Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/54a79abfde0af6d3d3b685b4acf890b7f53c29de.roa
File:                     54a79abfde0af6d3d3b685b4acf890b7f53c29de.roa (raw, json)
Hash identifier:          +R8hK7ZTAIDVm2avIA36g079qC3qlEpVX78NnpSLmNc=
Subject key identifier:   73:E4:8F:17:7A:E4:2B:E8:51:9A:87:01:13:D5:56:DB:E7:AB:34:69
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       26B9E8
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/54a79abfde0af6d3d3b685b4acf890b7f53c29de.roa
Signing time:             Thu 21 Dec 2023 16:56:47 +0000
ROA not before:           Thu 21 Dec 2023 16:56:47 +0000
ROA not after:            Sun 21 Dec 2025 16:56:47 +0000
asID:                     271933
IP address blocks:        45.70.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537960 (0x26b9e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Dec 21 16:56:47 2023 GMT
            Not After : Dec 21 16:56:47 2025 GMT
        Subject: CN=54a79abfde0af6d3d3b685b4acf890b7f53c29de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:51:eb:05:b1:92:f3:c7:9d:0d:d8:b2:84:
                    95:84:7e:f3:9f:63:0b:94:f4:1c:24:38:d3:7e:14:
                    6c:bc:20:61:0a:87:7b:bc:5e:d5:59:89:ec:54:63:
                    73:66:d4:9b:9d:70:e5:c8:a0:10:45:bc:e6:90:e7:
                    6d:b7:fd:b6:c3:a3:2a:b2:22:e3:3e:cc:fd:cb:4d:
                    27:d3:fd:53:aa:3d:fc:87:ba:8c:b1:56:cc:99:07:
                    d1:75:8a:54:82:ff:61:27:68:9b:97:b2:ae:c3:31:
                    be:9a:73:ef:f2:1b:c3:f8:75:bd:3b:bd:2d:0c:3e:
                    e4:8c:75:6f:ee:59:01:b4:3e:4c:b0:11:80:45:a2:
                    45:fa:39:ba:77:0c:39:1b:d8:16:07:2a:51:d4:45:
                    d6:6b:8c:e4:3e:b6:c9:b1:c5:b1:94:29:c8:c1:c7:
                    38:3d:e6:b1:7b:94:21:b8:87:26:9e:c3:32:fb:7e:
                    5a:1b:f7:99:7b:aa:cf:03:10:8c:30:e2:02:82:15:
                    00:a2:ae:03:ee:e7:cc:46:24:4b:df:c0:82:9d:64:
                    a2:a2:f5:a8:da:d2:29:7a:33:f1:e3:2b:c7:76:ba:
                    8d:fe:f3:d0:af:c5:e1:65:16:96:6f:1c:77:dc:72:
                    7b:58:2f:70:b5:0f:1f:81:8a:f7:f1:f0:b5:49:fc:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:8F:17:7A:E4:2B:E8:51:9A:87:01:13:D5:56:DB:E7:AB:34:69
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/54a79abfde0af6d3d3b685b4acf890b7f53c29de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:75:32:9a:90:aa:b0:3a:93:ca:ee:74:19:32:51:e8:a7:1d:
         2d:f0:ff:f1:bc:10:5a:d2:cd:f3:41:34:50:32:88:93:5b:eb:
         a6:73:0b:be:cb:76:d7:f4:77:68:9e:60:2c:ef:d6:71:1a:a3:
         59:fb:cc:87:5e:0c:39:22:4c:4f:11:0c:36:ed:44:64:e2:8b:
         d6:d1:05:c0:b7:ed:5b:1b:ce:cc:26:c5:ca:2f:71:98:5d:50:
         f6:f2:8d:4b:a4:be:cc:c7:d8:6c:06:86:20:ff:bc:7b:53:1f:
         ae:bc:3c:35:03:47:c0:9c:d1:9f:07:d0:c4:a6:93:f8:0c:27:
         57:03:aa:7a:5d:0a:97:4f:de:f9:84:ca:8f:eb:9a:03:15:14:
         74:a6:a7:3f:9c:71:9c:67:67:a6:23:08:17:a3:b7:fd:ce:73:
         cb:83:5e:f5:e1:39:59:1a:12:b1:94:07:cb:81:8a:40:c8:62:
         67:40:46:d1:e0:73:d0:e7:ef:1a:fa:3a:8c:ec:25:ca:10:d7:
         8a:57:aa:a9:cd:d4:bd:82:66:69:70:26:ac:30:6d:13:45:cf:
         69:d8:a4:26:8b:56:11:ed:63:7d:9f:29:26:85:14:75:4f:15:
         51:a4:b4:22:cf:63:4e:c7:d8:e7:57:22:5d:ee:38:dc:ed:8e:
         34:b0:0f:77
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJrnoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE5
YmRmN2ViYTk1MTJlYzRmMzE3OWU3MjA1NjNiZDFkNjk2NWE1OTMwHhcNMjMxMjIx
MTY1NjQ3WhcNMjUxMjIxMTY1NjQ3WjAzMTEwLwYDVQQDEyg1NGE3OWFiZmRlMGFm
NmQzZDNiNjg1YjRhY2Y4OTBiN2Y1M2MyOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqa5R6wWxkvPHnQ3YsoSVhH7zn2MLlPQcJDjTfhRsvCBhCod7
vF7VWYnsVGNzZtSbnXDlyKAQRbzmkOdtt/22w6MqsiLjPsz9y00n0/1Tqj38h7qM
sVbMmQfRdYpUgv9hJ2ibl7KuwzG+mnPv8hvD+HW9O70tDD7kjHVv7lkBtD5MsBGA
RaJF+jm6dww5G9gWBypR1EXWa4zkPrbJscWxlCnIwcc4Peaxe5QhuIcmnsMy+35a
G/eZe6rPAxCMMOICghUAoq4D7ufMRiRL38CCnWSiovWo2tIpejPx4yvHdrqN/vPQ
r8XhZRaWbxx33HJ7WC9wtQ8fgYr38fC1SfwiCQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHPkjxd65CvoUZqHARPVVtvnqzRpMB8GA1UdIwQYMBaAFPQUvFb7zZKia6+o
h+KEkdBrq21wMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTliZGY3
ZWJhOTUxMmVjNGYzMTc5ZTcyMDU2M2JkMWQ2OTY1YTU5My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTgzYTc0NGUtZjdkMi00ZTFjLWE1MTYtZTM5OWMy
N2ZmNjY5LzU0YTc5YWJmZGUwYWY2ZDNkM2I2ODViNGFjZjg5MGI3ZjUzYzI5ZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ODNhNzQ0ZS1mN2QyLTRlMWMtYTUxNi1lMzk5
YzI3ZmY2NjkvMTliZGY3ZWJhOTUxMmVjNGYzMTc5ZTcyMDU2M2JkMWQ2OTY1YTU5
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1GDzANBgkqhkiG9w0BAQsFAAOCAQEAaXUympCqsDqTyu50
GTJR6KcdLfD/8bwQWtLN80E0UDKIk1vrpnMLvst21/R3aJ5gLO/WcRqjWfvMh14M
OSJMTxEMNu1EZOKL1tEFwLftWxvOzCbFyi9xmF1Q9vKNS6S+zMfYbAaGIP+8e1Mf
rrw8NQNHwJzRnwfQxKaT+AwnVwOqel0Kl0/e+YTKj+uaAxUUdKanP5xxnGdnpiMI
F6O3/c5zy4Ne9eE5WRoSsZQHy4GKQMhiZ0BG0eBz0OfvGvo6jOwlyhDXileqqc3U
vYJmaXAmrDBtE0XPadikJotWEe1jfZ8pJoUUdU8VUaS0Is9jTsfY51ciXe443O2O
NLAPdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org