Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/16552b7bce3da65dc47b61df8cafaf1081e7c8c7.roa
File:                     16552b7bce3da65dc47b61df8cafaf1081e7c8c7.roa (raw, json)
Hash identifier:          32zTd3SiUxWnAXuOx2JQrRdhHmnEtjLfc/Xk7rGWYGQ=
Subject key identifier:   12:39:67:34:F8:0A:A4:DA:C7:BD:AB:6F:FB:99:E0:18:0F:25:B7:20
Certificate issuer:       /CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
Certificate serial:       1E96DA
Authority key identifier: EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/16552b7bce3da65dc47b61df8cafaf1081e7c8c7.roa
Signing time:             Sat 08 Apr 2023 08:30:06 +0000
ROA not before:           Fri 07 Apr 2023 08:30:06 +0000
ROA not after:            Sun 06 Apr 2025 08:30:06 +0000
asID:                     267775
IP address blocks:        45.171.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004698 (0x1e96da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b843ce74bb38f3f2fc7c936ad0673fa517e7b27c
        Validity
            Not Before: Apr  7 08:30:06 2023 GMT
            Not After : Apr  6 08:30:06 2025 GMT
        Subject: CN=16552b7bce3da65dc47b61df8cafaf1081e7c8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:bc:6e:db:c5:e4:ba:45:28:a9:1d:8b:22:
                    63:48:d8:9a:e8:cf:84:a7:a2:fe:e7:12:7a:10:92:
                    56:8c:f5:2f:c5:eb:37:f0:c4:68:26:d5:1b:ba:ba:
                    f8:d0:24:cf:e5:8a:36:5d:d2:e1:4a:16:e5:33:51:
                    b5:82:33:05:8b:c8:75:6a:41:1c:ef:4a:44:59:c4:
                    74:0e:37:a2:41:22:df:4b:a6:2f:34:61:4a:13:bf:
                    b8:ef:d1:bf:60:40:a6:80:67:c0:18:f7:82:6d:44:
                    41:c8:fd:85:37:f4:a0:85:db:be:d3:88:f4:7b:c6:
                    88:fe:6d:21:53:8a:dd:0b:db:e7:f6:9c:26:ce:33:
                    a8:91:cf:35:05:6c:6c:e2:41:e8:29:60:29:58:b2:
                    8b:fd:a8:b5:e6:16:6c:0b:d0:3e:5b:b1:35:39:49:
                    67:10:ec:a9:5c:fe:fd:a9:5a:04:93:ed:95:9d:22:
                    f8:51:03:53:77:be:ec:89:e3:f0:fa:2f:10:48:d5:
                    29:5e:75:55:5b:65:2d:3b:32:2d:8d:c2:85:4d:5f:
                    c9:e5:18:8f:c1:c8:ba:dc:74:2d:65:5f:73:64:b7:
                    c9:e2:12:09:c6:60:8c:8b:b1:34:f0:b4:81:0d:05:
                    6a:5a:4f:25:5c:94:4b:9e:d9:21:99:13:73:ee:0a:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:67:34:F8:0A:A4:DA:C7:BD:AB:6F:FB:99:E0:18:0F:25:B7:20
            X509v3 Authority Key Identifier:
                keyid:EB:5C:39:E3:85:01:0D:B5:90:55:3B:54:55:A2:A8:E1:35:F2:E6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/16552b7bce3da65dc47b61df8cafaf1081e7c8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61a326ed-eee4-46d3-8029-5bed2d8626d1/b843ce74bb38f3f2fc7c936ad0673fa517e7b27c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:3b:62:7b:c2:fe:07:67:50:61:45:69:b1:7a:0d:d3:08:
         c6:f9:7c:ed:72:31:ae:2f:84:60:ed:db:34:7e:80:eb:4d:7f:
         cb:69:86:45:62:f5:0c:aa:f4:9e:01:28:f7:4c:c1:a5:b4:4e:
         15:58:a1:c4:12:62:19:ca:8f:4b:c4:c9:cb:9c:8a:62:eb:8d:
         29:bd:14:21:35:8a:84:97:df:c4:68:01:d4:33:4b:d1:04:31:
         f8:70:b6:1a:35:ba:80:80:41:40:c3:59:92:c8:1f:f0:71:97:
         56:a3:d3:52:a0:fd:22:cf:9b:0c:8c:d5:cb:36:5a:08:6f:66:
         90:e7:71:10:a2:d2:66:26:ea:32:64:ca:54:5e:5a:c0:a8:0b:
         77:6f:ca:c3:b6:1c:11:9b:a3:bc:34:a0:2a:8f:67:30:07:b7:
         a5:60:97:05:0e:a3:75:0c:25:e5:fb:cb:b8:ed:08:c7:a3:c4:
         55:c5:72:f4:9c:7a:4c:f6:95:14:2a:9f:14:32:80:bb:86:85:
         5a:56:04:52:1e:2e:63:dd:3d:d8:89:4f:5c:e4:40:ff:1e:69:
         39:2b:0f:c4:cb:66:4e:6f:65:f4:62:a4:e2:8b:66:e9:7b:99:
         a2:42:e3:fc:8b:8c:30:e2:d8:ab:25:0b:93:a8:7c:60:fb:1c:
         a0:ad:99:8d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHpbaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
NDNjZTc0YmIzOGYzZjJmYzdjOTM2YWQwNjczZmE1MTdlN2IyN2MwHhcNMjMwNDA3
MDgzMDA2WhcNMjUwNDA2MDgzMDA2WjAzMTEwLwYDVQQDEygxNjU1MmI3YmNlM2Rh
NjVkYzQ3YjYxZGY4Y2FmYWYxMDgxZTdjOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4OG8btvF5LpFKKkdiyJjSNia6M+Ep6L+5xJ6EJJWjPUvxes3
8MRoJtUburr40CTP5Yo2XdLhShblM1G1gjMFi8h1akEc70pEWcR0DjeiQSLfS6Yv
NGFKE7+479G/YECmgGfAGPeCbURByP2FN/Sghdu+04j0e8aI/m0hU4rdC9vn9pwm
zjOokc81BWxs4kHoKWApWLKL/ai15hZsC9A+W7E1OUlnEOypXP79qVoEk+2VnSL4
UQNTd77siePw+i8QSNUpXnVVW2UtOzItjcKFTV/J5RiPwci63HQtZV9zZLfJ4hIJ
xmCMi7E08LSBDQVqWk8lXJRLntkhmRNz7gqCNwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBI5ZzT4CqTax72rb/uZ4BgPJbcgMB8GA1UdIwQYMBaAFOtcOeOFAQ21kFU7
VFWiqOE18uY9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjg0M2Nl
NzRiYjM4ZjNmMmZjN2M5MzZhZDA2NzNmYTUxN2U3YjI3Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjFhMzI2ZWQtZWVlNC00NmQzLTgwMjktNWJlZDJk
ODYyNmQxLzE2NTUyYjdiY2UzZGE2NWRjNDdiNjFkZjhjYWZhZjEwODFlN2M4Yzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MWEzMjZlZC1lZWU0LTQ2ZDMtODAyOS01YmVk
MmQ4NjI2ZDEvYjg0M2NlNzRiYjM4ZjNmMmZjN2M5MzZhZDA2NzNmYTUxN2U3YjI3
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2rMTANBgkqhkiG9w0BAQsFAAOCAQEAg9M7YnvC/gdnUGFF
abF6DdMIxvl87XIxri+EYO3bNH6A601/y2mGRWL1DKr0ngEo90zBpbROFVihxBJi
GcqPS8TJy5yKYuuNKb0UITWKhJffxGgB1DNL0QQx+HC2GjW6gIBBQMNZksgf8HGX
VqPTUqD9Is+bDIzVyzZaCG9mkOdxEKLSZibqMmTKVF5awKgLd2/Kw7YcEZujvDSg
Ko9nMAe3pWCXBQ6jdQwl5fvLuO0Ix6PEVcVy9Jx6TPaVFCqfFDKAu4aFWlYEUh4u
Y9092IlPXORA/x5pOSsPxMtmTm9l9GKk4otm6XuZokLj/IuMMOLYqyULk6h8YPsc
oK2ZjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org