Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/be293943e738a997a762fa891ae59aac2c479798.roa
File:                     be293943e738a997a762fa891ae59aac2c479798.roa (raw, json)
Hash identifier:          HTHLJyx6DZmVkPmRQyXkTkoPUQr7qjDdvPjf+JsHMG0=
Subject key identifier:   97:7E:8C:C1:2E:7C:12:C5:C6:E6:B7:5B:EE:BF:B7:02:4F:DA:1D:AA
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       0183FB
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/be293943e738a997a762fa891ae59aac2c479798.roa
Signing time:             Thu 15 Apr 2021 15:28:21 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99323 (0x183fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=be293943e738a997a762fa891ae59aac2c479798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:14:48:1f:dc:a4:84:72:ae:79:7f:9b:6a:
                    c6:d6:88:0a:fd:55:8f:ad:6e:32:ce:1b:c2:37:6e:
                    f3:75:ac:1e:18:9f:04:e4:0b:7f:0f:1f:dc:5f:e1:
                    65:b4:da:9e:c6:14:21:c3:4d:eb:00:29:bc:09:37:
                    8f:1f:55:b6:6f:39:2d:bf:cf:0d:bb:d5:fc:e0:ae:
                    44:85:fb:ae:65:6b:e4:ed:25:69:a2:ad:ab:49:27:
                    41:16:7c:ac:f3:c3:9f:be:41:43:89:6e:f9:2f:17:
                    7c:c8:f9:21:c0:07:c6:80:ae:a1:67:f3:83:02:48:
                    43:77:f8:8f:0d:a5:49:52:0b:93:63:35:9f:e4:04:
                    35:c4:5d:05:c2:b5:28:b9:1f:51:83:1e:16:c9:81:
                    ff:c9:d0:ba:4b:62:ce:2b:49:0d:6e:85:f9:9a:4d:
                    d7:df:1a:18:2c:8b:cb:8f:bd:48:22:59:87:3d:3f:
                    f3:43:e1:0a:7f:61:ed:40:31:9e:fd:b9:58:35:5e:
                    02:d4:2a:97:fe:6e:32:65:62:a0:c3:78:25:fd:0e:
                    45:55:9c:0e:cb:59:93:bb:ae:af:50:c2:e8:b2:08:
                    9d:2e:fe:f5:af:57:fd:dc:a0:80:5f:0a:e4:9c:55:
                    12:64:44:12:ee:c2:f7:fc:bc:6c:88:1e:57:e1:32:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:8C:C1:2E:7C:12:C5:C6:E6:B7:5B:EE:BF:B7:02:4F:DA:1D:AA
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/be293943e738a997a762fa891ae59aac2c479798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:e0:b8:57:cd:01:66:c9:b8:93:1f:c1:6e:44:c3:bb:e9:
         20:22:e1:af:c0:23:d7:04:b4:94:25:dd:62:20:86:bf:1b:f8:
         9a:4f:ce:40:d1:ba:9d:f9:96:a2:f5:92:6f:2e:a7:33:1c:43:
         0e:3c:df:0e:d8:8a:cd:fd:9f:e3:98:06:33:24:aa:46:77:9a:
         e2:5a:f3:12:50:a0:18:df:44:f9:82:d8:55:f3:02:5a:26:24:
         a4:ec:af:36:f4:ee:37:34:a9:79:f2:c8:c3:4d:94:79:31:5e:
         13:a0:ef:e7:eb:a7:a9:f0:b8:d9:b1:bb:38:a7:61:57:29:84:
         29:e2:a8:42:9f:77:50:a9:8d:46:49:86:28:af:d1:52:c6:d2:
         30:af:de:a3:a6:56:f1:d2:c5:c9:46:e1:86:b2:5a:5e:91:07:
         32:6c:6a:8f:cc:2b:b5:e7:23:92:9e:9a:8c:29:ff:8c:06:09:
         f0:4e:74:ed:2d:93:ff:f2:0b:3e:34:5e:f0:c8:2b:f5:9b:6e:
         f2:d3:57:65:5b:ea:03:62:48:c5:36:9b:4e:ce:43:b0:0a:c4:
         b3:31:17:72:13:27:1d:bc:c3:71:79:81:87:ff:c0:fa:80:2c:
         28:24:b0:cb:28:2a:3f:c9:d6:7c:6b:d9:76:20:f6:ed:71:da:
         b8:ff:0d:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAYP7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
MWVlMzdlZThjNjc3MGIxNjdjMjU5MGYzMDI5N2NiMTAwMDVmMTYwHhcNMjEwNDE1
MDMwMDAwWhcNMjMwNDE1MDMwMDAwWjAzMTEwLwYDVQQDEyhiZTI5Mzk0M2U3Mzhh
OTk3YTc2MmZhODkxYWU1OWFhYzJjNDc5Nzk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlO4USB/cpIRyrnl/m2rG1ogK/VWPrW4yzhvCN27zdaweGJ8E
5At/Dx/cX+FltNqexhQhw03rACm8CTePH1W2bzktv88Nu9X84K5EhfuuZWvk7SVp
oq2rSSdBFnys88OfvkFDiW75Lxd8yPkhwAfGgK6hZ/ODAkhDd/iPDaVJUguTYzWf
5AQ1xF0FwrUouR9Rgx4WyYH/ydC6S2LOK0kNboX5mk3X3xoYLIvLj71IIlmHPT/z
Q+EKf2HtQDGe/blYNV4C1CqX/m4yZWKgw3gl/Q5FVZwOy1mTu66vUMLosgidLv71
r1f93KCAXwrknFUSZEQS7sL3/LxsiB5X4TKNlwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJd+jMEufBLFxua3W+6/twJP2h2qMB8GA1UdIwQYMBaAFGRMMyz2QlujWSDr
oDDIptSt9E2LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTgxZWUz
N2VlOGM2NzcwYjE2N2MyNTkwZjMwMjk3Y2IxMDAwNWYxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODA4YzZjYjYtYmI2MC00NmE2LTkxZjYtOGU1NjEz
ZTY2MGI5L2JlMjkzOTQzZTczOGE5OTdhNzYyZmE4OTFhZTU5YWFjMmM0Nzk3OTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MDhjNmNiNi1iYjYwLTQ2YTYtOTFmNi04ZTU2
MTNlNjYwYjkvOTgxZWUzN2VlOGM2NzcwYjE2N2MyNTkwZjMwMjk3Y2IxMDAwNWYx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2tBDANBgkqhkiG9w0BAQsFAAOCAQEAPbbguFfNAWbJuJMf
wW5Ew7vpICLhr8Aj1wS0lCXdYiCGvxv4mk/OQNG6nfmWovWSby6nMxxDDjzfDtiK
zf2f45gGMySqRnea4lrzElCgGN9E+YLYVfMCWiYkpOyvNvTuNzSpefLIw02UeTFe
E6Dv5+unqfC42bG7OKdhVymEKeKoQp93UKmNRkmGKK/RUsbSMK/eo6ZW8dLFyUbh
hrJaXpEHMmxqj8wrtecjkp6ajCn/jAYJ8E507S2T//ILPjRe8Mgr9Ztu8tNXZVvq
A2JIxTabTs5DsArEszEXchMnHbzDcXmBh//A+oAsKCSwyygqP8nWfGvZdiD27XHa
uP8NwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org