Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/9144a7dee650fea1324bb25be47915edf43cf416.roa
File:                     9144a7dee650fea1324bb25be47915edf43cf416.roa (raw, json)
Hash identifier:          sb6samL9AXgYIGA6ejCAC5DaMqXr96r/6MUnR26u1wM=
Subject key identifier:   E2:15:86:05:49:52:8C:77:15:DB:38:C9:54:51:14:BD:43:24:72:EE
Certificate issuer:       /CN=2e67f1fac284e9a5739417637f884d6a7ccf7100
Certificate serial:       1C9676
Authority key identifier: 35:EF:0F:2D:C8:FA:BC:3A:0E:23:67:DC:B5:15:1C:C1:1E:D1:B1:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e67f1fac284e9a5739417637f884d6a7ccf7100.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/9144a7dee650fea1324bb25be47915edf43cf416.roa
Signing time:             Sat 02 Dec 2023 14:13:23 +0000
ROA not before:           Sat 02 Dec 2023 14:13:23 +0000
ROA not after:            Tue 02 Dec 2025 14:13:23 +0000
asID:                     64121
IP address blocks:        45.183.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873526 (0x1c9676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e67f1fac284e9a5739417637f884d6a7ccf7100
        Validity
            Not Before: Dec  2 14:13:23 2023 GMT
            Not After : Dec  2 14:13:23 2025 GMT
        Subject: CN=9144a7dee650fea1324bb25be47915edf43cf416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e0:28:54:2d:9d:d9:2f:8f:eb:f9:78:9f:c8:
                    dc:f0:52:97:da:ad:0e:8c:6c:f7:2b:e8:32:0a:0c:
                    8b:40:03:c0:54:2e:76:62:93:18:ab:f4:86:b1:8f:
                    8d:93:09:7d:8f:53:0b:dc:eb:2b:ad:13:de:06:b3:
                    75:4c:7c:ab:3b:ae:cb:45:68:79:87:c5:9c:a5:aa:
                    46:f9:42:f8:3e:d6:45:0a:94:aa:34:1f:26:91:fa:
                    dc:68:9a:1f:81:95:17:d5:5b:4e:f6:92:cd:4c:49:
                    2a:06:66:3c:f7:64:5a:ca:6f:0a:3d:b7:f8:9d:97:
                    e1:21:96:d3:c4:73:c9:cf:cd:9b:d5:66:cd:04:99:
                    27:97:8d:ca:a8:1f:d8:62:6b:21:fc:51:bd:63:27:
                    26:37:88:ed:1c:60:0a:32:c1:22:08:f2:d6:31:e9:
                    b5:ea:71:35:b1:8a:e2:7f:16:f0:10:57:21:fb:bd:
                    c6:07:c6:e7:0a:31:e3:08:07:27:c1:6c:13:d1:d6:
                    c6:7a:a0:f5:15:33:b7:25:f7:cc:d4:5c:a9:a9:ba:
                    87:d9:86:24:a6:61:5c:e8:39:04:3b:48:8e:d1:c9:
                    04:9a:88:c4:6a:0b:15:f2:03:fe:d4:fc:e6:e3:af:
                    6d:51:6e:fb:ca:21:4f:08:b9:62:cb:5a:cb:99:9b:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:86:05:49:52:8C:77:15:DB:38:C9:54:51:14:BD:43:24:72:EE
            X509v3 Authority Key Identifier:
                keyid:35:EF:0F:2D:C8:FA:BC:3A:0E:23:67:DC:B5:15:1C:C1:1E:D1:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e67f1fac284e9a5739417637f884d6a7ccf7100.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/9144a7dee650fea1324bb25be47915edf43cf416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84511216-bbbe-4017-99af-979a9187b98c/2e67f1fac284e9a5739417637f884d6a7ccf7100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:7f:f4:84:13:f8:ae:de:78:75:a1:2e:3c:6d:55:e5:e4:
         a6:da:f0:cd:27:6e:5d:31:83:c6:af:e5:c0:4a:41:40:1e:07:
         e0:88:8c:2a:fd:06:59:c9:6a:06:0f:55:b5:4c:bb:6a:7b:2f:
         20:98:a9:8d:bd:ef:d2:74:1b:8d:4d:4d:d0:65:83:48:1f:32:
         4e:a2:88:5f:25:17:d1:e4:42:8b:15:f6:34:68:f1:bc:51:90:
         8e:86:c8:60:d8:74:b1:3f:bf:a5:32:c6:51:55:13:ef:91:54:
         45:1f:9e:58:53:3c:7f:01:03:ef:b6:fa:50:58:09:ca:db:91:
         5c:d3:0b:2d:75:5e:4b:c1:72:c0:6b:95:fa:b2:41:a6:75:29:
         54:2c:7f:07:68:32:82:ef:de:07:1d:85:e2:0a:1f:fc:e9:a2:
         39:61:32:e6:92:ab:a2:c9:08:ef:ba:55:d9:3d:a8:df:09:40:
         78:ad:92:6d:15:0c:d5:74:9d:00:5c:cd:ea:bf:37:d6:a7:e9:
         cc:a9:50:9e:ae:be:25:ef:ba:21:67:b5:14:20:57:a5:27:32:
         16:fa:0e:42:80:63:ee:30:55:24:ca:31:40:21:f4:0c:51:df:
         a7:89:15:d5:94:f5:66:cb:d0:c8:30:19:38:9f:df:75:d9:56:
         3c:bf:84:34
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHJZ2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
NjdmMWZhYzI4NGU5YTU3Mzk0MTc2MzdmODg0ZDZhN2NjZjcxMDAwHhcNMjMxMjAy
MTQxMzIzWhcNMjUxMjAyMTQxMzIzWjAzMTEwLwYDVQQDEyg5MTQ0YTdkZWU2NTBm
ZWExMzI0YmIyNWJlNDc5MTVlZGY0M2NmNDE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi+AoVC2d2S+P6/l4n8jc8FKX2q0OjGz3K+gyCgyLQAPAVC52
YpMYq/SGsY+Nkwl9j1ML3OsrrRPeBrN1THyrO67LRWh5h8WcpapG+UL4PtZFCpSq
NB8mkfrcaJofgZUX1VtO9pLNTEkqBmY892Raym8KPbf4nZfhIZbTxHPJz82b1WbN
BJknl43KqB/YYmsh/FG9YycmN4jtHGAKMsEiCPLWMem16nE1sYrifxbwEFch+73G
B8bnCjHjCAcnwWwT0dbGeqD1FTO3JffM1FypqbqH2YYkpmFc6DkEO0iO0ckEmojE
agsV8gP+1Pzm469tUW77yiFPCLliy1rLmZtvmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOIVhgVJUox3Fds4yVRRFL1DJHLuMB8GA1UdIwQYMBaAFDXvDy3I+rw6DiNn
3LUVHMEe0bF6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmU2N2Yx
ZmFjMjg0ZTlhNTczOTQxNzYzN2Y4ODRkNmE3Y2NmNzEwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQ1MTEyMTYtYmJiZS00MDE3LTk5YWYtOTc5YTkx
ODdiOThjLzkxNDRhN2RlZTY1MGZlYTEzMjRiYjI1YmU0NzkxNWVkZjQzY2Y0MTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDUxMTIxNi1iYmJlLTQwMTctOTlhZi05Nzlh
OTE4N2I5OGMvMmU2N2YxZmFjMjg0ZTlhNTczOTQxNzYzN2Y4ODRkNmE3Y2NmNzEw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC23szANBgkqhkiG9w0BAQsFAAOCAQEAQd1/9IQT+K7eeHWh
LjxtVeXkptrwzSduXTGDxq/lwEpBQB4H4IiMKv0GWclqBg9VtUy7ansvIJipjb3v
0nQbjU1N0GWDSB8yTqKIXyUX0eRCixX2NGjxvFGQjobIYNh0sT+/pTLGUVUT75FU
RR+eWFM8fwED77b6UFgJytuRXNMLLXVeS8FywGuV+rJBpnUpVCx/B2gygu/eBx2F
4gof/OmiOWEy5pKroskI77pV2T2o3wlAeK2SbRUM1XSdAFzN6r831qfpzKlQnq6+
Je+6IWe1FCBXpScyFvoOQoBj7jBVJMoxQCH0DFHfp4kV1ZT1ZsvQyDAZOJ/fddlW
PL+ENA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org