Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/c1122ce7c812d242546e46b6c447cd09e0b4330b.roa
File:                     c1122ce7c812d242546e46b6c447cd09e0b4330b.roa (raw, json)
Hash identifier:          B7oBX7xElm67GmKO/+Wcn8Aj10S3PRiJ0K6b/1RrIzI=
Subject key identifier:   14:04:E5:B7:C2:35:B3:B4:F8:5D:C9:33:10:9E:89:13:25:FD:76:60
Certificate issuer:       /CN=dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a
Certificate serial:       0D3386
Authority key identifier: A9:7B:E6:50:E4:7A:DF:0A:24:B5:9F:E6:39:B3:43:11:A1:86:F6:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/c1122ce7c812d242546e46b6c447cd09e0b4330b.roa
Signing time:             Wed 24 Mar 2021 14:45:35 +0000
ROA not before:           Wed 24 Mar 2021 14:45:35 +0000
ROA not after:            Tue 24 Mar 2026 14:45:35 +0000
asID:                     32034
IP address blocks:        45.225.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865158 (0xd3386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a
        Validity
            Not Before: Mar 24 14:45:35 2021 GMT
            Not After : Mar 24 14:45:35 2026 GMT
        Subject: CN=c1122ce7c812d242546e46b6c447cd09e0b4330b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:3c:0d:0a:d9:a1:c8:22:74:8f:4c:b4:d3:
                    14:1a:34:7a:2b:3c:a2:5b:81:d7:ca:06:b9:04:cc:
                    76:67:03:94:69:60:6b:6f:9b:28:85:63:2e:dc:0d:
                    92:40:1e:15:21:a3:5e:8f:b7:d2:31:1b:80:72:ba:
                    92:80:06:df:60:02:90:df:cc:87:1a:e5:cd:e7:4c:
                    30:72:e8:16:bf:f7:c5:18:65:7f:e8:5a:fb:1d:db:
                    4b:56:0d:03:75:22:a4:1e:b3:03:a6:13:60:05:31:
                    0c:cc:f0:12:10:ec:8e:66:81:32:3d:df:78:d9:ef:
                    9f:ab:20:c1:71:31:43:9f:da:90:1a:87:22:1b:23:
                    4a:05:04:78:28:f6:a9:fd:99:53:58:d5:d4:f5:34:
                    12:aa:a1:93:0c:6c:48:49:11:2f:77:4f:bb:fc:71:
                    61:fa:4e:e2:c6:97:3a:d4:92:d7:da:12:fa:23:14:
                    a1:d1:83:91:b3:d3:89:c2:c8:4d:ea:98:58:df:9d:
                    d5:76:c9:a6:c1:d3:e7:7e:34:c8:76:58:50:53:89:
                    4c:ef:6c:7c:d0:cf:b4:92:7f:75:ca:fb:a1:76:5a:
                    25:c8:96:e3:4c:06:49:d6:8b:9c:16:c4:ed:30:46:
                    9b:a9:96:cb:67:4c:14:6f:a7:69:f3:22:e7:ca:83:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:04:E5:B7:C2:35:B3:B4:F8:5D:C9:33:10:9E:89:13:25:FD:76:60
            X509v3 Authority Key Identifier:
                keyid:A9:7B:E6:50:E4:7A:DF:0A:24:B5:9F:E6:39:B3:43:11:A1:86:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/c1122ce7c812d242546e46b6c447cd09e0b4330b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:55:7b:df:00:69:1e:d3:59:e6:81:da:ef:24:0b:33:8f:
         cb:a2:1f:38:a2:00:77:02:6d:7b:56:47:3d:b2:a2:16:6b:9c:
         ad:7f:ba:26:5f:6b:56:90:1d:9e:64:10:19:1a:fb:cd:34:62:
         59:61:76:bd:fa:b8:a9:36:2d:2e:2d:00:13:c6:ec:0f:f2:83:
         49:8b:77:50:1a:9b:c1:d1:cb:e8:3b:55:91:4e:4b:32:c3:ec:
         b6:6d:53:9d:ce:ad:0e:7e:a0:89:3b:d9:47:3e:6b:d8:1d:1f:
         19:fa:0a:9f:c8:17:d1:72:f8:2e:fc:74:a4:70:1f:cc:e6:c2:
         9f:90:b2:5a:8f:e5:0b:2b:71:f4:b8:76:7b:82:d6:07:30:62:
         51:67:1b:c6:89:4b:2d:de:50:62:02:ef:a5:b0:ca:18:46:f1:
         d2:d4:3f:03:af:26:e4:45:11:d1:5a:f4:31:62:4f:63:0c:68:
         c4:3a:8c:57:38:ba:52:db:a9:cb:40:55:a2:99:22:d4:3f:54:
         cb:05:4e:da:9c:f2:37:ce:8e:d6:ba:e4:c8:8c:29:13:a7:b8:
         ba:06:cc:e2:02:34:11:2c:60:82:12:1a:c6:ec:08:66:6c:13:
         47:96:d7:65:04:3a:fe:82:ed:49:e8:1f:84:cb:9a:9e:74:8c:
         54:b0:bb:fd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTOGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
YTE2NDZjYjhkYzIzZWM0ZjA3MjFhYzJmZDczMjNhN2I3OWEwOWEwHhcNMjEwMzI0
MTQ0NTM1WhcNMjYwMzI0MTQ0NTM1WjAzMTEwLwYDVQQDEyhjMTEyMmNlN2M4MTJk
MjQyNTQ2ZTQ2YjZjNDQ3Y2QwOWUwYjQzMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjMs8DQrZocgidI9MtNMUGjR6KzyiW4HXyga5BMx2ZwOUaWBr
b5sohWMu3A2SQB4VIaNej7fSMRuAcrqSgAbfYAKQ38yHGuXN50wwcugWv/fFGGV/
6Fr7HdtLVg0DdSKkHrMDphNgBTEMzPASEOyOZoEyPd942e+fqyDBcTFDn9qQGoci
GyNKBQR4KPap/ZlTWNXU9TQSqqGTDGxISREvd0+7/HFh+k7ixpc61JLX2hL6IxSh
0YORs9OJwshN6phY353VdsmmwdPnfjTIdlhQU4lM72x80M+0kn91yvuhdlolyJbj
TAZJ1oucFsTtMEabqZbLZ0wUb6dp8yLnyoMClQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBQE5bfCNbO0+F3JMxCeiRMl/XZgMB8GA1UdIwQYMBaAFKl75lDket8KJLWf
5jmzQxGhhvZoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGZhMTY0
NmNiOGRjMjNlYzRmMDcyMWFjMmZkNzMyM2E3Yjc5YTA5YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzZlOGUyNmQtZDdjNC00ZjcyLWJhNzgtNzk5ZWVj
NjA2MzAyL2MxMTIyY2U3YzgxMmQyNDI1NDZlNDZiNmM0NDdjZDA5ZTBiNDMzMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NmU4ZTI2ZC1kN2M0LTRmNzItYmE3OC03OTll
ZWM2MDYzMDIvZGZhMTY0NmNiOGRjMjNlYzRmMDcyMWFjMmZkNzMyM2E3Yjc5YTA5
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3hmDANBgkqhkiG9w0BAQsFAAOCAQEAR+xVe98AaR7TWeaB
2u8kCzOPy6IfOKIAdwJte1ZHPbKiFmucrX+6Jl9rVpAdnmQQGRr7zTRiWWF2vfq4
qTYtLi0AE8bsD/KDSYt3UBqbwdHL6DtVkU5LMsPstm1Tnc6tDn6giTvZRz5r2B0f
GfoKn8gX0XL4Lvx0pHAfzObCn5CyWo/lCytx9Lh2e4LWBzBiUWcbxolLLd5QYgLv
pbDKGEbx0tQ/A68m5EUR0Vr0MWJPYwxoxDqMVzi6Utupy0BVopki1D9UywVO2pzy
N86O1rrkyIwpE6e4ugbM4gI0ESxgghIaxuwIZmwTR5bXZQQ6/oLtSegfhMuannSM
VLC7/Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org