Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/10a9b47f85a317f93c23c748be6faf1e71b5e0bb.roa
File:                     10a9b47f85a317f93c23c748be6faf1e71b5e0bb.roa (raw, json)
Hash identifier:          WLD1HBH8RCsdOoQzKyPgYYZ6dM2vUl+eUaL/+K66364=
Subject key identifier:   A9:44:09:0B:E2:05:AF:63:A0:FC:04:BD:7E:71:2E:87:D6:9D:F0:23
Certificate issuer:       /CN=b4eaf76bf89399e5f672ead0c362c73c25cf3c34
Certificate serial:       04C5
Authority key identifier: D9:1B:41:5D:9A:1A:4E:F7:20:58:D9:F3:E4:4B:A7:01:EA:AB:D5:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4eaf76bf89399e5f672ead0c362c73c25cf3c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/10a9b47f85a317f93c23c748be6faf1e71b5e0bb.roa
Signing time:             Thu 03 Aug 2023 20:40:36 +0000
ROA not before:           Wed 02 Aug 2023 20:40:36 +0000
ROA not after:            Sun 03 Aug 2025 20:40:36 +0000
asID:                     265614
IP address blocks:        45.190.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4eaf76bf89399e5f672ead0c362c73c25cf3c34
        Validity
            Not Before: Aug  2 20:40:36 2023 GMT
            Not After : Aug  3 20:40:36 2025 GMT
        Subject: CN=10a9b47f85a317f93c23c748be6faf1e71b5e0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:ad:51:c7:53:27:1d:02:48:af:79:b5:0c:
                    32:1a:7f:57:b0:cb:14:84:10:85:65:96:f1:64:3b:
                    48:1e:e8:70:4a:f6:8e:6a:ea:7f:bb:e3:95:73:44:
                    b2:3a:c8:ad:db:97:4d:cb:ea:db:ef:57:92:fd:fb:
                    fd:9c:8a:de:2b:25:3a:cf:1f:05:dc:ed:23:3e:5b:
                    79:ba:37:fc:11:16:a1:3a:ae:81:0b:bc:da:4e:33:
                    a8:74:18:b6:b9:42:ff:aa:f9:6e:39:f2:6b:83:1b:
                    28:56:db:ae:89:62:81:43:8d:12:df:8f:40:fb:73:
                    3b:da:91:f3:1e:80:03:9d:e1:26:fd:11:d3:51:cb:
                    e7:3a:ce:9a:6c:71:b1:b8:74:c7:32:18:cf:c3:57:
                    ee:18:7c:f6:ba:c1:15:09:82:bc:9c:c5:29:33:b5:
                    b8:a8:d2:6c:c0:3c:ae:c5:e8:d1:38:04:b6:c5:4a:
                    50:e8:dc:25:7e:a4:86:bc:bb:ca:25:3f:1d:5f:6c:
                    c9:75:f3:44:65:cf:56:ca:9f:51:be:72:0d:78:a3:
                    b3:59:34:66:b0:94:ed:ae:7d:6f:91:4e:cc:8b:d9:
                    4b:ba:9e:33:ac:12:46:6b:63:18:4b:bd:c3:96:2a:
                    8f:0e:b8:d7:4f:24:3c:64:85:42:9e:c7:b0:cf:95:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:09:0B:E2:05:AF:63:A0:FC:04:BD:7E:71:2E:87:D6:9D:F0:23
            X509v3 Authority Key Identifier:
                keyid:D9:1B:41:5D:9A:1A:4E:F7:20:58:D9:F3:E4:4B:A7:01:EA:AB:D5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4eaf76bf89399e5f672ead0c362c73c25cf3c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/10a9b47f85a317f93c23c748be6faf1e71b5e0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/b4eaf76bf89399e5f672ead0c362c73c25cf3c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:5d:34:ad:1e:7a:59:6e:4a:2c:01:5b:62:21:b8:ff:5c:
         d9:de:d3:b7:3c:eb:bc:f7:9a:86:81:c4:17:22:21:b5:6d:09:
         98:c4:22:ea:7a:fe:c1:ee:84:d4:19:c4:52:4f:d6:b4:a8:46:
         1f:c6:10:3a:20:52:b4:15:14:e7:8c:57:99:fa:38:af:b2:2b:
         42:2c:1c:7b:65:ef:59:28:b5:39:2b:8a:8b:98:90:68:30:d5:
         c0:70:d2:f7:f0:0d:27:9a:4e:61:05:85:83:b1:12:a3:11:d6:
         bd:11:28:43:73:c0:49:82:8e:26:a0:6d:c2:12:90:12:2f:59:
         6d:76:cb:9c:c8:87:75:00:e8:40:24:4e:d5:0e:b4:55:2c:0f:
         4d:f0:e6:53:63:a2:19:d5:bf:79:a1:1b:3b:a1:aa:5f:66:53:
         a6:9c:9f:7b:30:75:c6:ea:b4:d3:4c:39:9d:ec:80:21:6c:d0:
         a2:9e:69:3d:0c:40:a5:80:c5:55:72:df:79:8c:7b:bb:86:ff:
         7f:c2:36:55:a4:9b:b1:15:21:fa:1f:66:9f:d7:17:d4:c2:8a:
         d5:0e:ac:f5:96:dc:5f:f9:53:7e:95:97:fc:16:21:67:35:99:
         14:e2:dc:8c:61:9c:9c:6d:90:48:53:63:8a:e0:e7:14:d8:4b:
         46:cd:86:cd
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjRl
YWY3NmJmODkzOTllNWY2NzJlYWQwYzM2MmM3M2MyNWNmM2MzNDAeFw0yMzA4MDIy
MDQwMzZaFw0yNTA4MDMyMDQwMzZaMDMxMTAvBgNVBAMTKDEwYTliNDdmODVhMzE3
ZjkzYzIzYzc0OGJlNmZhZjFlNzFiNWUwYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgdK1Rx1MnHQJIr3m1DDIaf1ewyxSEEIVllvFkO0ge6HBK9o5q
6n+745VzRLI6yK3bl03L6tvvV5L9+/2cit4rJTrPHwXc7SM+W3m6N/wRFqE6roEL
vNpOM6h0GLa5Qv+q+W458muDGyhW266JYoFDjRLfj0D7czvakfMegAOd4Sb9EdNR
y+c6zppscbG4dMcyGM/DV+4YfPa6wRUJgrycxSkztbio0mzAPK7F6NE4BLbFSlDo
3CV+pIa8u8olPx1fbMl180Rlz1bKn1G+cg14o7NZNGawlO2ufW+RTsyL2Uu6njOs
EkZrYxhLvcOWKo8OuNdPJDxkhUKex7DPlWSNAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUqUQJC+IFr2Og/AS9fnEuh9ad8CMwHwYDVR0jBBgwFoAU2RtBXZoaTvcgWNnz
5EunAeqr1XYwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iNGVhZjc2
YmY4OTM5OWU1ZjY3MmVhZDBjMzYyYzczYzI1Y2YzYzM0LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81ZTljZjMxOC0xNDcyLTQ3YzItYTgxNi1iMmZlZmE0
ZWVhNzIvMTBhOWI0N2Y4NWEzMTdmOTNjMjNjNzQ4YmU2ZmFmMWU3MWI1ZTBiYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzVlOWNmMzE4LTE0NzItNDdjMi1hODE2LWIyZmVm
YTRlZWE3Mi9iNGVhZjc2YmY4OTM5OWU1ZjY3MmVhZDBjMzYyYzczYzI1Y2YzYzM0
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLb5MMA0GCSqGSIb3DQEBCwUAA4IBAQAVyF00rR56WW5KLAFb
YiG4/1zZ3tO3POu895qGgcQXIiG1bQmYxCLqev7B7oTUGcRST9a0qEYfxhA6IFK0
FRTnjFeZ+jivsitCLBx7Ze9ZKLU5K4qLmJBoMNXAcNL38A0nmk5hBYWDsRKjEda9
EShDc8BJgo4moG3CEpASL1ltdsucyId1AOhAJE7VDrRVLA9N8OZTY6IZ1b95oRs7
oapfZlOmnJ97MHXG6rTTTDmd7IAhbNCinmk9DEClgMVVct95jHu7hv9/wjZVpJux
FSH6H2af1xfUworVDqz1ltxf+VN+lZf8FiFnNZkU4tyMYZycbZBIU2OK4OcU2EtG
zYbN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org