac:d7:0f:48:0c:
                    a6:e0:03:70:4f:a7:0b:32:b2:fb:ba:e0:cd:fc:c6:
                    ff:37:0a:01:a0:14:08:06:f4:25:a5:e2:4d:ec:b0:
                    b1:c9:79:8b:e9:4f:c6:db:e8:b8:b8:42:75:0f:c4:
                    bb:35:70:71:b7:fa:d0:7a:ba:96:dd:f2:ad:2f:ac:
                    6d:b4:7d:06:8d:bf:5e:ed:20:50:5f:37:a4:24:43:
                    a6:21:95:ea:02:4c:4c:d4:2e:93:d2:f0:fe:cc:0b:
                    cd:7a:49:1f:1b:42:28:81:3c:fc:8a:16:95:0c:d9:
                    81:c1:02:b8:c1:17:ba:8b:5d:b7:35:6d:33:41:74:
                    7a:c8:ca:24:03:df:2b:34:5b:57:51:be:c0:e8:d6:
                    f3:e7:94:73:bd:c8:12:1e:14:b9:04:b2:4e:1f:42:
                    1e:ac:87:a7:17:bd:d8:54:68:aa:4d:c2:0f:a4:34:
                    30:ed:1d:1c:9e:ab:62:97:e6:74:6b:1c:cf:c1:67:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:7A:9A:93:2E:31:85:02:B0:14:C0:1A:07:B7:9F:96:08:F6:A6
            X509v3 Authority Key Identifier:
                keyid:52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/b4d0d94b4f6853835ec1605140f6af74a52245d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/6ab2d820979a406ed3e6351e0a821ee6b903737f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:90:3a:41:ba:0d:d9:ce:d3:53:e4:57:20:ae:c4:40:0c:72:
         9b:56:1d:8e:2f:11:7f:c8:b2:13:84:a6:2d:45:5a:7d:58:89:
         fb:1b:36:6f:68:fb:45:57:f2:1a:64:a2:2f:f5:ae:46:c2:fc:
         2f:a6:8f:ae:7f:64:af:e2:d2:46:8c:fe:ea:1e:44:4e:29:15:
         e1:c4:b8:41:eb:0f:ad:a6:19:4c:17:b2:fc:3f:d2:40:11:83:
         a3:08:34:8e:df:6e:6a:41:54:e5:f8:cc:1b:f1:f2:a9:cc:0c:
         f5:59:1f:4d:4b:79:37:7b:5e:c3:fc:a3:62:dc:f4:b1:0b:5d:
         6e:b7:c3:92:c4:b2:6c:43:b2:44:48:66:dc:d3:78:c1:e5:7f:
         87:8d:3b:da:d1:a6:6d:b4:4d:7c:8c:d4:87:89:42:97:43:31:
         0e:33:67:57:83:68:03:b9:73:f5:7c:2a:eb:f7:90:a2:85:95:
         66:cc:f7:d9:41:fc:07:d5:4e:40:fd:25:4b:b8:cd:42:9f:c7:
         4f:a5:6f:d4:a6:6a:31:a3:7e:6f:93:89:26:97:d4:f2:d5:dc:
         62:80:61:12:9b:c3:31:73:47:09:e3:9c:12:a1:93:62:18:e8:
         ce:25:a8:e7:e5:53:aa:10:27:b5:9d:a4:fd:d9:0a:95:91:59:
         15:ea:79:e8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC6WWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
YjJkODIwOTc5YTQwNmVkM2U2MzUxZTBhODIxZWU2YjkwMzczN2YwHhcNMjMwNTA3
MTcxNzUyWhcNMjUwNTA4MTcxNzUyWjAzMTEwLwYDVQQDEyhiNGQwZDk0YjRmNjg1
MzgzNWVjMTYwNTE0MGY2YWY3NGE1MjI0NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwOe1/HLEmsb14s6wwNeif+TbDt3RF4zGIi/hVAVUKHs07RaL
L1Na25FCMiAAaMGehhVUakQ7ockCVCd/THVRIIB9MXaUrNcPSAym4ANwT6cLMrL7
uuDN/Mb/NwoBoBQIBvQlpeJN7LCxyXmL6U/G2+i4uEJ1D8S7NXBxt/rQerqW3fKt
L6xttH0Gjb9e7SBQXzekJEOmIZXqAkxM1C6T0vD+zAvNekkfG0IogTz8ihaVDNmB
wQK4wRe6i123NW0zQXR6yMokA98rNFtXUb7A6Nbz55RzvcgSHhS5BLJOH0IerIen
F73YVGiqTcIPpDQw7R0cnqtil+Z0axzPwWegyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIM2epqTLjGFArAUwBoHt5+WCPamMB8GA1UdIwQYMBaAFFLderXb3a5xDDZU
OFXt+W/vJkfHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmFiMmQ4
MjA5NzlhNDA2ZWQzZTYzNTFlMGE4MjFlZTZiOTAzNzM3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTRmNTEwMDYtOWRjNS00YWFkLTg3ODItYzFkNTJl
ZGQ0MjNlL2I0ZDBkOTRiNGY2ODUzODM1ZWMxNjA1MTQwZjZhZjc0YTUyMjQ1ZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NGY1MTAwNi05ZGM1LTRhYWQtODc4Mi1jMWQ1
MmVkZDQyM2UvNmFiMmQ4MjA5NzlhNDA2ZWQzZTYzNTFlMGE4MjFlZTZiOTAzNzM3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi28pDANBgkqhkiG9w0BAQsFAAOCAQEAeJA6QboN2c7TU+RX
IK7EQAxym1Ydji8Rf8iyE4SmLUVafViJ+xs2b2j7RVfyGmSiL/WuRsL8L6aPrn9k
r+LSRoz+6h5ETikV4cS4QesPraYZTBey/D/SQBGDowg0jt9uakFU5fjMG/HyqcwM
9VkfTUt5N3tew/yjYtz0sQtdbrfDksSybEOyREhm3NN4weV/h4072tGmbbRNfIzU
h4lCl0MxDjNnV4NoA7lz9Xwq6/eQooWVZsz32UH8B9VOQP0lS7jNQp/HT6Vv1KZq
MaN+b5OJJpfU8tXcYoBhEpvDMXNHCeOcEqGTYhjoziWo5+VTqhAntZ2k/dkKlZFZ
Fep56A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org