Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/b95589c79bc28c1f41fc51c416ea6f7daac133f3.roa
File:                     b95589c79bc28c1f41fc51c416ea6f7daac133f3.roa (raw, json)
Hash identifier:          IvhP/3HombnlyxRFN62j85XBa1a+fAS/O2Bo5XepF6k=
Subject key identifier:   75:0B:30:01:9C:A8:B6:6E:8D:47:77:EF:1B:B2:52:D5:92:27:47:70
Certificate issuer:       /CN=88ea1454db4dd9f3413cb69076ab16f194590717
Certificate serial:       053B21
Authority key identifier: DF:BD:24:1D:AC:C8:99:8C:1E:A4:DD:64:32:77:D6:00:1F:48:71:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88ea1454db4dd9f3413cb69076ab16f194590717.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/b95589c79bc28c1f41fc51c416ea6f7daac133f3.roa
Signing time:             Tue 20 Dec 2022 02:37:35 +0000
ROA not before:           Mon 19 Dec 2022 02:35:58 +0000
ROA not after:            Fri 20 Dec 2024 02:35:58 +0000
asID:                     272132
IP address blocks:        45.225.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342817 (0x53b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ea1454db4dd9f3413cb69076ab16f194590717
        Validity
            Not Before: Dec 19 02:35:58 2022 GMT
            Not After : Dec 20 02:35:58 2024 GMT
        Subject: CN=b95589c79bc28c1f41fc51c416ea6f7daac133f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:6c:bb:8c:a6:9b:d2:20:c0:97:57:6d:55:
                    d3:b7:23:b7:54:3b:1e:f5:4a:86:e3:1f:04:b0:5c:
                    7c:6f:a6:25:6f:e1:3a:1c:dc:70:24:16:86:84:04:
                    4e:e7:b1:f0:1d:0e:30:e2:e6:2e:26:17:6e:88:3b:
                    a8:ba:89:cb:82:c9:5a:da:ff:1b:ee:28:b2:fe:b6:
                    fb:58:ed:3a:bd:19:93:eb:58:c2:e6:e6:3b:ae:7e:
                    ed:c8:ff:0a:95:9b:0d:8c:a8:64:22:f7:9b:75:14:
                    cf:eb:a5:f7:af:0f:af:80:a0:cb:19:d7:ce:26:43:
                    c8:f8:59:f8:61:10:73:64:90:4b:54:a3:52:d6:77:
                    24:a2:41:f3:9a:4c:1e:c7:75:ae:f8:fb:93:5f:a0:
                    08:f5:b9:4f:27:e0:a0:22:ba:a8:c1:ff:19:11:b6:
                    3e:71:38:9d:44:76:d1:93:fc:42:d2:6b:ec:29:77:
                    41:f8:69:bf:56:c3:03:09:3e:47:8d:30:55:64:fd:
                    96:c3:e9:9b:07:f3:3a:f1:1e:c6:fa:ff:da:c5:83:
                    8d:a4:a8:22:8e:e8:f5:77:4d:0f:44:52:ab:9a:15:
                    1d:3b:78:58:79:39:3e:15:73:32:52:d4:d1:09:f9:
                    63:cc:65:05:84:ab:65:3f:5e:91:61:e1:03:80:7e:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0B:30:01:9C:A8:B6:6E:8D:47:77:EF:1B:B2:52:D5:92:27:47:70
            X509v3 Authority Key Identifier:
                keyid:DF:BD:24:1D:AC:C8:99:8C:1E:A4:DD:64:32:77:D6:00:1F:48:71:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88ea1454db4dd9f3413cb69076ab16f194590717.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/b95589c79bc28c1f41fc51c416ea6f7daac133f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68f38121-e0df-4b70-9364-5f47b047aeab/88ea1454db4dd9f3413cb69076ab16f194590717.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:84:cb:95:6f:f9:97:c5:7f:bc:d1:d1:92:40:57:c1:bd:
         9e:77:48:c4:cb:28:91:95:51:ba:65:52:24:6e:5b:83:90:e9:
         de:c1:f5:f5:a0:2d:e1:bd:e3:7b:24:d9:61:fe:59:11:c5:21:
         35:6f:83:8a:0e:65:5d:c4:f8:78:64:2b:1d:0e:da:e0:68:f4:
         17:72:a9:5c:a0:b9:44:bf:33:0b:d8:f5:20:1a:29:35:54:a6:
         34:69:57:3e:bc:88:97:a5:9a:be:c7:86:47:5b:f9:49:b7:a1:
         4e:a8:5e:ad:9c:1b:09:bb:73:5a:43:35:69:52:82:07:29:17:
         87:43:6c:23:44:af:5e:15:b0:83:fe:60:87:5e:0c:62:e9:b5:
         35:07:27:15:2e:fb:7e:da:b1:09:16:c7:c2:67:fa:21:f0:82:
         a2:89:40:9d:54:94:34:eb:ff:0d:0f:12:af:b8:2a:06:3f:21:
         fd:33:8c:73:0d:9c:93:e9:51:2d:42:f9:1b:f4:92:ce:94:3f:
         ab:14:ba:d1:a1:fd:1b:91:4b:4c:6e:ac:84:54:c0:58:d8:0e:
         c4:b4:06:0f:dd:15:2c:fe:0d:3a:a5:6b:32:f4:98:b6:35:1c:
         f2:87:1e:72:f6:4c:17:83:16:ac:17:b0:45:b6:e5:b9:21:ee:
         5e:b3:1d:3f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBTshMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZWExNDU0ZGI0ZGQ5ZjM0MTNjYjY5MDc2YWIxNmYxOTQ1OTA3MTcwHhcNMjIxMjE5
MDIzNTU4WhcNMjQxMjIwMDIzNTU4WjAzMTEwLwYDVQQDEyhiOTU1ODljNzliYzI4
YzFmNDFmYzUxYzQxNmVhNmY3ZGFhYzEzM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnptsu4ymm9IgwJdXbVXTtyO3VDse9UqG4x8EsFx8b6Ylb+E6
HNxwJBaGhARO57HwHQ4w4uYuJhduiDuouonLgsla2v8b7iiy/rb7WO06vRmT61jC
5uY7rn7tyP8KlZsNjKhkIvebdRTP66X3rw+vgKDLGdfOJkPI+Fn4YRBzZJBLVKNS
1nckokHzmkwex3Wu+PuTX6AI9blPJ+CgIrqowf8ZEbY+cTidRHbRk/xC0mvsKXdB
+Gm/VsMDCT5HjTBVZP2Ww+mbB/M68R7G+v/axYONpKgijuj1d00PRFKrmhUdO3hY
eTk+FXMyUtTRCfljzGUFhKtlP16RYeEDgH7VSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHULMAGcqLZujUd37xuyUtWSJ0dwMB8GA1UdIwQYMBaAFN+9JB2syJmMHqTd
ZDJ31gAfSHEeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhlYTE0
NTRkYjRkZDlmMzQxM2NiNjkwNzZhYjE2ZjE5NDU5MDcxNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjhmMzgxMjEtZTBkZi00YjcwLTkzNjQtNWY0N2Iw
NDdhZWFiL2I5NTU4OWM3OWJjMjhjMWY0MWZjNTFjNDE2ZWE2ZjdkYWFjMTMzZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OGYzODEyMS1lMGRmLTRiNzAtOTM2NC01ZjQ3
YjA0N2FlYWIvODhlYTE0NTRkYjRkZDlmMzQxM2NiNjkwNzZhYjE2ZjE5NDU5MDcx
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3h+TANBgkqhkiG9w0BAQsFAAOCAQEARqaEy5Vv+ZfFf7zR
0ZJAV8G9nndIxMsokZVRumVSJG5bg5Dp3sH19aAt4b3jeyTZYf5ZEcUhNW+Dig5l
XcT4eGQrHQ7a4Gj0F3KpXKC5RL8zC9j1IBopNVSmNGlXPryIl6WavseGR1v5Sbeh
TqherZwbCbtzWkM1aVKCBykXh0NsI0SvXhWwg/5gh14MYum1NQcnFS77ftqxCRbH
wmf6IfCCoolAnVSUNOv/DQ8Sr7gqBj8h/TOMcw2ck+lRLUL5G/SSzpQ/qxS60aH9
G5FLTG6shFTAWNgOxLQGD90VLP4NOqVrMvSYtjUc8ocecvZMF4MWrBewRbbluSHu
XrMdPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org