Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/e8544b77d861ce238229e2098846a95b1f8ddb63.roa
File:                     e8544b77d861ce238229e2098846a95b1f8ddb63.roa (raw, json)
Hash identifier:          0p7P8S9JKxNg5FxLNW8qGImfOQ2fLZAkJeC68hBKka4=
Subject key identifier:   1C:7B:B5:DE:0D:C2:DF:E6:6F:AF:02:6B:25:B2:B1:A5:63:AD:9B:2C
Certificate issuer:       /CN=9a70223a7072e26ee6c67536cef9197634c52008
Certificate serial:       1D9DD0
Authority key identifier: 41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/e8544b77d861ce238229e2098846a95b1f8ddb63.roa
Signing time:             Sat 25 Feb 2023 12:40:14 +0000
ROA not before:           Thu 23 Feb 2023 12:39:03 +0000
ROA not after:            Tue 25 Feb 2025 12:39:03 +0000
asID:                     265662
IP address blocks:        45.4.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940944 (0x1d9dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a70223a7072e26ee6c67536cef9197634c52008
        Validity
            Not Before: Feb 23 12:39:03 2023 GMT
            Not After : Feb 25 12:39:03 2025 GMT
        Subject: CN=e8544b77d861ce238229e2098846a95b1f8ddb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:45:fe:3b:47:c7:f3:14:95:aa:16:6c:7f:
                    07:83:ad:61:95:75:bb:c1:ed:c5:de:a4:33:1b:aa:
                    5d:bd:a3:7e:93:d3:7c:c9:c8:6f:89:47:07:be:f1:
                    30:19:39:9d:5e:cd:c1:25:da:cd:aa:e3:7e:4f:e3:
                    d9:0f:bb:22:2f:e5:3e:a5:64:06:f6:74:ca:94:8f:
                    1e:06:9e:dc:d0:68:b4:5e:cd:53:18:2d:fd:d6:f8:
                    91:95:58:5e:ff:18:38:0c:1f:22:a5:8f:4a:03:73:
                    90:09:71:fa:e3:d3:b0:ef:71:93:29:62:58:d2:d5:
                    6c:94:3a:a0:da:c6:fe:38:63:1a:ae:1f:30:91:0f:
                    bb:f9:80:f7:be:a1:60:c0:29:19:28:8a:8b:b7:68:
                    e7:56:01:1a:20:40:dd:c1:bf:03:e4:9e:dd:ef:5e:
                    ab:47:e4:e1:f3:c5:54:06:62:d3:3b:3b:6b:90:a0:
                    39:71:1f:06:de:0d:b6:28:09:4a:a3:33:ac:21:31:
                    95:e0:d4:d9:92:11:b9:b6:22:c9:09:04:2a:95:84:
                    e7:dc:6b:5e:f3:21:04:37:bb:ef:72:0a:48:4a:30:
                    01:78:3b:78:5f:6b:d2:77:00:f8:cc:a0:45:0d:fc:
                    9e:78:1a:52:23:49:ea:04:05:32:19:59:77:98:c0:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7B:B5:DE:0D:C2:DF:E6:6F:AF:02:6B:25:B2:B1:A5:63:AD:9B:2C
            X509v3 Authority Key Identifier:
                keyid:41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/e8544b77d861ce238229e2098846a95b1f8ddb63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/9a70223a7072e26ee6c67536cef9197634c52008.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:41:f2:f1:b6:6b:68:40:01:8b:e9:9d:b4:ed:7d:9a:f6:
         96:44:c1:f0:80:46:34:d0:39:9c:ee:d9:08:44:e6:f2:0d:e1:
         37:1c:b0:e0:98:9d:54:a7:17:3c:10:6f:aa:2a:99:38:8d:11:
         ff:17:81:a0:df:cc:11:b2:62:c3:1b:b0:76:bf:88:4d:b7:ee:
         4c:93:f8:45:29:11:4e:4b:8a:2d:d7:bb:86:f5:48:b6:92:de:
         d8:1a:56:b5:fa:ed:91:1c:89:ba:e7:3c:31:ec:28:24:d0:95:
         f8:f1:2a:22:29:57:0d:c1:73:6d:92:d0:d6:f9:6d:3a:34:ab:
         33:b7:a6:38:70:76:98:a1:a7:11:b3:c9:da:97:ab:c4:3c:4e:
         3e:0d:25:af:af:91:dc:68:0a:b2:85:fa:df:b6:a0:01:ab:5a:
         db:1c:69:5f:67:68:a3:7d:a4:95:fe:3c:38:30:7f:e9:1b:a9:
         a4:bb:55:99:9b:5d:d9:49:d0:48:77:1f:c0:84:2f:91:f6:ef:
         4c:1f:48:4c:a0:53:e4:87:f3:6c:dc:80:e1:06:7b:d2:ab:39:
         e5:c8:b0:e8:19:28:cf:a4:0e:6f:eb:d3:bd:d7:47:cd:80:6e:
         79:3f:3d:6c:76:31:81:6f:79:06:7a:5b:d5:ec:07:f2:36:0c:
         b6:9c:e1:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHZ3QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlh
NzAyMjNhNzA3MmUyNmVlNmM2NzUzNmNlZjkxOTc2MzRjNTIwMDgwHhcNMjMwMjIz
MTIzOTAzWhcNMjUwMjI1MTIzOTAzWjAzMTEwLwYDVQQDEyhlODU0NGI3N2Q4NjFj
ZTIzODIyOWUyMDk4ODQ2YTk1YjFmOGRkYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjXNF/jtHx/MUlaoWbH8Hg61hlXW7we3F3qQzG6pdvaN+k9N8
ychviUcHvvEwGTmdXs3BJdrNquN+T+PZD7siL+U+pWQG9nTKlI8eBp7c0Gi0Xs1T
GC391viRlVhe/xg4DB8ipY9KA3OQCXH649Ow73GTKWJY0tVslDqg2sb+OGMarh8w
kQ+7+YD3vqFgwCkZKIqLt2jnVgEaIEDdwb8D5J7d716rR+Th88VUBmLTOztrkKA5
cR8G3g22KAlKozOsITGV4NTZkhG5tiLJCQQqlYTn3Gte8yEEN7vvcgpISjABeDt4
X2vSdwD4zKBFDfyeeBpSI0nqBAUyGVl3mMBrtQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBx7td4Nwt/mb68CayWysaVjrZssMB8GA1UdIwQYMBaAFEHbTXudRaTt0iQn
saHMhZSBlR6HMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWE3MDIy
M2E3MDcyZTI2ZWU2YzY3NTM2Y2VmOTE5NzYzNGM1MjAwOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzA2YTFhZjAtNTBjNy00NmQ3LWJkYzEtZjNjN2Uz
OGZlNTZmL2U4NTQ0Yjc3ZDg2MWNlMjM4MjI5ZTIwOTg4NDZhOTViMWY4ZGRiNjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MDZhMWFmMC01MGM3LTQ2ZDctYmRjMS1mM2M3
ZTM4ZmU1NmYvOWE3MDIyM2E3MDcyZTI2ZWU2YzY3NTM2Y2VmOTE5NzYzNGM1MjAw
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC0EATANBgkqhkiG9w0BAQsFAAOCAQEAfSJB8vG2a2hAAYvp
nbTtfZr2lkTB8IBGNNA5nO7ZCETm8g3hNxyw4JidVKcXPBBvqiqZOI0R/xeBoN/M
EbJiwxuwdr+ITbfuTJP4RSkRTkuKLde7hvVItpLe2BpWtfrtkRyJuuc8MewoJNCV
+PEqIilXDcFzbZLQ1vltOjSrM7emOHB2mKGnEbPJ2perxDxOPg0lr6+R3GgKsoX6
37agAata2xxpX2doo32klf48ODB/6RuppLtVmZtd2UnQSHcfwIQvkfbvTB9ITKBT
5IfzbNyA4QZ70qs55ciw6Bkoz6QOb+vTvddHzYBueT89bHYxgW95Bnpb1ewH8jYM
tpzhow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org