Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/26f614f8661384a475bb17e6d9fe17d42ea1fe0d.roa
File:                     26f614f8661384a475bb17e6d9fe17d42ea1fe0d.roa (raw, json)
Hash identifier:          OI+4RuPDZNXlVJ/klVMVzD5KIcwVUTzKISEhHzK8YEI=
Subject key identifier:   57:59:50:BC:9C:38:93:E6:B3:A7:D5:80:4F:63:B8:ED:64:8B:A1:EF
Certificate issuer:       /CN=304e8917ab983f54e780557b73be5b7d97bb375f
Certificate serial:       0D27CF
Authority key identifier: DE:88:F7:6E:8F:76:10:55:DD:3F:D0:F9:14:DA:95:30:FD:28:7B:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/304e8917ab983f54e780557b73be5b7d97bb375f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/26f614f8661384a475bb17e6d9fe17d42ea1fe0d.roa
Signing time:             Wed 24 Mar 2021 14:33:42 +0000
ROA not before:           Wed 24 Mar 2021 14:33:42 +0000
ROA not after:            Tue 24 Mar 2026 14:33:42 +0000
asID:                     265830
IP address blocks:        45.71.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862159 (0xd27cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e8917ab983f54e780557b73be5b7d97bb375f
        Validity
            Not Before: Mar 24 14:33:42 2021 GMT
            Not After : Mar 24 14:33:42 2026 GMT
        Subject: CN=26f614f8661384a475bb17e6d9fe17d42ea1fe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:3c:42:78:f0:60:27:cf:41:be:3d:c4:a5:
                    45:33:ec:e1:85:cb:5f:f4:93:04:5a:e7:65:26:60:
                    28:39:3f:31:ee:63:d3:ed:3f:e5:30:0d:3a:13:8d:
                    90:33:17:50:63:2e:9d:1a:c1:d9:2d:20:77:cb:f0:
                    f5:b5:c0:38:19:c2:79:a8:4b:33:16:73:66:42:f7:
                    a8:a1:af:4a:17:ab:d0:68:f2:bb:90:df:99:f7:f3:
                    95:99:18:50:5d:d6:0f:12:c5:b2:cb:57:8d:79:c2:
                    75:e5:58:ae:c3:47:bf:c4:13:84:c0:ca:22:39:b0:
                    d5:35:e7:7f:bb:e7:7d:58:28:c4:36:98:0a:c9:d9:
                    4c:70:30:b1:f9:f9:6e:f9:6d:06:f2:59:4f:21:9d:
                    1d:77:87:4c:e8:75:74:88:7e:d1:cc:ac:23:9b:84:
                    38:c8:e0:26:46:5f:0a:1a:60:25:61:10:cd:02:9e:
                    fa:92:38:b1:1b:88:38:7e:86:2f:61:7c:d1:c4:00:
                    58:3b:c8:5e:8b:52:62:f9:95:f3:ee:a7:88:bc:19:
                    66:2f:89:07:c8:c3:75:bf:09:a6:89:c5:fa:0b:e3:
                    bd:8b:51:05:bf:55:02:fe:fd:65:d1:4a:d3:cc:7b:
                    9f:3d:8e:8f:21:c5:b5:69:e2:3b:f2:e9:82:32:ef:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:59:50:BC:9C:38:93:E6:B3:A7:D5:80:4F:63:B8:ED:64:8B:A1:EF
            X509v3 Authority Key Identifier:
                keyid:DE:88:F7:6E:8F:76:10:55:DD:3F:D0:F9:14:DA:95:30:FD:28:7B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/304e8917ab983f54e780557b73be5b7d97bb375f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/26f614f8661384a475bb17e6d9fe17d42ea1fe0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550d2c9-cdea-40c1-8b15-bf59456680f2/304e8917ab983f54e780557b73be5b7d97bb375f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:00:61:51:c9:35:d6:7b:d8:cb:62:0f:7e:b8:d2:57:7c:
         73:ab:1d:c6:d1:a5:a6:b2:59:98:65:6e:be:0a:b4:d2:7b:04:
         74:bc:b8:0f:3a:54:e3:79:9d:c8:ea:af:f3:9f:d5:2e:e1:b5:
         e8:d2:3a:5e:98:5a:6b:49:6d:e7:48:cd:fd:40:e3:30:cc:ba:
         48:a0:a0:f7:b9:d9:47:76:2b:66:69:a4:39:1c:15:16:7a:c1:
         fc:1e:f7:0a:f0:13:6e:fe:9e:3a:90:b1:24:aa:80:34:06:bf:
         b1:3c:e1:26:54:ce:c3:98:fe:45:fe:02:c0:65:f7:70:b2:e3:
         a6:60:ce:46:8b:79:da:9b:06:67:1f:32:b3:0d:28:33:f8:b3:
         06:ad:4d:be:e4:14:79:21:5f:5c:9e:a3:09:7b:56:2c:9a:45:
         a4:1b:78:38:61:ea:b2:ff:b2:38:fe:01:f9:0d:3e:d2:e5:fa:
         90:e9:67:88:14:2e:e6:ca:62:47:74:2f:60:37:69:78:c1:f4:
         5b:15:7c:b6:d1:62:98:59:fe:7d:7f:16:dc:4b:61:37:52:28:
         58:da:09:3e:69:b1:99:16:df:72:71:68:d8:dc:6c:e0:1e:d9:
         29:cd:3b:19:69:10:72:08:73:9d:f6:63:88:07:75:22:7d:bd:
         a6:ff:2a:15
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSfPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
NGU4OTE3YWI5ODNmNTRlNzgwNTU3YjczYmU1YjdkOTdiYjM3NWYwHhcNMjEwMzI0
MTQzMzQyWhcNMjYwMzI0MTQzMzQyWjAzMTEwLwYDVQQDEygyNmY2MTRmODY2MTM4
NGE0NzViYjE3ZTZkOWZlMTdkNDJlYTFmZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgoM8QnjwYCfPQb49xKVFM+zhhctf9JMEWudlJmAoOT8x7mPT
7T/lMA06E42QMxdQYy6dGsHZLSB3y/D1tcA4GcJ5qEszFnNmQveooa9KF6vQaPK7
kN+Z9/OVmRhQXdYPEsWyy1eNecJ15Viuw0e/xBOEwMoiObDVNed/u+d9WCjENpgK
ydlMcDCx+flu+W0G8llPIZ0dd4dM6HV0iH7RzKwjm4Q4yOAmRl8KGmAlYRDNAp76
kjixG4g4foYvYXzRxABYO8hei1Ji+ZXz7qeIvBlmL4kHyMN1vwmmicX6C+O9i1EF
v1UC/v1l0UrTzHufPY6PIcW1aeI78umCMu+a3wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFdZULycOJPms6fVgE9juO1ki6HvMB8GA1UdIwQYMBaAFN6I926PdhBV3T/Q
+RTalTD9KHvSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA0ZTg5
MTdhYjk4M2Y1NGU3ODA1NTdiNzNiZTViN2Q5N2JiMzc1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGQyYzktY2RlYS00MGMxLThiMTUtYmY1OTQ1
NjY4MGYyLzI2ZjYxNGY4NjYxMzg0YTQ3NWJiMTdlNmQ5ZmUxN2Q0MmVhMWZlMGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwZDJjOS1jZGVhLTQwYzEtOGIxNS1iZjU5
NDU2NjgwZjIvMzA0ZTg5MTdhYjk4M2Y1NGU3ODA1NTdiNzNiZTViN2Q5N2JiMzc1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1HLDANBgkqhkiG9w0BAQsFAAOCAQEAWycAYVHJNdZ72Mti
D3640ld8c6sdxtGlprJZmGVuvgq00nsEdLy4DzpU43mdyOqv85/VLuG16NI6Xpha
a0lt50jN/UDjMMy6SKCg97nZR3YrZmmkORwVFnrB/B73CvATbv6eOpCxJKqANAa/
sTzhJlTOw5j+Rf4CwGX3cLLjpmDORot52psGZx8ysw0oM/izBq1NvuQUeSFfXJ6j
CXtWLJpFpBt4OGHqsv+yOP4B+Q0+0uX6kOlniBQu5spiR3QvYDdpeMH0WxV8ttFi
mFn+fX8W3EthN1IoWNoJPmmxmRbfcnFo2Nxs4B7ZKc07GWkQcghznfZjiAd1In29
pv8qFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org