Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa
File:                     7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa (raw, json)
Hash identifier:          2ThTXauhEd4Pt3IdAQffXXf5rHbYx88nbRBLzUh/hBM=
Subject key identifier:   B0:3E:05:1F:09:8D:AA:5B:7E:36:37:1C:A6:0F:EE:A7:54:68:30:2B
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       2419B8
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa
Signing time:             Tue 24 Oct 2023 07:30:03 +0000
ROA not before:           Tue 24 Oct 2023 07:30:03 +0000
ROA not after:            Thu 23 Oct 2025 07:30:03 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365880 (0x2419b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Oct 24 07:30:03 2023 GMT
            Not After : Oct 23 07:30:03 2025 GMT
        Subject: CN=7bc3c1e0360453d7e9e491c59e233817c7fb916f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:ea:91:90:a9:b5:56:dd:58:83:2b:75:e6:
                    d5:a9:e1:63:58:68:42:cb:9f:cf:63:f0:8c:bf:c9:
                    7b:90:33:6f:85:c5:9d:0e:8b:11:09:0c:dc:5b:45:
                    0b:9f:7d:1f:78:2a:fc:4a:e9:c6:76:06:20:c0:9e:
                    34:94:be:96:0f:6a:05:85:1e:90:70:e9:85:5a:a3:
                    cb:1e:d7:1b:11:e6:6e:02:98:a6:ba:1e:e4:ed:e1:
                    55:ea:c2:99:ef:11:77:94:d2:48:c8:62:60:28:fe:
                    7b:ae:78:52:33:7d:a6:4c:29:05:5b:2e:75:78:ce:
                    38:df:62:c7:76:5d:6c:04:b4:28:8d:8b:cf:01:9c:
                    70:f0:4c:94:1c:5c:63:43:41:9f:f3:9b:de:50:88:
                    3e:c4:fc:15:62:50:9b:82:51:fd:4f:50:9f:ce:46:
                    e6:d3:68:6a:59:5d:40:c5:52:50:1f:42:48:f0:62:
                    16:d6:8d:4c:be:89:ca:45:ae:be:74:33:62:61:1d:
                    ac:4f:99:15:74:93:02:16:df:c4:a7:ad:3a:f4:35:
                    1f:4d:7a:80:05:4a:85:ec:ab:ea:d8:e9:5d:4a:3b:
                    6c:6f:a3:0a:f9:13:64:f7:d8:0b:56:1d:80:8c:36:
                    2e:5a:fd:a7:bd:73:a0:29:12:8d:b8:bf:65:cf:5f:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:05:1F:09:8D:AA:5B:7E:36:37:1C:A6:0F:EE:A7:54:68:30:2B
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:d7:f0:83:2b:09:72:5a:27:f4:4d:a3:e2:b3:80:7f:81:
         57:19:76:4b:90:61:9d:fd:21:c4:01:8e:45:49:b8:69:a2:71:
         f8:62:6b:07:42:fa:57:62:ac:6f:49:26:e5:2e:3c:88:9b:a5:
         41:77:b3:bc:58:f4:bd:41:d6:82:8f:a5:57:77:d8:ad:c2:d7:
         89:76:9d:83:41:69:09:80:b2:87:d1:e4:71:ba:10:71:37:77:
         ae:16:58:af:ce:c7:67:fd:f0:10:f4:7b:c5:4a:a2:4a:fc:f0:
         66:93:82:1f:e3:f4:50:62:b4:39:68:75:51:e2:ff:f4:0c:e0:
         3e:03:04:c0:77:f0:08:0f:0b:33:e4:e5:74:af:e0:c5:05:55:
         e1:04:ae:bf:2c:ab:05:6b:7e:39:c2:30:43:59:ed:c0:85:b8:
         ed:df:b1:a4:f9:51:54:98:69:32:da:cb:55:6c:23:bd:d1:dd:
         07:8a:cd:aa:e8:5a:dd:07:60:7a:ff:32:31:b8:59:37:49:28:
         50:c5:0e:41:07:16:33:90:d5:f1:5a:95:1b:70:36:0b:72:36:
         bb:21:49:f9:8f:62:9a:a0:0a:24:d3:ae:d9:d6:da:6b:85:a0:
         a2:ed:64:0c:0e:e7:0a:7c:a7:8a:d5:8c:86:fd:ce:a5:7b:ca:
         5e:06:2c:66
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJBm4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZWMxMjJmNDQ0ODU0NDE2YzQ2YzViNDU5ZDg4NTNjYzBjYjJlNzYwHhcNMjMxMDI0
MDczMDAzWhcNMjUxMDIzMDczMDAzWjAzMTEwLwYDVQQDEyg3YmMzYzFlMDM2MDQ1
M2Q3ZTllNDkxYzU5ZTIzMzgxN2M3ZmI5MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjZnqkZCptVbdWIMrdebVqeFjWGhCy5/PY/CMv8l7kDNvhcWd
DosRCQzcW0ULn30feCr8SunGdgYgwJ40lL6WD2oFhR6QcOmFWqPLHtcbEeZuApim
uh7k7eFV6sKZ7xF3lNJIyGJgKP57rnhSM32mTCkFWy51eM4432LHdl1sBLQojYvP
AZxw8EyUHFxjQ0Gf85veUIg+xPwVYlCbglH9T1Cfzkbm02hqWV1AxVJQH0JI8GIW
1o1MvonKRa6+dDNiYR2sT5kVdJMCFt/Ep6069DUfTXqABUqF7Kvq2OldSjtsb6MK
+RNk99gLVh2AjDYuWv2nvXOgKRKNuL9lz1/9DQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLA+BR8JjapbfjY3HKYP7qdUaDArMB8GA1UdIwQYMBaAFAA2VCdOrXDgG982
epSot191inMNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJlYzEy
MmY0NDQ4NTQ0MTZjNDZjNWI0NTlkODg1M2NjMGNiMmU3Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTVhNDhiMzgtNDI0YS00ZTQ5LWJjZjYtMThiM2Ni
MTIyNTFjLzdiYzNjMWUwMzYwNDUzZDdlOWU0OTFjNTllMjMzODE3YzdmYjkxNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NWE0OGIzOC00MjRhLTRlNDktYmNmNi0xOGIz
Y2IxMjI1MWMvOWJlYzEyMmY0NDQ4NTQ0MTZjNDZjNWI0NTlkODg1M2NjMGNiMmU3
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3sHDANBgkqhkiG9w0BAQsFAAOCAQEAHxvX8IMrCXJaJ/RN
o+KzgH+BVxl2S5Bhnf0hxAGORUm4aaJx+GJrB0L6V2Ksb0km5S48iJulQXezvFj0
vUHWgo+lV3fYrcLXiXadg0FpCYCyh9HkcboQcTd3rhZYr87HZ/3wEPR7xUqiSvzw
ZpOCH+P0UGK0OWh1UeL/9AzgPgMEwHfwCA8LM+TldK/gxQVV4QSuvyyrBWt+OcIw
Q1ntwIW47d+xpPlRVJhpMtrLVWwjvdHdB4rNquha3Qdgev8yMbhZN0koUMUOQQcW
M5DV8VqVG3A2C3I2uyFJ+Y9imqAKJNOu2dbaa4Wgou1kDA7nCnynitWMhv3OpXvK
XgYsZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org