Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64140d96-6491-42c4-8cc1-15be5e2130e9/d4dc98a1eceff4ba56848cdbd913a19935d3ee24.roa
File:                     d4dc98a1eceff4ba56848cdbd913a19935d3ee24.roa (raw, json)
Hash identifier:          qqldNl779RKcSNavuP+POAVYBbSSw7m+kS6VMy9T4+I=
Subject key identifier:   E0:18:E7:B9:4F:FA:B7:ED:36:95:5E:31:21:3D:22:D7:AC:77:0A:1F
Certificate issuer:       /CN=6855a45ef201cfacd155e8282de345518de92ed0
Certificate serial:       0C7E2F
Authority key identifier: 9E:62:F6:4A:F3:27:A5:34:6B:C3:DA:56:E2:B9:C1:2A:1B:BA:BD:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6855a45ef201cfacd155e8282de345518de92ed0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64140d96-6491-42c4-8cc1-15be5e2130e9/d4dc98a1eceff4ba56848cdbd913a19935d3ee24.roa
Signing time:             Wed 24 Mar 2021 14:33:15 +0000
ROA not before:           Wed 24 Mar 2021 14:33:15 +0000
ROA not after:            Tue 24 Mar 2026 14:33:15 +0000
asID:                     267697
IP address blocks:        45.162.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818735 (0xc7e2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6855a45ef201cfacd155e8282de345518de92ed0
        Validity
            Not Before: Mar 24 14:33:15 2021 GMT
            Not After : Mar 24 14:33:15 2026 GMT
        Subject: CN=d4dc98a1eceff4ba56848cdbd913a19935d3ee24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:02:6a:3f:c5:45:f9:60:0a:44:e1:25:9e:
                    b6:73:72:1c:f6:0b:b1:2f:7b:ce:50:aa:e8:02:d1:
                    93:7b:e3:dc:12:09:72:9e:dc:db:08:d4:27:e6:f1:
                    d4:68:bc:88:ea:c6:43:47:66:88:c2:07:74:f4:66:
                    f1:46:3e:02:8a:41:e4:2d:4b:61:bf:24:a4:c2:eb:
                    96:1f:88:f1:98:43:39:d9:97:46:b5:56:92:32:2b:
                    6a:17:c8:f5:7d:60:22:38:ee:41:1c:10:fb:33:ab:
                    a3:ea:55:38:e3:a4:a6:c4:1f:81:7d:e3:56:fa:10:
                    12:81:61:07:14:f0:53:84:a8:f1:b1:59:9b:fa:89:
                    d5:81:33:ed:59:d7:45:ec:83:d2:6e:ac:11:8f:2b:
                    8f:60:c6:7a:b4:30:ab:53:c3:4d:fb:fc:87:de:43:
                    a8:1e:c2:da:f1:b5:47:74:e3:bf:45:db:e5:20:9d:
                    cc:f0:d5:6d:89:9b:3c:4f:ef:94:64:d5:c5:d8:6e:
                    6b:49:df:4a:78:f2:a6:db:51:e6:0d:1a:9b:6b:76:
                    cd:32:b2:22:ca:d4:52:55:2e:2a:69:d0:01:1a:07:
                    6e:95:05:98:66:2f:2d:70:7a:d4:93:d7:63:c1:f2:
                    e6:78:d7:f6:50:eb:f5:b1:8e:68:86:ce:95:f2:b4:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:18:E7:B9:4F:FA:B7:ED:36:95:5E:31:21:3D:22:D7:AC:77:0A:1F
            X509v3 Authority Key Identifier:
                keyid:9E:62:F6:4A:F3:27:A5:34:6B:C3:DA:56:E2:B9:C1:2A:1B:BA:BD:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6855a45ef201cfacd155e8282de345518de92ed0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64140d96-6491-42c4-8cc1-15be5e2130e9/d4dc98a1eceff4ba56848cdbd913a19935d3ee24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64140d96-6491-42c4-8cc1-15be5e2130e9/6855a45ef201cfacd155e8282de345518de92ed0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:8d:ab:d3:55:9e:15:b3:c9:fd:2c:0d:06:27:37:ef:fb:
         1f:66:f3:db:1e:6c:fe:de:d0:c6:f8:89:77:5c:97:ee:3c:72:
         1b:26:1e:b1:9a:0b:95:c2:0c:4e:c5:9c:db:f9:f3:c9:f3:a5:
         0e:5c:fd:86:af:a6:37:5a:b1:24:0e:bd:19:6c:e1:0a:02:df:
         f3:34:4e:e0:a9:ff:0e:76:e1:ba:4b:19:d1:28:7a:1c:65:95:
         7a:9b:81:29:bc:ab:3b:a9:38:7f:bd:be:95:ea:3d:ce:dd:19:
         48:f4:03:d1:1d:d6:d0:a8:13:04:06:07:80:9d:05:ca:65:7d:
         84:24:d5:04:1a:bf:a2:f7:a5:e5:9c:75:0e:b8:3a:cf:0d:18:
         60:f3:22:e9:f4:01:72:6c:51:ed:58:fd:7a:f2:f5:97:f6:ec:
         0a:ae:61:60:17:93:d3:02:1d:9d:0e:55:ff:72:6b:88:8d:cb:
         40:c5:f7:16:16:c3:d0:13:af:a7:04:8a:14:e6:0e:e0:a1:16:
         05:1e:40:4d:e5:71:c8:89:ff:50:31:a0:dd:b1:d9:1c:10:b5:
         a3:54:c3:f7:0d:de:7a:d7:fb:9c:98:73:02:a9:8a:5d:72:b9:
         33:b8:8c:4e:fe:2d:97:07:85:c2:4a:a3:67:dc:92:ea:1d:a4:
         2e:1c:50:9a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDH4vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY4
NTVhNDVlZjIwMWNmYWNkMTU1ZTgyODJkZTM0NTUxOGRlOTJlZDAwHhcNMjEwMzI0
MTQzMzE1WhcNMjYwMzI0MTQzMzE1WjAzMTEwLwYDVQQDEyhkNGRjOThhMWVjZWZm
NGJhNTY4NDhjZGJkOTEzYTE5OTM1ZDNlZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnkACaj/FRflgCkThJZ62c3Ic9guxL3vOUKroAtGTe+PcEgly
ntzbCNQn5vHUaLyI6sZDR2aIwgd09GbxRj4CikHkLUthvySkwuuWH4jxmEM52ZdG
tVaSMitqF8j1fWAiOO5BHBD7M6uj6lU446SmxB+BfeNW+hASgWEHFPBThKjxsVmb
+onVgTPtWddF7IPSbqwRjyuPYMZ6tDCrU8NN+/yH3kOoHsLa8bVHdOO/RdvlIJ3M
8NVtiZs8T++UZNXF2G5rSd9KePKm21HmDRqba3bNMrIiytRSVS4qadABGgdulQWY
Zi8tcHrUk9djwfLmeNf2UOv1sY5ohs6V8rQIQQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOAY57lP+rftNpVeMSE9ItesdwofMB8GA1UdIwQYMBaAFJ5i9krzJ6U0a8Pa
VuK5wSobur3pMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjg1NWE0
NWVmMjAxY2ZhY2QxNTVlODI4MmRlMzQ1NTE4ZGU5MmVkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjQxNDBkOTYtNjQ5MS00MmM0LThjYzEtMTViZTVl
MjEzMGU5L2Q0ZGM5OGExZWNlZmY0YmE1Njg0OGNkYmQ5MTNhMTk5MzVkM2VlMjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NDE0MGQ5Ni02NDkxLTQyYzQtOGNjMS0xNWJl
NWUyMTMwZTkvNjg1NWE0NWVmMjAxY2ZhY2QxNTVlODI4MmRlMzQ1NTE4ZGU5MmVk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2iwDANBgkqhkiG9w0BAQsFAAOCAQEAJ7ONq9NVnhWzyf0s
DQYnN+/7H2bz2x5s/t7QxviJd1yX7jxyGyYesZoLlcIMTsWc2/nzyfOlDlz9hq+m
N1qxJA69GWzhCgLf8zRO4Kn/DnbhuksZ0Sh6HGWVepuBKbyrO6k4f72+leo9zt0Z
SPQD0R3W0KgTBAYHgJ0FymV9hCTVBBq/ovel5Zx1Drg6zw0YYPMi6fQBcmxR7Vj9
evL1l/bsCq5hYBeT0wIdnQ5V/3JriI3LQMX3FhbD0BOvpwSKFOYO4KEWBR5ATeVx
yIn/UDGg3bHZHBC1o1TD9w3eetf7nJhzAqmKXXK5M7iMTv4tlweFwkqjZ9yS6h2k
LhxQmg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org