Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa
File:                     f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa (raw, json)
Hash identifier:          F9AHY8mWxvTMoex8ED70zqakEgKBDBwXGcJjhuHstT4=
Subject key identifier:   5E:00:67:EE:88:7C:73:29:17:01:77:3B:55:69:85:4A:84:03:B7:00
Certificate issuer:       /CN=10c38b9181161ced9b3aca715f10eb6f09968296
Certificate serial:       0B40FA
Authority key identifier: 32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa
Signing time:             Wed 24 Mar 2021 14:39:26 +0000
ROA not before:           Wed 24 Mar 2021 14:39:26 +0000
ROA not after:            Tue 24 Mar 2026 14:39:26 +0000
asID:                     61468
IP address blocks:        45.184.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737530 (0xb40fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c38b9181161ced9b3aca715f10eb6f09968296
        Validity
            Not Before: Mar 24 14:39:26 2021 GMT
            Not After : Mar 24 14:39:26 2026 GMT
        Subject: CN=f85edeb8f1d3bbdbcc706f1b152b1f2765642dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:f8:e7:92:6b:f1:91:fc:19:f6:61:76:2d:
                    bc:ec:7a:de:f6:bc:62:3d:e5:5a:17:71:a7:e7:b0:
                    a2:9e:a8:2e:ae:d3:9d:13:17:8a:d2:b6:be:6c:70:
                    58:3b:85:44:c9:a7:7f:54:3d:95:9b:2c:3c:e5:c0:
                    37:06:7e:1d:e1:78:63:ca:a1:48:8d:4f:eb:28:e0:
                    5c:0d:4f:c9:f8:2d:d4:39:a0:d5:42:c5:5e:48:6b:
                    9e:c4:0a:96:ac:9d:bc:95:d6:b6:0a:09:28:6c:99:
                    ee:6d:f5:3c:ed:67:66:7e:91:bd:47:48:db:13:ce:
                    73:90:ea:46:67:71:a8:78:43:1e:b2:19:3c:be:5e:
                    73:fc:b8:86:8d:1b:1f:33:02:41:11:20:6c:e1:97:
                    46:a1:09:92:0c:fe:bf:53:9c:ae:28:33:15:04:fc:
                    e9:de:b4:dc:2a:57:4f:ca:bd:1e:d8:fd:08:e9:b7:
                    56:68:4a:7f:60:d3:22:48:aa:22:7a:e5:95:62:48:
                    be:38:27:6e:f2:fa:4b:fb:aa:d2:3e:7f:99:51:c5:
                    11:df:ab:28:41:14:7b:a8:a4:46:2b:6c:01:7c:52:
                    f9:b3:d2:f9:c4:10:ba:2c:00:bf:24:2b:32:12:c2:
                    5d:3a:66:32:01:ed:59:47:fd:46:28:28:22:c7:61:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:67:EE:88:7C:73:29:17:01:77:3B:55:69:85:4A:84:03:B7:00
            X509v3 Authority Key Identifier:
                keyid:32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/10c38b9181161ced9b3aca715f10eb6f09968296.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:25:bc:90:d3:fa:4e:01:c9:63:e5:df:54:48:6a:77:e9:
         31:34:88:19:c5:a8:db:62:66:3e:23:4c:13:01:8f:60:43:0b:
         54:2f:16:78:a8:61:c3:47:a6:7a:76:4d:99:5f:06:25:39:87:
         9f:a6:cd:82:f4:fc:9c:b2:70:0b:85:db:d9:cc:49:ec:9c:c1:
         4f:75:4c:16:ae:d9:b9:3c:1c:8e:a0:42:39:1a:24:00:b9:58:
         67:b6:1d:19:86:93:e3:42:b6:4e:f8:71:b0:87:c9:39:e1:e9:
         be:03:73:a7:2c:c1:c1:c3:3d:33:40:f2:91:33:06:6c:be:f1:
         39:4a:67:4a:eb:4b:95:99:2a:92:1b:e1:0d:8c:54:b8:fd:33:
         06:9a:36:e9:15:ea:23:f0:be:c9:cd:86:15:d7:a0:9a:2d:7e:
         49:2d:bb:cc:c2:69:0a:c8:80:eb:a1:a7:bf:17:25:cc:98:0e:
         c0:fe:20:41:16:17:55:95:9c:07:89:ba:26:b4:7b:a1:05:f2:
         67:12:b5:a0:36:fc:a6:5f:b6:53:f4:d1:d9:59:82:3a:0b:fe:
         99:f5:93:a7:2c:18:6f:7b:93:03:62:64:b4:15:8e:0b:f0:7c:
         a0:a1:a7:91:c2:e2:d4:65:d5:b0:aa:40:1b:62:72:23:c8:17:
         24:0c:ce:ae
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC0D6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
YzM4YjkxODExNjFjZWQ5YjNhY2E3MTVmMTBlYjZmMDk5NjgyOTYwHhcNMjEwMzI0
MTQzOTI2WhcNMjYwMzI0MTQzOTI2WjAzMTEwLwYDVQQDEyhmODVlZGViOGYxZDNi
YmRiY2M3MDZmMWIxNTJiMWYyNzY1NjQyZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs8v455Jr8ZH8GfZhdi287Hre9rxiPeVaF3Gn57CinqgurtOd
ExeK0ra+bHBYO4VEyad/VD2Vmyw85cA3Bn4d4XhjyqFIjU/rKOBcDU/J+C3UOaDV
QsVeSGuexAqWrJ28lda2CgkobJnubfU87WdmfpG9R0jbE85zkOpGZ3GoeEMeshk8
vl5z/LiGjRsfMwJBESBs4ZdGoQmSDP6/U5yuKDMVBPzp3rTcKldPyr0e2P0I6bdW
aEp/YNMiSKoieuWVYki+OCdu8vpL+6rSPn+ZUcUR36soQRR7qKRGK2wBfFL5s9L5
xBC6LAC/JCsyEsJdOmYyAe1ZR/1GKCgix2EeyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF4AZ+6IfHMpFwF3O1VphUqEA7cAMB8GA1UdIwQYMBaAFDJNhjr/r6wdfrCs
Cl2NQ2XuO8AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTBjMzhi
OTE4MTE2MWNlZDliM2FjYTcxNWYxMGViNmYwOTk2ODI5Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODU3NDU0NzctY2YyZi00YzliLWJiYzEtMzY2MDE5
ZDY5NTBjL2Y4NWVkZWI4ZjFkM2JiZGJjYzcwNmYxYjE1MmIxZjI3NjU2NDJkZWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NTc0NTQ3Ny1jZjJmLTRjOWItYmJjMS0zNjYw
MTlkNjk1MGMvMTBjMzhiOTE4MTE2MWNlZDliM2FjYTcxNWYxMGViNmYwOTk2ODI5
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC24ZjANBgkqhkiG9w0BAQsFAAOCAQEAY/olvJDT+k4ByWPl
31RIanfpMTSIGcWo22JmPiNMEwGPYEMLVC8WeKhhw0emenZNmV8GJTmHn6bNgvT8
nLJwC4Xb2cxJ7JzBT3VMFq7ZuTwcjqBCORokALlYZ7YdGYaT40K2TvhxsIfJOeHp
vgNzpyzBwcM9M0DykTMGbL7xOUpnSutLlZkqkhvhDYxUuP0zBpo26RXqI/C+yc2G
Fdegmi1+SS27zMJpCsiA66GnvxclzJgOwP4gQRYXVZWcB4m6JrR7oQXyZxK1oDb8
pl+2U/TR2VmCOgv+mfWTpywYb3uTA2JktBWOC/B8oKGnkcLi1GXVsKpAG2JyI8gX
JAzOrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org