Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/746d5afbfff24cc4a196346cdee093add671a053.roa
File:                     746d5afbfff24cc4a196346cdee093add671a053.roa (raw, json)
Hash identifier:          e/+Ss8hKUIFjF3feRFJTGwl3RQdBNL25exAl+QJHPZA=
Subject key identifier:   38:AD:90:E1:8F:B5:8B:3D:2E:96:50:E1:F7:48:93:96:5F:85:6F:6D
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       030386
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/746d5afbfff24cc4a196346cdee093add671a053.roa
Signing time:             Wed 09 Jun 2021 23:14:59 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        45.173.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197510 (0x30386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=746d5afbfff24cc4a196346cdee093add671a053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:86:c5:fb:b8:d9:01:18:27:a5:51:63:d1:
                    12:18:a1:a3:ca:e5:cc:00:86:ce:34:a8:13:61:f1:
                    d5:b0:55:35:a8:e5:36:7b:b5:74:b8:fc:55:9d:77:
                    ea:df:e3:2b:10:44:23:95:3c:0c:75:44:87:fb:0f:
                    7e:f6:c8:05:f3:fd:0f:7d:14:ed:cd:c5:ab:fd:d3:
                    17:0f:a0:be:4b:7b:5d:f1:5d:3d:e2:3a:04:61:5c:
                    0a:e8:87:e5:aa:14:f8:34:a1:35:53:9b:0d:a1:aa:
                    a5:04:da:44:26:e5:91:32:81:8f:e8:7e:3c:31:7e:
                    54:e1:e2:cd:a5:5d:79:a5:93:87:87:2c:88:f2:8f:
                    a6:97:c1:47:3b:94:30:d3:12:b3:c2:04:08:0f:45:
                    9d:38:f3:cb:98:e8:e9:79:9c:57:91:7d:45:d8:99:
                    f5:64:42:a0:5c:27:0e:1b:2c:33:8d:48:16:71:8b:
                    38:50:69:49:ac:e9:dc:d1:b6:01:e8:13:0c:36:8f:
                    4b:24:55:a4:de:6d:8c:f5:3f:25:cf:d9:40:8c:36:
                    61:52:d1:b1:16:e7:a3:05:e3:55:3a:5d:fc:05:a1:
                    06:c6:fe:31:90:9f:c6:bb:49:32:06:b2:09:c8:ff:
                    45:7b:86:18:61:31:90:f6:1f:25:44:ca:17:59:a3:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:90:E1:8F:B5:8B:3D:2E:96:50:E1:F7:48:93:96:5F:85:6F:6D
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/746d5afbfff24cc4a196346cdee093add671a053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:58:bf:89:17:81:e8:90:37:cf:7b:ae:f9:01:db:7b:4a:2b:
         d4:f9:63:c7:1c:57:74:50:9e:8e:3f:91:70:48:cf:50:9d:ae:
         b5:f7:75:b1:12:3e:22:08:5c:86:26:2c:66:4d:1e:c7:67:34:
         7c:bd:77:c5:52:90:1b:b5:21:d5:36:ab:13:f2:de:f7:a6:05:
         7a:bc:e0:c3:31:5c:00:75:c4:81:5b:cc:62:4e:12:93:a1:13:
         95:0e:d0:c1:6e:33:bc:a6:0a:75:8d:74:f3:fe:8e:72:e1:fd:
         27:f7:20:f5:96:65:bd:76:c6:9b:75:6d:6a:df:d4:4b:9d:5f:
         92:7f:7e:ad:91:72:96:f4:d3:fa:04:61:f0:5a:61:98:e4:52:
         d6:5c:36:ac:46:8e:08:31:b1:cd:a1:7f:cc:3e:ed:44:89:3e:
         c6:e7:12:81:1d:24:04:d9:52:80:bf:8e:6e:1c:45:ed:a1:19:
         31:8f:1a:00:5f:cd:fc:b2:b2:a3:82:3e:1e:2e:8d:1c:70:0e:
         fa:17:67:23:2c:fc:2c:ee:ab:cd:cb:03:32:13:e3:98:45:c9:
         dc:29:51:ed:bb:38:ad:d7:e7:20:ab:71:c4:40:1f:da:41:b8:
         a8:b3:5f:b5:75:be:e6:dc:47:76:f4:eb:74:b7:4f:fe:db:6a:
         73:19:b6:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAwOGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
MWVlMzdlZThjNjc3MGIxNjdjMjU5MGYzMDI5N2NiMTAwMDVmMTYwHhcNMjEwNjA5
MDMwMDAwWhcNMjMwNjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg3NDZkNWFmYmZmZjI0
Y2M0YTE5NjM0NmNkZWUwOTNhZGQ2NzFhMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqjuGxfu42QEYJ6VRY9ESGKGjyuXMAIbONKgTYfHVsFU1qOU2
e7V0uPxVnXfq3+MrEEQjlTwMdUSH+w9+9sgF8/0PfRTtzcWr/dMXD6C+S3td8V09
4joEYVwK6IflqhT4NKE1U5sNoaqlBNpEJuWRMoGP6H48MX5U4eLNpV15pZOHhyyI
8o+ml8FHO5Qw0xKzwgQID0WdOPPLmOjpeZxXkX1F2Jn1ZEKgXCcOGywzjUgWcYs4
UGlJrOnc0bYB6BMMNo9LJFWk3m2M9T8lz9lAjDZhUtGxFuejBeNVOl38BaEGxv4x
kJ/Gu0kyBrIJyP9Fe4YYYTGQ9h8lRMoXWaO6CwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDitkOGPtYs9LpZQ4fdIk5ZfhW9tMB8GA1UdIwQYMBaAFGRMMyz2QlujWSDr
oDDIptSt9E2LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTgxZWUz
N2VlOGM2NzcwYjE2N2MyNTkwZjMwMjk3Y2IxMDAwNWYxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODA4YzZjYjYtYmI2MC00NmE2LTkxZjYtOGU1NjEz
ZTY2MGI5Lzc0NmQ1YWZiZmZmMjRjYzRhMTk2MzQ2Y2RlZTA5M2FkZDY3MWEwNTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MDhjNmNiNi1iYjYwLTQ2YTYtOTFmNi04ZTU2
MTNlNjYwYjkvOTgxZWUzN2VlOGM2NzcwYjE2N2MyNTkwZjMwMjk3Y2IxMDAwNWYx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2tBTANBgkqhkiG9w0BAQsFAAOCAQEAYVi/iReB6JA3z3uu
+QHbe0or1PljxxxXdFCejj+RcEjPUJ2utfd1sRI+IghchiYsZk0ex2c0fL13xVKQ
G7Uh1TarE/Le96YFerzgwzFcAHXEgVvMYk4Sk6ETlQ7QwW4zvKYKdY108/6OcuH9
J/cg9ZZlvXbGm3Vtat/US51fkn9+rZFylvTT+gRh8FphmORS1lw2rEaOCDGxzaF/
zD7tRIk+xucSgR0kBNlSgL+ObhxF7aEZMY8aAF/N/LKyo4I+Hi6NHHAO+hdnIyz8
LO6rzcsDMhPjmEXJ3ClR7bs4rdfnIKtxxEAf2kG4qLNftXW+5txHdvTrdLdP/ttq
cxm2OA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org