Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/cb33c164a79fcf183d8b85d9c69aaac8d52270d3.roa
File:                     cb33c164a79fcf183d8b85d9c69aaac8d52270d3.roa (raw, json)
Hash identifier:          iAWuXcTHmqvwSCtz75PRjWPksKo5TbABGnQZNqmPvAw=
Subject key identifier:   74:76:A9:86:3E:97:0B:66:BE:5B:B5:E5:7F:3B:4F:F6:16:BC:3A:CF
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       21059E
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/cb33c164a79fcf183d8b85d9c69aaac8d52270d3.roa
Signing time:             Sat 08 Jul 2023 17:14:20 +0000
ROA not before:           Fri 07 Jul 2023 17:14:20 +0000
ROA not after:            Tue 08 Jul 2025 17:14:20 +0000
asID:                     269782
IP address blocks:        45.184.249.0/24 maxlen: 24
                          45.184.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164126 (0x21059e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Jul  7 17:14:20 2023 GMT
            Not After : Jul  8 17:14:20 2025 GMT
        Subject: CN=cb33c164a79fcf183d8b85d9c69aaac8d52270d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:dd:d0:7a:37:6a:b9:e3:21:9e:16:bf:0b:
                    bd:7b:06:33:22:54:04:35:d7:6e:be:98:4c:ba:7c:
                    17:c6:dd:4b:69:70:c4:c9:bf:51:6f:68:a1:13:33:
                    80:43:13:13:08:f7:3a:92:97:a4:4e:1b:c6:f5:da:
                    21:8d:1b:a4:cd:ea:71:99:2b:0a:1b:45:b8:9b:1f:
                    3b:ff:af:07:1d:3f:10:d2:cc:e9:bd:7e:e0:00:82:
                    84:31:57:fb:e0:52:9e:c0:ff:fe:6f:c8:d7:bb:fe:
                    f8:cf:09:57:ab:5a:b4:53:4b:dc:3d:d0:d3:cc:6b:
                    4c:c8:0e:e4:44:ba:11:82:a2:da:37:d1:6f:42:62:
                    1e:10:24:23:87:9a:54:29:12:19:f3:ca:a4:7d:9d:
                    ca:2d:89:92:64:55:4d:6c:b5:a4:27:fb:81:e6:35:
                    07:49:e6:aa:d6:8a:04:ad:eb:45:63:0d:51:05:85:
                    75:84:96:53:c8:bb:3f:4a:fc:85:89:a8:59:3c:72:
                    18:dc:77:fa:70:0a:22:da:02:0c:51:15:18:27:ed:
                    8a:dd:74:4c:fc:54:24:ce:f1:af:fa:a8:cb:a2:fe:
                    02:c8:d5:ee:42:d8:d5:1f:d2:5f:a5:d3:55:44:2e:
                    e9:05:42:d7:c0:fa:d5:87:96:bb:9e:54:ce:6b:e2:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:76:A9:86:3E:97:0B:66:BE:5B:B5:E5:7F:3B:4F:F6:16:BC:3A:CF
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/cb33c164a79fcf183d8b85d9c69aaac8d52270d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.249.0/24
                  45.184.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4b:58:d9:90:b6:bd:e6:24:4d:a4:ba:a6:8e:cc:88:b8:71:
         5d:b1:5c:d6:4d:50:40:de:ba:1d:bb:a2:82:cc:9b:27:4c:e0:
         24:9c:19:f3:f0:d5:ca:be:52:74:85:59:bc:8b:44:04:9a:6d:
         cf:47:60:44:49:1c:19:7f:e9:a1:e1:93:de:aa:e7:84:89:22:
         f2:76:a2:1e:8f:6e:20:15:65:84:c7:bf:cc:01:db:a9:07:12:
         81:2e:71:90:d7:07:a7:7e:f2:72:85:49:ea:64:21:ff:50:66:
         62:b6:a0:6f:fd:e0:93:bb:3c:b7:b9:ec:fa:da:d7:2a:a0:94:
         2f:07:22:1b:4c:9a:2e:cb:94:86:3a:64:94:ba:e1:d5:24:9b:
         e9:3e:9b:06:07:39:73:31:9c:f3:08:d9:91:fe:da:1a:5c:20:
         88:50:ac:9a:fa:63:e1:f8:10:32:de:63:2f:61:b7:b4:00:15:
         5c:be:a5:aa:3f:09:72:f1:c1:3e:44:df:e6:31:93:98:87:21:
         37:c7:3e:9a:4a:f6:c5:92:a6:e5:98:5f:c9:b6:0e:ec:d4:27:
         2b:57:f2:5d:3a:a5:1d:01:dc:ac:4f:c1:ec:75:b9:73:b6:3d:
         6c:12:a4:e4:89:97:e2:ff:ff:a3:08:06:2d:2c:0b:db:c8:44:
         ce:af:eb:89
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDIQWeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
ZGUxMWQxNTkyZjVmYzhkZDk5NzIyODMyMTA0OWUxZmIzYWZhODYwHhcNMjMwNzA3
MTcxNDIwWhcNMjUwNzA4MTcxNDIwWjAzMTEwLwYDVQQDEyhjYjMzYzE2NGE3OWZj
ZjE4M2Q4Yjg1ZDljNjlhYWFjOGQ1MjI3MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoWXd0Ho3arnjIZ4Wvwu9ewYzIlQENdduvphMunwXxt1LaXDE
yb9Rb2ihEzOAQxMTCPc6kpekThvG9dohjRukzepxmSsKG0W4mx87/68HHT8Q0szp
vX7gAIKEMVf74FKewP/+b8jXu/74zwlXq1q0U0vcPdDTzGtMyA7kRLoRgqLaN9Fv
QmIeECQjh5pUKRIZ88qkfZ3KLYmSZFVNbLWkJ/uB5jUHSeaq1ooEretFYw1RBYV1
hJZTyLs/SvyFiahZPHIY3Hf6cAoi2gIMURUYJ+2K3XRM/FQkzvGv+qjLov4CyNXu
QtjVH9JfpdNVRC7pBULXwPrVh5a7nlTOa+LyIwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFHR2qYY+lwtmvlu15X87T/YWvDrPMB8GA1UdIwQYMBaAFHyoHD4L1N2JL/ES
JfkzyXZFzpfTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjVkZTEx
ZDE1OTJmNWZjOGRkOTk3MjI4MzIxMDQ5ZTFmYjNhZmE4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQyMWY2OTktNDEzMy00NmI0LTkyZmYtNmZlZGM2
NWYzNWVkL2NiMzNjMTY0YTc5ZmNmMTgzZDhiODVkOWM2OWFhYWM4ZDUyMjcwZDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDIxZjY5OS00MTMzLTQ2YjQtOTJmZi02ZmVk
YzY1ZjM1ZWQvNjVkZTExZDE1OTJmNWZjOGRkOTk3MjI4MzIxMDQ5ZTFmYjNhZmE4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAC24+QMEAC24+zANBgkqhkiG9w0BAQsFAAOCAQEAGEtY2ZC2
veYkTaS6po7MiLhxXbFc1k1QQN66HbuigsybJ0zgJJwZ8/DVyr5SdIVZvItEBJpt
z0dgREkcGX/poeGT3qrnhIki8naiHo9uIBVlhMe/zAHbqQcSgS5xkNcHp37ycoVJ
6mQh/1BmYragb/3gk7s8t7ns+trXKqCULwciG0yaLsuUhjpklLrh1SSb6T6bBgc5
czGc8wjZkf7aGlwgiFCsmvpj4fgQMt5jL2G3tAAVXL6lqj8JcvHBPkTf5jGTmIch
N8c+mkr2xZKm5ZhfybYO7NQnK1fyXTqlHQHcrE/B7HW5c7Y9bBKk5ImX4v//owgG
LSwL28hEzq/riQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org