Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/83755f88331e5d289a6576706a2bed52b6173056.roa
File:                     83755f88331e5d289a6576706a2bed52b6173056.roa (raw, json)
Hash identifier:          WweW75DIG6q89eKHdLWJmTcM7lcZjnSoWWgKBELRoHI=
Subject key identifier:   B6:C2:59:B9:3D:4C:57:21:5B:D3:54:87:66:C1:0B:E4:A7:A4:E7:08
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       1567B1
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/83755f88331e5d289a6576706a2bed52b6173056.roa
Signing time:             Mon 14 Nov 2022 23:17:56 +0000
ROA not before:           Sun 13 Nov 2022 23:17:32 +0000
ROA not after:            Thu 14 Nov 2024 23:17:32 +0000
asID:                     269862
IP address blocks:        45.189.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402801 (0x1567b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Nov 13 23:17:32 2022 GMT
            Not After : Nov 14 23:17:32 2024 GMT
        Subject: CN=83755f88331e5d289a6576706a2bed52b6173056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:10:e7:d6:53:24:25:e4:94:70:09:c5:fa:
                    4b:87:cc:05:05:c2:78:53:82:33:aa:80:61:6b:57:
                    0c:f9:62:fc:de:37:bb:d5:5b:0a:92:ed:6c:b7:06:
                    a6:cf:b8:9b:2a:f2:bc:bc:91:94:49:b7:1c:8d:3e:
                    b9:93:78:65:2c:16:d1:86:f8:11:9d:26:d4:2b:37:
                    a7:e3:3c:4a:8f:de:4b:66:38:74:57:0b:b8:fd:d9:
                    aa:da:7e:74:76:5f:0a:b3:3a:be:01:26:40:7d:10:
                    1c:f1:f4:f5:19:68:7c:95:ab:ce:51:0d:e6:f4:25:
                    9c:3c:12:be:c5:52:28:5c:fa:18:0e:09:72:e9:03:
                    9a:23:c1:81:53:a9:a8:87:cc:82:0c:c1:99:68:25:
                    bd:ff:f8:90:37:85:37:71:d8:ab:8b:ef:90:3e:cc:
                    9c:84:88:8c:32:75:4d:8f:de:2b:b1:d6:b4:02:8f:
                    30:45:ea:0b:19:22:8f:75:96:24:02:84:53:23:aa:
                    e9:c8:80:4d:26:f7:21:96:1d:bd:b5:72:8e:2b:3e:
                    2e:2f:84:8f:4d:04:03:78:50:76:da:eb:40:94:e1:
                    4a:bf:ce:bc:1d:49:4a:97:11:6b:58:9d:ee:cf:8d:
                    f0:0e:3c:20:ea:1d:a4:f3:0b:f2:f6:e3:c5:26:58:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:59:B9:3D:4C:57:21:5B:D3:54:87:66:C1:0B:E4:A7:A4:E7:08
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/83755f88331e5d289a6576706a2bed52b6173056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:9a:a3:ad:93:53:64:fb:ff:43:ec:20:fe:9e:7f:c1:71:
         78:ff:bb:bd:3f:e4:22:d6:d6:55:f1:af:29:70:ec:2c:6b:f4:
         36:8c:d0:cb:a4:0b:00:78:3f:41:8a:52:e6:60:54:c5:f6:1d:
         41:16:90:7e:84:d9:74:c1:f9:2f:14:98:c6:b6:19:f5:d5:68:
         15:8b:6b:d1:1a:3a:b4:8a:f8:c9:18:23:1b:de:2a:f0:78:39:
         e6:5c:e0:2b:cb:d6:ab:9a:be:49:b9:ff:c8:dc:d9:b8:71:e4:
         d6:fb:ea:4e:29:25:bc:ab:11:7c:ee:46:35:49:65:65:57:58:
         eb:b1:9b:1b:94:2d:62:24:b6:2e:ad:75:1f:4b:b1:84:a4:3f:
         04:2e:42:f8:f9:6f:e0:6c:cb:84:c0:03:da:64:be:c1:64:8e:
         e9:f8:2e:f6:d4:b1:00:be:6b:f6:fe:20:6d:2d:5a:55:fb:e8:
         83:99:ec:4b:47:8a:e7:a3:0d:b0:ab:af:b2:30:30:9c:d3:f4:
         7f:74:cf:c6:06:01:a0:b1:a8:d7:d4:6b:5f:54:f3:46:a6:15:
         32:e2:7c:2a:79:5c:5b:b2:05:9d:ca:fc:69:5e:30:36:fa:01:
         25:74:47:8e:b7:24:96:94:54:6f:4f:fc:41:86:76:b8:4b:64:
         ba:bb:66:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFWexMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OTVlZDczM2JmNTRmNDMwZDE3NGJiMWYwYmY4OTVkNmJjNzBiNjQwHhcNMjIxMTEz
MjMxNzMyWhcNMjQxMTE0MjMxNzMyWjAzMTEwLwYDVQQDEyg4Mzc1NWY4ODMzMWU1
ZDI4OWE2NTc2NzA2YTJiZWQ1MmI2MTczMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmpAQ59ZTJCXklHAJxfpLh8wFBcJ4U4IzqoBha1cM+WL83je7
1VsKku1stwamz7ibKvK8vJGUSbccjT65k3hlLBbRhvgRnSbUKzen4zxKj95LZjh0
Vwu4/dmq2n50dl8Kszq+ASZAfRAc8fT1GWh8lavOUQ3m9CWcPBK+xVIoXPoYDgly
6QOaI8GBU6moh8yCDMGZaCW9//iQN4U3cdiri++QPsychIiMMnVNj94rsda0Ao8w
ReoLGSKPdZYkAoRTI6rpyIBNJvchlh29tXKOKz4uL4SPTQQDeFB22utAlOFKv868
HUlKlxFrWJ3uz43wDjwg6h2k8wvy9uPFJlg9CQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLbCWbk9TFchW9NUh2bBC+SnpOcIMB8GA1UdIwQYMBaAFDTRdQ2EHmBaoLgJ
i5fx9hw2EA6XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU5NWVk
NzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxZTE1MmYtZmM1MC00MzViLWJlZWItOGIzODY2
ZTFiMGZlLzgzNzU1Zjg4MzMxZTVkMjg5YTY1NzY3MDZhMmJlZDUyYjYxNzMwNTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjFlMTUyZi1mYzUwLTQzNWItYmVlYi04YjM4
NjZlMWIwZmUvZjU5NWVkNzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi29vDANBgkqhkiG9w0BAQsFAAOCAQEAd8Cao62TU2T7/0Ps
IP6ef8FxeP+7vT/kItbWVfGvKXDsLGv0NozQy6QLAHg/QYpS5mBUxfYdQRaQfoTZ
dMH5LxSYxrYZ9dVoFYtr0Ro6tIr4yRgjG94q8Hg55lzgK8vWq5q+Sbn/yNzZuHHk
1vvqTiklvKsRfO5GNUllZVdY67GbG5QtYiS2Lq11H0uxhKQ/BC5C+Plv4GzLhMAD
2mS+wWSO6fgu9tSxAL5r9v4gbS1aVfvog5nsS0eK56MNsKuvsjAwnNP0f3TPxgYB
oLGo19RrX1TzRqYVMuJ8KnlcW7IFncr8aV4wNvoBJXRHjrcklpRUb0/8QYZ2uEtk
urtm2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org