Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/999000eed367cf481f918ace551b2fa6561208d4.roa
File:                     999000eed367cf481f918ace551b2fa6561208d4.roa (raw, json)
Hash identifier:          Ab0sNPXPOKKk1167YykzV+3Up67ryIJg6LWTM8Jx2rY=
Subject key identifier:   AE:01:F9:CE:7C:D6:E1:3C:F1:1E:6F:DA:22:32:70:47:AD:2E:52:CA
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       122E3C
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/999000eed367cf481f918ace551b2fa6561208d4.roa
Signing time:             Fri 14 Apr 2023 08:30:11 +0000
ROA not before:           Thu 13 Apr 2023 08:30:11 +0000
ROA not after:            Sat 12 Apr 2025 08:30:11 +0000
asID:                     262186
IP address blocks:        45.177.109.0/24 maxlen: 24
                          45.177.110.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191484 (0x122e3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Apr 13 08:30:11 2023 GMT
            Not After : Apr 12 08:30:11 2025 GMT
        Subject: CN=999000eed367cf481f918ace551b2fa6561208d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:d6:22:ec:d9:7e:d8:f1:ef:9e:b9:48:01:
                    f3:cb:4a:cc:c4:40:c7:76:38:8e:95:0f:b4:42:ea:
                    83:8d:c6:6e:ed:07:93:5f:9d:be:ba:74:45:53:33:
                    06:6a:c4:1c:e1:66:76:3d:61:86:2c:d7:f9:8a:63:
                    37:9f:e3:69:d4:49:de:08:60:97:95:5f:e4:d2:d2:
                    99:09:6e:37:b7:da:0f:70:b4:c5:12:cc:aa:3d:a3:
                    06:8f:5e:10:d0:d8:1b:07:0f:b1:60:7d:18:32:14:
                    d6:63:96:c0:15:88:c0:c3:d3:c6:1e:30:0f:8f:9e:
                    f9:10:02:02:04:b6:04:c2:5e:d4:d7:6d:5c:ec:6f:
                    8f:0e:9d:a8:ce:00:26:4f:4f:a9:16:6e:67:20:83:
                    0e:43:cc:2c:be:4a:92:b7:d8:cc:3a:f4:df:c5:6a:
                    2e:c0:3b:68:9d:41:04:b4:0f:9a:29:ca:63:56:6b:
                    6f:40:89:82:8e:6e:cd:6d:b2:e6:47:d6:36:8d:0f:
                    96:da:34:5b:f8:46:bc:bc:88:a2:f9:a6:94:02:9e:
                    35:d9:3c:e9:4b:93:12:cb:af:c0:17:50:03:91:14:
                    4c:04:2b:22:62:62:59:34:2c:c0:0a:2e:80:f2:0c:
                    f1:4d:8f:85:db:00:08:a2:79:5f:b7:04:97:cb:23:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:F9:CE:7C:D6:E1:3C:F1:1E:6F:DA:22:32:70:47:AD:2E:52:CA
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/999000eed367cf481f918ace551b2fa6561208d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.109.0-45.177.111.255

    Signature Algorithm: sha256WithRSAEncryption
         60:44:96:51:6b:1c:d2:c1:5e:23:8f:c8:8c:93:39:02:d0:42:
         38:13:96:a7:8f:cc:59:71:a4:fc:b4:f4:21:43:75:be:84:de:
         49:d9:57:62:8c:c3:b3:aa:79:29:c8:0a:ac:9d:80:a7:bf:d7:
         ae:9b:ca:87:9e:9d:2a:f9:87:7b:bc:87:cf:25:13:c6:a5:86:
         91:c0:7a:9e:e5:1d:45:79:4b:12:93:35:aa:aa:cb:1c:36:58:
         77:a2:1e:89:49:6d:72:80:7d:98:aa:05:33:f9:9c:e3:fb:b5:
         56:d4:1c:48:f3:b8:30:b8:0f:5f:2c:76:0a:b9:ef:93:8a:83:
         81:73:d4:0b:a9:a5:15:ca:84:10:c3:a5:50:dd:a0:5a:1d:b4:
         d4:a1:cf:b1:fe:37:c6:a2:d2:b9:ae:57:3c:e2:4b:17:3a:d6:
         19:62:3c:f2:9d:69:1d:de:90:6e:30:4b:20:d1:73:ed:8d:5f:
         89:c9:08:1c:79:70:9b:96:8c:07:bb:69:73:5a:ac:b1:38:c9:
         ad:d7:ae:00:4a:18:c9:98:4c:00:2c:06:45:94:e9:bd:71:d7:
         81:db:cc:2e:14:ce:e0:b1:6d:d5:8d:20:c1:7e:02:8f:a8:4c:
         a8:c3:28:e1:95:08:dd:25:15:b0:1d:d7:ae:24:d9:e5:ba:49:
         51:b6:aa:1f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDEi48MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
ZWJlMzM1MzAzNzNkMmMyYmZmYWFlZDFlNTNmMDVkYjhlMmE0MzYwHhcNMjMwNDEz
MDgzMDExWhcNMjUwNDEyMDgzMDExWjAzMTEwLwYDVQQDEyg5OTkwMDBlZWQzNjdj
ZjQ4MWY5MThhY2U1NTFiMmZhNjU2MTIwOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuVLWIuzZftjx7565SAHzy0rMxEDHdjiOlQ+0QuqDjcZu7QeT
X52+unRFUzMGasQc4WZ2PWGGLNf5imM3n+Np1EneCGCXlV/k0tKZCW43t9oPcLTF
EsyqPaMGj14Q0NgbBw+xYH0YMhTWY5bAFYjAw9PGHjAPj575EAICBLYEwl7U121c
7G+PDp2ozgAmT0+pFm5nIIMOQ8wsvkqSt9jMOvTfxWouwDtonUEEtA+aKcpjVmtv
QImCjm7NbbLmR9Y2jQ+W2jRb+Ea8vIii+aaUAp412TzpS5MSy6/AF1ADkRRMBCsi
YmJZNCzACi6A8gzxTY+F2wAIonlftwSXyyMkDwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFK4B+c581uE88R5v2iIycEetLlLKMB8GA1UdIwQYMBaAFAUrRUmufk4nzVdl
yOgsd2GM7CdRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTZlYmUz
MzUzMDM3M2QyYzJiZmZhYWVkMWU1M2YwNWRiOGUyYTQzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFiMmQ4MDMtMGE5My00ZTk1LTk5ZjAtMTNjNzUz
ZWQxMzZjLzk5OTAwMGVlZDM2N2NmNDgxZjkxOGFjZTU1MWIyZmE2NTYxMjA4ZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWIyZDgwMy0wYTkzLTRlOTUtOTlmMC0xM2M3
NTNlZDEzNmMvYTZlYmUzMzUzMDM3M2QyYzJiZmZhYWVkMWU1M2YwNWRiOGUyYTQz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQALbFtAwQELbFgMA0GCSqGSIb3DQEBCwUAA4IBAQBgRJZR
axzSwV4jj8iMkzkC0EI4E5anj8xZcaT8tPQhQ3W+hN5J2VdijMOzqnkpyAqsnYCn
v9eum8qHnp0q+Yd7vIfPJRPGpYaRwHqe5R1FeUsSkzWqqsscNlh3oh6JSW1ygH2Y
qgUz+Zzj+7VW1BxI87gwuA9fLHYKue+TioOBc9QLqaUVyoQQw6VQ3aBaHbTUoc+x
/jfGotK5rlc84ksXOtYZYjzynWkd3pBuMEsg0XPtjV+JyQgceXCblowHu2lzWqyx
OMmt164AShjJmEwALAZFlOm9cdeB28wuFM7gsW3VjSDBfgKPqEyowyjhlQjdJRWw
HdeuJNnluklRtqof
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org