Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/d0d333cb7d7c5cb1e348d41293cb540bc1c4b16c.roa
File:                     d0d333cb7d7c5cb1e348d41293cb540bc1c4b16c.roa (raw, json)
Hash identifier:          nNqOm4rZinyhmYvpjXRHkdcN9W1Qkgplm4GRbF+8a3E=
Subject key identifier:   B7:C8:DE:9C:DC:87:97:72:91:4E:CA:09:5F:22:9E:71:09:3F:D7:D2
Certificate issuer:       /CN=388ebecd4ed72810f208c7c2d9865371b01c71ff
Certificate serial:       1DED3A
Authority key identifier: C3:CA:30:08:2D:82:CF:1D:1A:4B:B0:88:DB:D0:39:0E:E4:36:08:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/388ebecd4ed72810f208c7c2d9865371b01c71ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/d0d333cb7d7c5cb1e348d41293cb540bc1c4b16c.roa
Signing time:             Sat 10 Jun 2023 17:21:07 +0000
ROA not before:           Fri 09 Jun 2023 17:21:07 +0000
ROA not after:            Tue 10 Jun 2025 17:21:07 +0000
asID:                     269898
IP address blocks:        45.191.196.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961274 (0x1ded3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=388ebecd4ed72810f208c7c2d9865371b01c71ff
        Validity
            Not Before: Jun  9 17:21:07 2023 GMT
            Not After : Jun 10 17:21:07 2025 GMT
        Subject: CN=d0d333cb7d7c5cb1e348d41293cb540bc1c4b16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:ca:24:a3:1e:89:18:c8:d6:89:62:e9:7e:
                    90:c8:9c:af:69:39:c1:ac:eb:2b:85:02:bd:45:80:
                    c3:55:02:ea:f5:97:bc:03:11:ee:3a:5f:e5:2c:25:
                    91:ea:f9:b6:f5:a2:9e:7a:03:aa:d1:40:4e:b1:a5:
                    9e:64:45:19:fa:cd:8b:62:a8:9f:03:15:8a:55:aa:
                    4c:7a:0f:36:8e:9c:13:c2:b2:83:63:4b:c3:23:62:
                    1f:b9:ee:2c:21:d5:2d:96:47:6c:f7:03:c4:d0:12:
                    14:de:2b:35:32:80:c2:25:26:12:77:43:b0:a0:f2:
                    c9:24:93:c2:a3:89:84:cd:06:2e:5c:bc:60:7e:9a:
                    7d:03:08:eb:c7:1d:7d:e6:fa:30:2c:70:e8:26:48:
                    2a:89:88:04:e5:fa:23:de:de:15:92:d0:dc:ff:13:
                    c8:d5:99:52:bf:9f:87:40:0d:f6:8f:a5:59:97:23:
                    b8:c6:40:31:f6:cb:22:3c:9d:57:30:30:4a:99:52:
                    47:fb:d7:8d:52:b8:c7:99:db:8b:16:8a:e2:ee:c9:
                    68:d8:7c:db:84:29:ac:91:ca:b3:8a:c7:93:7c:49:
                    4f:13:f6:9d:be:1e:ae:ed:1e:81:f7:43:98:b9:f0:
                    6d:29:59:fb:52:22:33:7d:0a:9f:37:b4:eb:3d:8b:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:DE:9C:DC:87:97:72:91:4E:CA:09:5F:22:9E:71:09:3F:D7:D2
            X509v3 Authority Key Identifier:
                keyid:C3:CA:30:08:2D:82:CF:1D:1A:4B:B0:88:DB:D0:39:0E:E4:36:08:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/388ebecd4ed72810f208c7c2d9865371b01c71ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/d0d333cb7d7c5cb1e348d41293cb540bc1c4b16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/388ebecd4ed72810f208c7c2d9865371b01c71ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:b3:4c:ab:96:d3:97:23:12:e0:42:cf:79:3a:b5:91:fb:39:
         70:65:1b:4d:20:d7:a6:3e:4c:e1:90:66:4f:5a:f5:1d:17:73:
         11:9a:a8:80:3d:12:16:2d:6c:59:91:c4:f4:9d:a2:1a:28:d0:
         f6:a2:2f:86:fe:9a:5b:3e:2b:53:11:8a:80:2a:b1:0f:e4:89:
         5b:2a:b8:c2:07:30:3d:d4:29:3a:5d:bc:1c:ae:6a:ad:b3:c5:
         ce:04:b7:8a:b7:59:86:29:c2:e7:f9:0b:01:f1:d0:87:97:bb:
         1f:65:55:0b:fb:ea:42:ac:86:64:a4:c9:65:17:b4:4c:4c:6f:
         41:1a:ac:8a:a1:02:20:95:8e:9f:36:7d:89:80:dd:f7:fb:96:
         6f:a2:fb:df:98:35:b4:dc:23:d9:bd:69:12:ab:2d:d3:9e:52:
         17:c2:45:4d:51:8e:9d:d0:dc:4b:13:39:a9:d3:53:2b:3a:ae:
         8b:3b:1b:20:4d:74:b7:26:99:f6:f2:ea:b8:3b:e7:aa:ea:9b:
         4a:14:32:98:e8:af:42:76:ec:0d:61:e9:46:1d:74:50:1d:34:
         32:9d:98:6d:e0:12:5c:59:e8:5e:f6:73:54:3d:26:6a:17:b8:
         f6:c7:19:84:ce:25:b5:0d:b6:52:59:cb:b2:7a:51:71:46:cc:
         b9:c9:25:cf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHe06MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM4
OGViZWNkNGVkNzI4MTBmMjA4YzdjMmQ5ODY1MzcxYjAxYzcxZmYwHhcNMjMwNjA5
MTcyMTA3WhcNMjUwNjEwMTcyMTA3WjAzMTEwLwYDVQQDEyhkMGQzMzNjYjdkN2M1
Y2IxZTM0OGQ0MTI5M2NiNTQwYmMxYzRiMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAox7KJKMeiRjI1oli6X6QyJyvaTnBrOsrhQK9RYDDVQLq9Ze8
AxHuOl/lLCWR6vm29aKeegOq0UBOsaWeZEUZ+s2LYqifAxWKVapMeg82jpwTwrKD
Y0vDI2Ifue4sIdUtlkds9wPE0BIU3is1MoDCJSYSd0OwoPLJJJPCo4mEzQYuXLxg
fpp9Awjrxx195vowLHDoJkgqiYgE5foj3t4VktDc/xPI1ZlSv5+HQA32j6VZlyO4
xkAx9ssiPJ1XMDBKmVJH+9eNUrjHmduLFori7slo2HzbhCmskcqziseTfElPE/ad
vh6u7R6B90OYufBtKVn7UiIzfQqfN7TrPYu7tQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLfI3pzch5dykU7KCV8innEJP9fSMB8GA1UdIwQYMBaAFMPKMAgtgs8dGkuw
iNvQOQ7kNggSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzg4ZWJl
Y2Q0ZWQ3MjgxMGYyMDhjN2MyZDk4NjUzNzFiMDFjNzFmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTdkMjNmNmQtNzExOS00ZDE4LTkxM2QtODZhM2Rk
NzJhMTE0L2QwZDMzM2NiN2Q3YzVjYjFlMzQ4ZDQxMjkzY2I1NDBiYzFjNGIxNmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81N2QyM2Y2ZC03MTE5LTRkMTgtOTEzZC04NmEz
ZGQ3MmExMTQvMzg4ZWJlY2Q0ZWQ3MjgxMGYyMDhjN2MyZDk4NjUzNzFiMDFjNzFm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2/xDANBgkqhkiG9w0BAQsFAAOCAQEAzbNMq5bTlyMS4ELP
eTq1kfs5cGUbTSDXpj5M4ZBmT1r1HRdzEZqogD0SFi1sWZHE9J2iGijQ9qIvhv6a
Wz4rUxGKgCqxD+SJWyq4wgcwPdQpOl28HK5qrbPFzgS3irdZhinC5/kLAfHQh5e7
H2VVC/vqQqyGZKTJZRe0TExvQRqsiqECIJWOnzZ9iYDd9/uWb6L735g1tNwj2b1p
Eqst055SF8JFTVGOndDcSxM5qdNTKzquizsbIE10tyaZ9vLquDvnquqbShQymOiv
QnbsDWHpRh10UB00Mp2YbeASXFnoXvZzVD0mahe49scZhM4ltQ22UlnLsnpRcUbM
ucklzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org