Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/de15886fc420ec52d1deae4eeee97adcb37854b7.roa
File:                     de15886fc420ec52d1deae4eeee97adcb37854b7.roa (raw, json)
Hash identifier:          XR7hVDZNJJ358uiZ5OuEVe8a3G+bKIOfIUcvH9mZWHA=
Subject key identifier:   B1:01:5E:B6:B4:8A:64:66:95:31:2E:53:0C:47:21:9B:B1:C0:24:86
Certificate issuer:       /CN=dbeef8d886d331f42fe8744deea812c350664bfc
Certificate serial:       C73B
Authority key identifier: B8:96:FE:FB:3E:75:88:D9:DA:58:E0:DD:C5:6A:E3:39:00:D3:E9:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbeef8d886d331f42fe8744deea812c350664bfc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/de15886fc420ec52d1deae4eeee97adcb37854b7.roa
Signing time:             Wed 24 Mar 2021 22:49:49 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     271843
IP address blocks:        45.162.132.0/23 maxlen: 24
                          45.162.134.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51003 (0xc73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbeef8d886d331f42fe8744deea812c350664bfc
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=de15886fc420ec52d1deae4eeee97adcb37854b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:17:a7:06:18:bd:56:43:1a:b0:c6:96:ac:10:
                    e2:3b:eb:9c:4d:0d:c9:f8:b2:fd:9c:20:b9:6c:99:
                    7f:98:df:22:e8:2f:0c:18:86:5f:24:00:a8:cb:96:
                    8f:23:d7:23:2e:a0:c7:67:82:d0:42:dc:de:4a:b1:
                    94:52:8d:c7:66:01:4e:07:1f:70:bd:3b:f5:15:44:
                    ca:46:df:f8:d7:92:49:be:af:40:08:bd:ce:bb:bc:
                    04:42:a9:84:1f:7a:e8:74:7b:1d:e3:b6:73:d0:d1:
                    96:e6:27:cb:f2:76:f3:c4:da:96:7e:65:13:b7:57:
                    1e:9a:ea:c7:ce:ed:40:84:79:42:7c:4c:78:db:94:
                    9c:29:a3:73:b4:ad:9b:d2:0c:fc:4f:0d:33:fe:5c:
                    dc:c9:41:81:d7:14:d3:96:13:de:30:6c:54:7a:25:
                    76:a4:c5:41:ca:86:25:f7:90:12:1c:8d:bb:b7:82:
                    66:2f:1c:19:b6:47:60:9c:08:68:c5:0b:da:5a:2e:
                    ba:37:60:b6:f4:45:17:e7:cf:20:91:50:42:1c:8a:
                    4f:f2:80:0a:14:94:c4:1a:9a:9d:a2:3f:73:03:46:
                    71:e8:41:90:c9:97:56:32:ac:89:f9:23:af:83:d6:
                    34:81:22:fa:6b:e0:d8:87:ad:e2:03:05:e2:59:33:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:01:5E:B6:B4:8A:64:66:95:31:2E:53:0C:47:21:9B:B1:C0:24:86
            X509v3 Authority Key Identifier:
                keyid:B8:96:FE:FB:3E:75:88:D9:DA:58:E0:DD:C5:6A:E3:39:00:D3:E9:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbeef8d886d331f42fe8744deea812c350664bfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/de15886fc420ec52d1deae4eeee97adcb37854b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/dbeef8d886d331f42fe8744deea812c350664bfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:af:c6:14:92:df:dd:00:6a:d0:5f:70:2d:e8:b0:34:91:02:
         c7:83:8b:58:11:50:49:f5:5e:1e:5a:7c:47:3b:9e:a3:d6:e9:
         ac:95:0c:05:d5:b1:67:46:a8:7b:cf:6a:d3:5b:50:a2:7f:cf:
         0f:6e:0a:f1:45:68:b2:a0:2f:db:b1:18:26:93:a0:2f:b7:51:
         74:1d:94:6e:87:e9:e7:69:cb:67:97:f6:d7:f3:6d:ae:ac:ba:
         ed:47:15:05:b6:67:09:df:68:df:b3:dd:fd:d8:7b:42:e1:84:
         1d:1b:28:58:f7:7d:63:76:45:22:2a:c2:95:6f:d0:9f:c3:5d:
         eb:68:69:65:7e:cd:ca:7e:1f:c1:09:e4:17:da:93:6a:d9:6a:
         7f:51:8e:7c:be:bc:9f:53:8d:2b:68:b5:d8:cb:21:7b:a7:8d:
         8e:c0:ae:ef:90:a4:b1:ad:1b:05:fb:13:c7:ea:65:8d:59:7d:
         61:4b:e6:44:60:59:1b:57:d2:87:39:f2:cb:c9:af:b0:96:c8:
         56:4d:dd:41:59:e6:1b:8d:74:fa:ad:c3:8a:64:5c:ae:e8:b3:
         f9:ac:f5:21:0c:ab:16:48:8f:da:7a:5b:b5:58:a8:28:8a:b7:
         f9:ae:56:e1:c3:2b:a9:7c:63:aa:3c:8f:2c:43:8f:0c:57:c2:
         24:f1:29:f3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAMc7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRi
ZWVmOGQ4ODZkMzMxZjQyZmU4NzQ0ZGVlYTgxMmMzNTA2NjRiZmMwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhkZTE1ODg2ZmM0MjBl
YzUyZDFkZWFlNGVlZWU5N2FkY2IzNzg1NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlxenBhi9VkMasMaWrBDiO+ucTQ3J+LL9nCC5bJl/mN8i6C8M
GIZfJACoy5aPI9cjLqDHZ4LQQtzeSrGUUo3HZgFOBx9wvTv1FUTKRt/415JJvq9A
CL3Ou7wEQqmEH3rodHsd47Zz0NGW5ifL8nbzxNqWfmUTt1cemurHzu1AhHlCfEx4
25ScKaNztK2b0gz8Tw0z/lzcyUGB1xTTlhPeMGxUeiV2pMVByoYl95ASHI27t4Jm
LxwZtkdgnAhoxQvaWi66N2C29EUX588gkVBCHIpP8oAKFJTEGpqdoj9zA0Zx6EGQ
yZdWMqyJ+SOvg9Y0gSL6a+DYh63iAwXiWTOMOQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLEBXra0imRmlTEuUwxHIZuxwCSGMB8GA1UdIwQYMBaAFLiW/vs+dYjZ2ljg
3cVq4zkA0+mbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGJlZWY4
ZDg4NmQzMzFmNDJmZTg3NDRkZWVhODEyYzM1MDY2NGJmYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODA2OGZhMTMtODg2MC00OTczLThhMmMtYmE4YTZh
NWNkYzg0L2RlMTU4ODZmYzQyMGVjNTJkMWRlYWU0ZWVlZTk3YWRjYjM3ODU0Yjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MDY4ZmExMy04ODYwLTQ5NzMtOGEyYy1iYThh
NmE1Y2RjODQvZGJlZWY4ZDg4NmQzMzFmNDJmZTg3NDRkZWVhODEyYzM1MDY2NGJm
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2ihDANBgkqhkiG9w0BAQsFAAOCAQEAVq/GFJLf3QBq0F9w
LeiwNJECx4OLWBFQSfVeHlp8Rzueo9bprJUMBdWxZ0aoe89q01tQon/PD24K8UVo
sqAv27EYJpOgL7dRdB2Ubofp52nLZ5f21/Ntrqy67UcVBbZnCd9o37Pd/dh7QuGE
HRsoWPd9Y3ZFIirClW/Qn8Nd62hpZX7Nyn4fwQnkF9qTatlqf1GOfL68n1ONK2i1
2Mshe6eNjsCu75Cksa0bBfsTx+pljVl9YUvmRGBZG1fShznyy8mvsJbIVk3dQVnm
G410+q3DimRcruiz+az1IQyrFkiP2npbtVioKIq3+a5W4cMrqXxjqjyPLEOPDFfC
JPEp8w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org