Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/ceed241e86429a569529c5d988d8846a374a8100.roa
File:                     ceed241e86429a569529c5d988d8846a374a8100.roa (raw, json)
Hash identifier:          ZFlAKpifZa5boMWDjGJYlCl1cke6+/dSZWULd5qTHPg=
Subject key identifier:   B1:14:78:61:96:AF:82:D0:00:09:DC:02:6F:49:1B:FA:DE:07:C3:2F
Certificate issuer:       /CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
Certificate serial:       2A0A
Authority key identifier: EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/ceed241e86429a569529c5d988d8846a374a8100.roa
Signing time:             Wed 25 May 2022 18:49:15 +0000
ROA not before:           Wed 25 May 2022 03:00:00 +0000
ROA not after:            Sat 25 May 2024 03:00:00 +0000
asID:                     272136
IP address blocks:        45.68.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10762 (0x2a0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
        Validity
            Not Before: May 25 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2024 GMT
        Subject: CN=ceed241e86429a569529c5d988d8846a374a8100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:53:c4:d3:a4:97:bd:66:cc:f8:e6:d0:f1:
                    4a:09:36:fc:a1:27:73:ca:bb:26:3b:69:26:0e:73:
                    5c:c9:a6:65:19:3c:80:3c:65:f0:3f:b4:42:92:05:
                    69:e5:8c:87:85:05:59:a4:54:6e:32:6b:fc:6c:0b:
                    e1:75:40:03:08:a3:2b:06:d3:ff:3e:55:7a:72:be:
                    79:23:2e:18:26:05:6b:85:79:36:0a:72:49:2f:d4:
                    db:38:a4:22:ce:b9:e0:eb:3f:47:6f:41:10:36:12:
                    aa:ec:86:82:7e:03:87:b3:f7:7c:2f:a0:28:ad:ce:
                    19:b3:3a:83:92:13:74:ed:00:70:95:3c:48:f8:72:
                    d5:c8:d2:f9:11:1d:f0:af:c8:1b:3d:46:66:12:1a:
                    f7:a3:d9:d4:65:66:4c:71:00:98:e2:a9:3c:75:58:
                    8e:dc:5f:4b:86:b9:d2:43:3d:d9:3f:35:84:08:f5:
                    0a:9d:df:3e:09:7f:cc:53:ef:ed:20:ab:8c:1a:f1:
                    e7:a5:fb:14:31:fb:f6:ca:8a:fc:77:e0:a4:53:95:
                    15:35:61:b8:df:0f:97:12:1a:d7:3d:08:32:be:78:
                    d6:25:90:96:eb:bb:0b:7f:82:bf:25:78:da:45:4a:
                    46:19:2b:3a:e3:50:17:57:7c:59:28:02:67:64:39:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:14:78:61:96:AF:82:D0:00:09:DC:02:6F:49:1B:FA:DE:07:C3:2F
            X509v3 Authority Key Identifier:
                keyid:EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/ceed241e86429a569529c5d988d8846a374a8100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:45:8f:4e:a7:81:ec:db:c0:73:ff:fd:d2:6d:4a:56:00:09:
         b6:23:48:9d:55:e0:61:b0:a4:1c:34:a0:cb:68:c5:ce:3e:d8:
         c3:6c:73:bc:8f:07:be:42:7d:b8:f0:cb:d4:c6:4a:2a:6c:84:
         6f:09:c8:9c:a0:c1:8c:8d:22:b0:94:d7:8e:0f:ff:24:46:3e:
         f4:2e:c4:99:d0:ce:95:ea:dc:be:0a:0e:c1:3b:f8:73:fa:cf:
         1c:33:43:d4:68:e4:77:60:04:e0:3e:eb:19:ba:0d:80:e0:db:
         ee:ab:c0:27:75:0c:be:de:83:1b:82:f8:3a:fa:58:47:35:94:
         ea:90:9a:dd:f6:46:1c:91:a7:28:03:ff:af:87:87:cd:a9:d7:
         3c:b3:b3:93:99:cb:fd:f8:dd:5b:62:f6:7b:52:9c:a9:c7:b9:
         b1:4e:a6:d9:70:eb:e2:c0:5a:d6:8f:10:5f:40:f7:1a:ff:43:
         90:d7:07:02:27:3c:5e:d8:93:60:c9:f7:22:73:15:a7:72:d9:
         c8:a2:0a:a5:f9:94:35:f2:fc:55:3b:b1:f2:b4:2e:41:44:0a:
         7e:c1:28:f2:35:d2:75:81:b5:d2:70:e2:b5:0b:2f:a3:0d:8e:
         f3:e4:f7:e4:15:5c:4d:ab:e0:76:e5:b1:84:a5:32:90:13:f4:
         0e:2d:68:87
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzJl
NmRjYWUzNWI4Zjg3ZTIyYjdlZmY0NTk3NDcyZjVjODJiYmFiOTAeFw0yMjA1MjUw
MzAwMDBaFw0yNDA1MjUwMzAwMDBaMDMxMTAvBgNVBAMTKGNlZWQyNDFlODY0Mjlh
NTY5NTI5YzVkOTg4ZDg4NDZhMzc0YTgxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyMFPE06SXvWbM+ObQ8UoJNvyhJ3PKuyY7aSYOc1zJpmUZPIA8
ZfA/tEKSBWnljIeFBVmkVG4ya/xsC+F1QAMIoysG0/8+VXpyvnkjLhgmBWuFeTYK
ckkv1Ns4pCLOueDrP0dvQRA2EqrshoJ+A4ez93wvoCitzhmzOoOSE3TtAHCVPEj4
ctXI0vkRHfCvyBs9RmYSGvej2dRlZkxxAJjiqTx1WI7cX0uGudJDPdk/NYQI9Qqd
3z4Jf8xT7+0gq4wa8eel+xQx+/bKivx34KRTlRU1YbjfD5cSGtc9CDK+eNYlkJbr
uwt/gr8leNpFSkYZKzrjUBdXfFkoAmdkOWWbAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUsRR4YZavgtAACdwCb0kb+t4Hwy8wHwYDVR0jBBgwFoAU7Ha1m9TbA8Y0iask
kwhuxbTy4OQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zMmU2ZGNh
ZTM1YjhmODdlMjJiN2VmZjQ1OTc0NzJmNWM4MmJiYWI5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81NjJkYWYzZS0yNDc5LTRmMjItYTMyNS1mNjk2NWJh
ZDc1N2QvY2VlZDI0MWU4NjQyOWE1Njk1MjljNWQ5ODhkODg0NmEzNzRhODEwMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzU2MmRhZjNlLTI0NzktNGYyMi1hMzI1LWY2OTY1
YmFkNzU3ZC8zMmU2ZGNhZTM1YjhmODdlMjJiN2VmZjQ1OTc0NzJmNWM4MmJiYWI5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALUQWMA0GCSqGSIb3DQEBCwUAA4IBAQBJRY9Op4Hs28Bz//3S
bUpWAAm2I0idVeBhsKQcNKDLaMXOPtjDbHO8jwe+Qn248MvUxkoqbIRvCcicoMGM
jSKwlNeOD/8kRj70LsSZ0M6V6ty+Cg7BO/hz+s8cM0PUaOR3YATgPusZug2A4Nvu
q8AndQy+3oMbgvg6+lhHNZTqkJrd9kYckacoA/+vh4fNqdc8s7OTmcv9+N1bYvZ7
Upypx7mxTqbZcOviwFrWjxBfQPca/0OQ1wcCJzxe2JNgyfcicxWnctnIogql+ZQ1
8vxVO7HytC5BRAp+wSjyNdJ1gbXScOK1Cy+jDY7z5PfkFVxNq+B25bGEpTKQE/QO
LWiH
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org