Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/cd4182f4bd895d05d8c5bfcc3d5f10e52536ad8b.roa
File:                     cd4182f4bd895d05d8c5bfcc3d5f10e52536ad8b.roa (raw, json)
Hash identifier:          S+K3d8XeMNecCtbk1taweT2a6sqJy8yA+4JkE3dkvdA=
Subject key identifier:   B7:A2:3D:A9:54:7C:75:F8:BC:F7:CD:D7:8B:C8:81:D8:D1:DD:1E:DA
Certificate issuer:       /CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
Certificate serial:       0D5BAB
Authority key identifier: 8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/cd4182f4bd895d05d8c5bfcc3d5f10e52536ad8b.roa
Signing time:             Wed 24 Mar 2021 14:39:55 +0000
ROA not before:           Wed 24 Mar 2021 14:39:53 +0000
ROA not after:            Tue 24 Mar 2026 14:39:53 +0000
asID:                     264668
IP address blocks:        45.4.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875435 (0xd5bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
        Validity
            Not Before: Mar 24 14:39:53 2021 GMT
            Not After : Mar 24 14:39:53 2026 GMT
        Subject: CN=cd4182f4bd895d05d8c5bfcc3d5f10e52536ad8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:8c:de:12:b3:23:97:15:73:f3:90:ae:00:
                    d4:e8:44:91:9d:63:d9:2a:70:18:10:96:b3:a8:55:
                    05:52:e8:9c:96:29:bb:22:dd:44:69:c0:ed:bc:f8:
                    8f:47:07:b2:4f:e1:8a:00:38:54:46:09:b7:af:61:
                    3e:d6:95:f2:5c:e0:1e:3a:38:64:f7:de:4d:a2:cc:
                    03:50:9c:6a:07:70:ac:2a:55:d4:57:80:ec:d7:7f:
                    0c:d7:f1:55:60:06:74:0f:b6:c4:a4:a5:4b:e8:ad:
                    48:44:43:e6:cb:4b:91:a8:22:83:57:03:d9:71:67:
                    65:11:02:7a:6e:9f:0a:c8:ed:bf:fb:95:c8:4a:7e:
                    bd:b5:ab:34:4b:15:85:35:d4:8f:2f:58:aa:87:47:
                    ca:38:7b:e5:14:6a:a1:65:3f:55:56:30:69:0a:fc:
                    a8:c0:aa:c8:28:fb:24:c6:f5:a5:03:75:89:b2:31:
                    01:bc:1d:fb:b8:f0:cd:d3:d1:14:21:40:2c:2e:21:
                    c7:18:d9:8c:da:d2:e3:a5:bc:0b:78:1c:71:25:c2:
                    a6:58:66:d0:6a:dd:83:b2:97:ce:35:24:ef:fe:61:
                    c3:dc:33:bf:6d:01:de:7b:aa:9e:9f:aa:17:2f:7b:
                    47:1c:33:37:a8:d7:fe:13:96:07:5f:01:92:7c:4d:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:3D:A9:54:7C:75:F8:BC:F7:CD:D7:8B:C8:81:D8:D1:DD:1E:DA
            X509v3 Authority Key Identifier:
                keyid:8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/cd4182f4bd895d05d8c5bfcc3d5f10e52536ad8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:81:0c:e0:03:28:d0:5c:00:c5:02:ab:9f:fd:45:5a:4b:1f:
         ce:a5:e0:d7:e0:2a:e7:33:05:ba:af:54:14:ce:ea:85:c9:10:
         f8:9d:93:80:db:07:3f:77:2a:bb:10:5f:bf:a0:73:2f:19:63:
         98:f7:5b:83:6c:a0:12:f1:44:00:47:7b:97:96:08:b2:f7:91:
         18:8d:d8:69:62:d9:c9:53:fe:20:f8:41:ed:23:6b:ce:26:38:
         38:f4:5e:21:ac:66:2f:30:77:d2:1b:81:d6:de:a5:d8:07:ac:
         cf:b1:be:df:2e:18:da:f2:2a:5e:b4:05:8b:a8:a4:33:9c:5f:
         e4:82:45:f2:b9:86:df:c5:3d:9b:aa:02:71:5d:71:5b:3d:92:
         5d:7c:18:13:dc:69:a8:d7:f8:f8:7c:06:7f:9d:a1:b1:93:18:
         4b:39:91:5c:35:e3:b3:02:fa:2a:74:01:5d:59:fb:ed:11:d7:
         9e:3d:12:bb:5e:43:49:6c:0b:0b:ff:61:6f:e7:ba:c1:49:8a:
         bc:49:64:6a:fc:c7:74:1f:60:58:e1:f5:6a:83:74:b6:b0:f8:
         10:67:a3:7a:14:e7:b7:81:f6:39:71:7b:11:54:6a:be:52:da:
         72:39:31:92:ef:85:10:cb:2b:c1:d2:35:99:bf:96:d3:f2:ef:
         c7:fd:f4:6b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDVurMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi
NmRkM2E4MGVhNGNiZGIzNzA2MWM5MzI5NjQyMWU0YTcyMTdkMGMwHhcNMjEwMzI0
MTQzOTUzWhcNMjYwMzI0MTQzOTUzWjAzMTEwLwYDVQQDEyhjZDQxODJmNGJkODk1
ZDA1ZDhjNWJmY2MzZDVmMTBlNTI1MzZhZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArgWM3hKzI5cVc/OQrgDU6ESRnWPZKnAYEJazqFUFUuiclim7
It1EacDtvPiPRweyT+GKADhURgm3r2E+1pXyXOAeOjhk995NoswDUJxqB3CsKlXU
V4Ds138M1/FVYAZ0D7bEpKVL6K1IREPmy0uRqCKDVwPZcWdlEQJ6bp8KyO2/+5XI
Sn69tas0SxWFNdSPL1iqh0fKOHvlFGqhZT9VVjBpCvyowKrIKPskxvWlA3WJsjEB
vB37uPDN09EUIUAsLiHHGNmM2tLjpbwLeBxxJcKmWGbQat2DspfONSTv/mHD3DO/
bQHee6qen6oXL3tHHDM3qNf+E5YHXwGSfE1NEwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLeiPalUfHX4vPfN14vIgdjR3R7aMB8GA1UdIwQYMBaAFIyDADwEguVAMp/Y
QjGHI/SU7B5DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGI2ZGQz
YTgwZWE0Y2JkYjM3MDYxYzkzMjk2NDIxZTRhNzIxN2QwYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmVlNmNjOTEtMWU1NS00ZWM4LTlkYjktOTIwYjA4
NTMzNzQ5L2NkNDE4MmY0YmQ4OTVkMDVkOGM1YmZjYzNkNWYxMGU1MjUzNmFkOGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZWU2Y2M5MS0xZTU1LTRlYzgtOWRiOS05MjBi
MDg1MzM3NDkvOGI2ZGQzYTgwZWE0Y2JkYjM3MDYxYzkzMjk2NDIxZTRhNzIxN2Qw
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0EWDANBgkqhkiG9w0BAQsFAAOCAQEAeYEM4AMo0FwAxQKr
n/1FWksfzqXg1+Aq5zMFuq9UFM7qhckQ+J2TgNsHP3cquxBfv6BzLxljmPdbg2yg
EvFEAEd7l5YIsveRGI3YaWLZyVP+IPhB7SNrziY4OPReIaxmLzB30huB1t6l2Aes
z7G+3y4Y2vIqXrQFi6ikM5xf5IJF8rmG38U9m6oCcV1xWz2SXXwYE9xpqNf4+HwG
f52hsZMYSzmRXDXjswL6KnQBXVn77RHXnj0Su15DSWwLC/9hb+e6wUmKvElkavzH
dB9gWOH1aoN0trD4EGejehTnt4H2OXF7EVRqvlLacjkxku+FEMsrwdI1mb+W0/Lv
x/30aw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org