Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/2d500a84c7222323acc9d11ecf9848a42caf3ac5.roa
File:                     2d500a84c7222323acc9d11ecf9848a42caf3ac5.roa (raw, json)
Hash identifier:          pW+31iPf2Y/UnCWgpUMZwYrHCD0cr7ori7LIoQL5mXQ=
Subject key identifier:   12:03:2C:C8:36:C6:92:5C:BD:3C:46:A8:DA:A3:38:A6:72:AF:EA:AE
Certificate issuer:       /CN=21946617726999f473e397ce5a1cff1c13cd4402
Certificate serial:       0B89DE
Authority key identifier: FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/2d500a84c7222323acc9d11ecf9848a42caf3ac5.roa
Signing time:             Mon 29 May 2023 17:10:25 +0000
ROA not before:           Sun 28 May 2023 17:10:25 +0000
ROA not after:            Thu 29 May 2025 17:10:25 +0000
asID:                     271929
IP address blocks:        45.236.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756190 (0xb89de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21946617726999f473e397ce5a1cff1c13cd4402
        Validity
            Not Before: May 28 17:10:25 2023 GMT
            Not After : May 29 17:10:25 2025 GMT
        Subject: CN=2d500a84c7222323acc9d11ecf9848a42caf3ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:ea:0f:4b:41:bf:c8:65:48:5e:1e:73:03:
                    5b:69:df:62:1b:83:5f:e3:be:8b:f2:c9:b4:17:9a:
                    de:bc:de:4e:8b:77:10:3e:ff:50:b6:92:5d:95:f0:
                    ee:13:ba:f5:c8:ce:c4:e9:91:8b:61:6e:e3:7f:18:
                    43:ae:9e:a9:ff:32:9a:9f:91:ac:f7:21:85:cb:d4:
                    a6:76:5d:32:46:18:f0:98:62:8f:5b:3c:c6:1e:96:
                    54:d3:fe:3e:f2:cd:f3:28:5e:fd:45:53:1c:96:bd:
                    60:8e:6f:cd:31:f4:92:74:78:64:c3:c6:7f:68:7a:
                    74:50:08:93:db:5a:61:2c:84:48:db:55:d9:1f:a5:
                    76:17:4e:9d:5b:f2:0c:69:58:52:11:88:1f:a7:4c:
                    c9:5f:10:7e:a4:2e:88:6f:42:d1:1b:c6:a4:24:67:
                    53:ac:4e:2f:ac:53:3b:75:f4:9d:73:7a:6b:6f:1f:
                    da:59:34:3e:6d:b9:b7:e3:fa:64:0b:ee:6b:bd:36:
                    bc:4a:dd:2b:7a:0d:6f:9a:50:70:26:a2:7d:65:03:
                    8a:a2:10:05:49:0e:d6:d7:3a:9c:6a:73:04:e6:f0:
                    51:db:b1:a5:33:c4:32:92:6c:8c:1d:54:12:ef:01:
                    96:9a:e5:07:61:e6:27:34:85:f2:70:9c:a2:15:36:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:2C:C8:36:C6:92:5C:BD:3C:46:A8:DA:A3:38:A6:72:AF:EA:AE
            X509v3 Authority Key Identifier:
                keyid:FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/2d500a84c7222323acc9d11ecf9848a42caf3ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/21946617726999f473e397ce5a1cff1c13cd4402.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:2d:be:c3:17:93:bd:c1:0f:34:72:9d:0c:f7:8a:b9:97:
         7c:ca:6c:20:a6:98:bc:90:1b:7c:f4:4d:7d:be:f1:79:1b:23:
         f2:99:73:b1:26:ab:de:a2:70:c7:38:e9:4d:12:93:f6:39:76:
         f6:36:5e:f0:35:25:cc:69:24:12:a0:89:e9:d1:be:24:03:ac:
         ea:01:bf:06:91:78:06:d8:60:7e:10:9a:05:53:7f:9c:4c:3c:
         04:b3:a9:62:72:05:b1:52:06:08:8c:90:52:4c:35:09:d1:79:
         70:e6:1b:2e:06:5c:bf:73:59:55:48:b2:b0:f3:14:b8:2c:d0:
         8d:47:4b:ff:e2:42:dc:18:ee:4c:fa:42:db:9f:40:47:a2:b2:
         17:d8:17:25:76:d1:53:88:68:51:eb:6d:54:07:8c:3b:a3:68:
         a9:07:19:86:91:91:11:27:37:68:58:f5:26:cd:88:8b:8c:30:
         b7:6b:d5:ba:ef:d4:b7:4a:b5:f1:ae:6a:d0:ea:a4:5b:20:b8:
         55:18:03:63:44:5c:fd:56:2d:b4:f2:22:c9:46:f7:53:f7:1f:
         9d:e2:de:2f:ea:60:6d:fd:fa:75:bd:5c:f7:0a:0e:ac:a0:5a:
         1d:71:da:84:9b:15:f0:82:2d:f3:b7:3e:a4:b2:d2:ae:17:f0:
         af:89:25:6e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC4neMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
OTQ2NjE3NzI2OTk5ZjQ3M2UzOTdjZTVhMWNmZjFjMTNjZDQ0MDIwHhcNMjMwNTI4
MTcxMDI1WhcNMjUwNTI5MTcxMDI1WjAzMTEwLwYDVQQDEygyZDUwMGE4NGM3MjIy
MzIzYWNjOWQxMWVjZjk4NDhhNDJjYWYzYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsFPqD0tBv8hlSF4ecwNbad9iG4Nf476L8sm0F5revN5Oi3cQ
Pv9QtpJdlfDuE7r1yM7E6ZGLYW7jfxhDrp6p/zKan5Gs9yGFy9Smdl0yRhjwmGKP
WzzGHpZU0/4+8s3zKF79RVMclr1gjm/NMfSSdHhkw8Z/aHp0UAiT21phLIRI21XZ
H6V2F06dW/IMaVhSEYgfp0zJXxB+pC6Ib0LRG8akJGdTrE4vrFM7dfSdc3prbx/a
WTQ+bbm34/pkC+5rvTa8St0reg1vmlBwJqJ9ZQOKohAFSQ7W1zqcanME5vBR27Gl
M8QykmyMHVQS7wGWmuUHYeYnNIXycJyiFTbMvQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBIDLMg2xpJcvTxGqNqjOKZyr+quMB8GA1UdIwQYMBaAFP5w5WGJKfWCqXPu
6VUkfH+meTfJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjE5NDY2
MTc3MjY5OTlmNDczZTM5N2NlNWExY2ZmMWMxM2NkNDQwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOWI5NDQtYmQ1NS00MTEwLWFmMGQtZGVjYzQ2
MTMwOWRkLzJkNTAwYTg0YzcyMjIzMjNhY2M5ZDExZWNmOTg0OGE0MmNhZjNhYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5Yjk0NC1iZDU1LTQxMTAtYWYwZC1kZWNj
NDYxMzA5ZGQvMjE5NDY2MTc3MjY5OTlmNDczZTM5N2NlNWExY2ZmMWMxM2NkNDQw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3sjDANBgkqhkiG9w0BAQsFAAOCAQEAZrstvsMXk73BDzRy
nQz3irmXfMpsIKaYvJAbfPRNfb7xeRsj8plzsSar3qJwxzjpTRKT9jl29jZe8DUl
zGkkEqCJ6dG+JAOs6gG/BpF4BthgfhCaBVN/nEw8BLOpYnIFsVIGCIyQUkw1CdF5
cOYbLgZcv3NZVUiysPMUuCzQjUdL/+JC3BjuTPpC259AR6KyF9gXJXbRU4hoUett
VAeMO6NoqQcZhpGRESc3aFj1Js2Ii4wwt2vVuu/Ut0q18a5q0OqkWyC4VRgDY0Rc
/VYttPIiyUb3U/cfneLeL+pgbf36db1c9woOrKBaHXHahJsV8IIt87c+pLLSrhfw
r4klbg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org