Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/f59d4617b3fb0fb6918422e0edc73d402f574505.roa
File:                     f59d4617b3fb0fb6918422e0edc73d402f574505.roa (raw, json)
Hash identifier:          4FwCscGbZVjPuTAzvWun0AU7j+5CpbedBff1pwCcRYE=
Subject key identifier:   98:6B:27:A7:0C:AF:2C:7E:10:55:06:A2:57:40:10:B0:BD:C6:F4:78
Certificate issuer:       /CN=437aff5beeb847e72273c618678286e725df2433
Certificate serial:       03B0AC
Authority key identifier: DF:2D:D1:9B:42:46:AB:FD:B2:D5:CD:18:04:9E:78:FE:C8:A3:32:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/437aff5beeb847e72273c618678286e725df2433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/f59d4617b3fb0fb6918422e0edc73d402f574505.roa
Signing time:             Thu 28 Sep 2023 22:16:34 +0000
ROA not before:           Wed 27 Sep 2023 22:16:33 +0000
ROA not after:            Sun 28 Sep 2025 22:16:33 +0000
asID:                     265574
IP address blocks:        45.174.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241836 (0x3b0ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437aff5beeb847e72273c618678286e725df2433
        Validity
            Not Before: Sep 27 22:16:33 2023 GMT
            Not After : Sep 28 22:16:33 2025 GMT
        Subject: CN=f59d4617b3fb0fb6918422e0edc73d402f574505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:8b:ae:c0:82:58:db:21:c1:39:cb:52:8c:
                    0d:fb:c5:1c:11:51:84:e7:f1:d1:02:ec:a6:b7:f3:
                    42:91:04:f5:07:de:a1:14:ef:65:83:04:3d:5b:d5:
                    76:d2:df:57:88:4f:65:6a:6e:19:6a:9c:f2:c6:e4:
                    75:75:76:e1:b3:c3:a4:31:64:27:e9:7e:3c:6f:13:
                    06:a8:b6:a7:b1:27:75:6b:b7:4f:84:5e:b7:06:1f:
                    f9:61:2b:17:34:86:56:4d:26:a5:a8:3a:fc:5c:01:
                    e0:11:17:df:67:09:fc:e7:8b:58:2d:c5:f1:90:01:
                    92:b8:37:9c:7e:6e:e0:40:a1:e8:aa:2d:6f:9e:99:
                    f2:57:9b:30:30:b0:ab:a9:ac:07:8f:0d:4f:6a:6a:
                    49:c1:47:32:57:27:63:3b:4d:f7:eb:66:32:8d:88:
                    48:7b:72:41:cf:bb:41:73:83:67:1a:d3:44:d4:78:
                    07:cd:e4:f2:4e:55:a7:ed:2d:0d:f2:74:66:ea:ec:
                    d7:d3:82:34:66:cc:5b:77:6d:93:29:37:66:5e:2e:
                    36:16:29:ed:64:36:81:93:c8:bd:5f:e5:e5:d8:b0:
                    d8:43:a1:b9:5d:36:2c:eb:cb:54:33:f5:50:39:b6:
                    56:8d:02:07:86:58:a3:21:65:06:36:01:2f:24:bd:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:27:A7:0C:AF:2C:7E:10:55:06:A2:57:40:10:B0:BD:C6:F4:78
            X509v3 Authority Key Identifier:
                keyid:DF:2D:D1:9B:42:46:AB:FD:B2:D5:CD:18:04:9E:78:FE:C8:A3:32:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/437aff5beeb847e72273c618678286e725df2433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/f59d4617b3fb0fb6918422e0edc73d402f574505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/437aff5beeb847e72273c618678286e725df2433.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:36:5a:12:0b:eb:05:7d:5f:72:dd:0c:67:36:ab:ee:f7:3f:
         8c:d9:61:4b:15:cc:a4:5e:23:40:53:d7:72:a0:18:b2:07:66:
         47:41:e8:39:27:72:83:79:40:97:0a:69:17:2a:c5:0d:49:95:
         a3:70:b1:56:81:2b:55:73:1e:80:19:a4:24:f2:dc:41:f0:e3:
         6b:03:17:94:92:83:39:7e:7d:f5:90:11:ee:37:7f:79:4c:10:
         d3:47:ef:46:14:60:ed:f3:9a:d7:e4:32:ba:25:f0:19:c3:f6:
         b2:b9:60:91:4b:01:24:16:85:dc:db:4a:03:74:0b:b0:37:72:
         58:53:53:8d:22:98:c1:4d:01:0d:95:77:24:c3:d6:48:4e:ff:
         ac:76:1b:8c:d6:e6:8e:13:44:4a:86:ef:ee:fb:65:df:8c:66:
         b9:47:39:be:6e:e5:70:c0:28:aa:62:59:67:55:f0:9c:1d:ff:
         12:81:43:4c:d6:09:5d:31:69:ed:99:04:13:24:7d:9f:10:cd:
         49:57:dc:68:8e:ee:76:b3:93:a1:39:45:2b:82:52:13:f0:d8:
         52:44:ce:c7:2b:4a:3d:b8:3d:fc:b7:e1:0e:a3:ed:ee:97:09:
         ad:fc:18:51:0f:8e:cb:b0:5b:eb:5f:72:b6:ce:77:f9:f6:6f:
         e6:31:3b:54
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA7CsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
N2FmZjViZWViODQ3ZTcyMjczYzYxODY3ODI4NmU3MjVkZjI0MzMwHhcNMjMwOTI3
MjIxNjMzWhcNMjUwOTI4MjIxNjMzWjAzMTEwLwYDVQQDEyhmNTlkNDYxN2IzZmIw
ZmI2OTE4NDIyZTBlZGM3M2Q0MDJmNTc0NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkl6LrsCCWNshwTnLUowN+8UcEVGE5/HRAuymt/NCkQT1B96h
FO9lgwQ9W9V20t9XiE9lam4ZapzyxuR1dXbhs8OkMWQn6X48bxMGqLansSd1a7dP
hF63Bh/5YSsXNIZWTSalqDr8XAHgERffZwn854tYLcXxkAGSuDecfm7gQKHoqi1v
npnyV5swMLCrqawHjw1PampJwUcyVydjO03362YyjYhIe3JBz7tBc4NnGtNE1HgH
zeTyTlWn7S0N8nRm6uzX04I0Zsxbd22TKTdmXi42FintZDaBk8i9X+Xl2LDYQ6G5
XTYs68tUM/VQObZWjQIHhlijIWUGNgEvJL0ImwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJhrJ6cMryx+EFUGoldAELC9xvR4MB8GA1UdIwQYMBaAFN8t0ZtCRqv9stXN
GASeeP7IozKCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDM3YWZm
NWJlZWI4NDdlNzIyNzNjNjE4Njc4Mjg2ZTcyNWRmMjQzMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzdlN2NmYzYtOWE3ZC00MTI2LThmODItNmViZDMw
NTBhY2U3L2Y1OWQ0NjE3YjNmYjBmYjY5MTg0MjJlMGVkYzczZDQwMmY1NzQ1MDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83N2U3Y2ZjNi05YTdkLTQxMjYtOGY4Mi02ZWJk
MzA1MGFjZTcvNDM3YWZmNWJlZWI4NDdlNzIyNzNjNjE4Njc4Mjg2ZTcyNWRmMjQz
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2ubDANBgkqhkiG9w0BAQsFAAOCAQEASzZaEgvrBX1fct0M
Zzar7vc/jNlhSxXMpF4jQFPXcqAYsgdmR0HoOSdyg3lAlwppFyrFDUmVo3CxVoEr
VXMegBmkJPLcQfDjawMXlJKDOX599ZAR7jd/eUwQ00fvRhRg7fOa1+QyuiXwGcP2
srlgkUsBJBaF3NtKA3QLsDdyWFNTjSKYwU0BDZV3JMPWSE7/rHYbjNbmjhNESobv
7vtl34xmuUc5vm7lcMAoqmJZZ1XwnB3/EoFDTNYJXTFp7ZkEEyR9nxDNSVfcaI7u
drOToTlFK4JSE/DYUkTOxytKPbg9/LfhDqPt7pcJrfwYUQ+Oy7Bb619yts53+fZv
5jE7VA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org