Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/01378bb094c64938f6568db4f3916974aa42e38d.roa
File:                     01378bb094c64938f6568db4f3916974aa42e38d.roa (raw, json)
Hash identifier:          EBG/B6dbborS0SsuN3a12Z83Oxk4IrhQf9AtWnAmrNo=
Subject key identifier:   B1:D6:1C:A6:9D:13:E6:5D:EA:1D:BA:C2:A6:6C:51:AB:FF:D8:29:82
Certificate issuer:       /CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
Certificate serial:       227F72
Authority key identifier: 5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/01378bb094c64938f6568db4f3916974aa42e38d.roa
Signing time:             Thu 25 Jan 2024 21:12:30 +0000
ROA not before:           Thu 25 Jan 2024 21:12:30 +0000
ROA not after:            Sun 25 Jan 2026 21:12:30 +0000
asID:                     52468
IP address blocks:        45.189.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260850 (0x227f72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
        Validity
            Not Before: Jan 25 21:12:30 2024 GMT
            Not After : Jan 25 21:12:30 2026 GMT
        Subject: CN=01378bb094c64938f6568db4f3916974aa42e38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:ef:70:22:28:5e:88:03:34:29:71:b6:da:
                    68:35:94:59:74:81:b5:ed:df:d5:a7:7e:84:7f:07:
                    9e:e8:69:83:48:93:5b:33:fa:5b:7a:31:46:31:27:
                    1b:76:f6:b7:12:0c:7c:53:38:9e:7c:c7:0e:c9:d3:
                    23:71:2f:90:a3:35:54:da:3b:04:7f:1f:eb:37:21:
                    2f:f7:53:2f:68:1b:1d:eb:0a:b2:6f:d4:b0:dc:36:
                    f9:2c:12:64:5f:35:49:1a:36:78:25:28:97:4f:b6:
                    c2:20:29:25:b8:3f:b5:ea:72:00:57:5f:f6:0f:2f:
                    59:fd:bb:5e:20:d1:3b:79:8a:11:8f:ad:1c:3f:c1:
                    ce:eb:2f:3b:c1:77:be:dd:1e:bb:18:c2:8b:e5:23:
                    20:9c:15:44:d9:d4:cd:e2:42:b0:fa:04:b5:41:b6:
                    cf:f2:b2:73:5a:b2:1c:32:39:a7:52:c9:bd:50:51:
                    e8:13:a1:bd:c1:ac:0d:fe:71:8c:8a:ae:3b:ae:d6:
                    a1:ca:3c:5d:41:72:3e:e8:58:c8:7d:0a:6f:e6:71:
                    c4:80:19:3f:b1:ff:13:e3:7f:3b:4c:f0:d1:ca:bc:
                    d8:a1:2c:ce:c1:49:f8:7a:54:22:e8:36:1d:d2:ea:
                    9c:0b:ba:cc:bc:5f:2b:2b:c9:34:f9:2d:72:69:c0:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D6:1C:A6:9D:13:E6:5D:EA:1D:BA:C2:A6:6C:51:AB:FF:D8:29:82
            X509v3 Authority Key Identifier:
                keyid:5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/01378bb094c64938f6568db4f3916974aa42e38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:6b:f1:af:98:46:3d:7a:3b:76:ee:7a:ae:c8:86:fb:29:
         f9:a5:40:8b:b0:66:13:ec:a6:60:da:85:47:aa:5e:51:c9:e3:
         f5:f6:e9:76:b2:62:e9:8a:3a:15:4a:d0:d5:21:22:41:59:02:
         6d:85:4d:99:6f:ad:cc:3b:2d:7b:87:34:d6:cb:5b:be:77:2f:
         bd:11:48:0d:70:0f:94:a6:1e:3d:18:f4:18:26:96:ee:26:27:
         de:9b:b8:8c:b1:33:55:b8:6f:80:97:bc:8a:36:31:9f:33:c9:
         43:9d:11:74:15:10:7e:8b:21:25:a4:12:9a:8d:48:18:00:7e:
         68:1d:0e:82:fe:58:91:fa:c9:f6:01:26:07:a7:0f:ad:42:c4:
         d4:b1:82:1d:d6:1d:a1:3a:d7:bb:c5:5f:ae:22:64:4f:19:f4:
         7b:09:13:aa:6c:7c:70:a8:ec:5e:5e:76:82:37:57:e1:05:a6:
         2f:ee:ac:f7:28:a4:59:aa:fc:f5:ef:3e:a1:85:6d:d8:3b:7d:
         95:99:1b:9d:86:50:ea:88:43:18:39:0d:db:3a:e6:73:fe:fb:
         33:e0:93:d4:46:07:56:42:eb:de:c8:a9:fb:60:5b:a8:ca:86:
         04:3b:49:9d:ca:3f:bd:88:c7:69:b3:10:31:c3:b2:8f:3d:0a:
         f4:d7:2b:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIn9yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
ZDMwMTg3YzJjOGY4ZTFlNTBhNDRkNmU2YjM1ZjNhMWNhMTJhNGIwHhcNMjQwMTI1
MjExMjMwWhcNMjYwMTI1MjExMjMwWjAzMTEwLwYDVQQDEygwMTM3OGJiMDk0YzY0
OTM4ZjY1NjhkYjRmMzkxNjk3NGFhNDJlMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvr7vcCIoXogDNClxttpoNZRZdIG17d/Vp36Efwee6GmDSJNb
M/pbejFGMScbdva3Egx8UziefMcOydMjcS+QozVU2jsEfx/rNyEv91MvaBsd6wqy
b9Sw3Db5LBJkXzVJGjZ4JSiXT7bCICkluD+16nIAV1/2Dy9Z/bteINE7eYoRj60c
P8HO6y87wXe+3R67GMKL5SMgnBVE2dTN4kKw+gS1QbbP8rJzWrIcMjmnUsm9UFHo
E6G9wawN/nGMiq47rtahyjxdQXI+6FjIfQpv5nHEgBk/sf8T4387TPDRyrzYoSzO
wUn4elQi6DYd0uqcC7rMvF8rK8k0+S1yacDmPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLHWHKadE+Zd6h26wqZsUav/2CmCMB8GA1UdIwQYMBaAFF+mteyLqZ7Wi7+S
tY3O1uvn6I2BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWRkMzAx
ODdjMmM4ZjhlMWU1MGE0NGQ2ZTZiMzVmM2ExY2ExMmE0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzNiNTQzYTgtY2Y1Mi00YTMxLTgwMjgtM2JhMmE4
MWJjNmRmLzAxMzc4YmIwOTRjNjQ5MzhmNjU2OGRiNGYzOTE2OTc0YWE0MmUzOGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83M2I1NDNhOC1jZjUyLTRhMzEtODAyOC0zYmEy
YTgxYmM2ZGYvYWRkMzAxODdjMmM4ZjhlMWU1MGE0NGQ2ZTZiMzVmM2ExY2ExMmE0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC29PDANBgkqhkiG9w0BAQsFAAOCAQEARv5r8a+YRj16O3bu
eq7Ihvsp+aVAi7BmE+ymYNqFR6peUcnj9fbpdrJi6Yo6FUrQ1SEiQVkCbYVNmW+t
zDste4c01stbvncvvRFIDXAPlKYePRj0GCaW7iYn3pu4jLEzVbhvgJe8ijYxnzPJ
Q50RdBUQfoshJaQSmo1IGAB+aB0Ogv5YkfrJ9gEmB6cPrULE1LGCHdYdoTrXu8Vf
riJkTxn0ewkTqmx8cKjsXl52gjdX4QWmL+6s9yikWar89e8+oYVt2Dt9lZkbnYZQ
6ohDGDkN2zrmc/77M+CT1EYHVkLr3sip+2BbqMqGBDtJnco/vYjHabMQMcOyjz0K
9NcrIA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org