Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/4db74f107a6a79332565d7899d8a24c23a391bfb.roa
File:                     4db74f107a6a79332565d7899d8a24c23a391bfb.roa (raw, json)
Hash identifier:          O9n0S22QVuhtuZUcRSsHwhVpHctW2nxVcf61m3BfMuI=
Subject key identifier:   E5:86:4B:D0:FC:06:41:6C:16:DC:5E:E5:67:BB:68:2A:4C:B7:5E:22
Certificate issuer:       /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial:       19972D
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/4db74f107a6a79332565d7899d8a24c23a391bfb.roa
Signing time:             Wed 31 May 2023 20:12:56 +0000
ROA not before:           Tue 30 May 2023 20:12:56 +0000
ROA not after:            Sat 31 May 2025 20:12:56 +0000
asID:                     266684
IP address blocks:        45.228.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677101 (0x19972d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
        Validity
            Not Before: May 30 20:12:56 2023 GMT
            Not After : May 31 20:12:56 2025 GMT
        Subject: CN=4db74f107a6a79332565d7899d8a24c23a391bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:71:82:c8:01:a1:28:47:53:b0:1a:a2:7e:
                    d1:70:4d:45:a5:06:9b:19:f6:33:86:f2:7f:2e:af:
                    3c:e4:68:66:38:3b:24:09:00:b0:be:e5:59:41:dd:
                    db:a5:0b:9c:75:41:3b:5f:ab:ab:f8:67:d5:44:18:
                    8e:1e:eb:4e:78:ce:4b:3d:f0:21:8b:ac:15:a1:2c:
                    77:67:0e:5c:9f:0d:8a:13:7d:1b:82:9c:33:42:e8:
                    74:e8:9b:c2:df:a6:a1:3a:50:f3:88:35:79:34:28:
                    d5:08:ca:1a:36:d1:1c:79:d0:61:27:6e:db:8a:ab:
                    00:6c:7e:1b:46:e2:08:70:a9:6d:e5:29:de:e8:a1:
                    a3:d9:c9:cd:3e:72:15:2a:f9:29:a5:19:40:34:37:
                    d6:74:bd:d7:cd:94:e3:1b:5e:78:7b:9b:48:ff:27:
                    c9:59:a8:ca:6b:2e:a8:7a:b5:db:a1:fa:ba:6c:91:
                    68:b6:a4:b1:86:f0:a1:3d:f0:63:e8:2f:53:0a:7b:
                    40:03:cc:8b:bb:dc:42:c9:87:6c:b6:43:f8:42:4c:
                    c2:16:88:bf:a3:38:27:29:36:47:86:06:ce:d4:79:
                    c8:e9:bb:30:1d:9d:31:51:6c:f9:be:2f:21:8c:ba:
                    0e:41:bb:64:03:55:90:97:88:4f:62:ed:e0:d7:0b:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:4B:D0:FC:06:41:6C:16:DC:5E:E5:67:BB:68:2A:4C:B7:5E:22
            X509v3 Authority Key Identifier:
                keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/4db74f107a6a79332565d7899d8a24c23a391bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:0b:ba:a4:0b:98:24:94:7d:24:8e:41:a2:99:eb:de:65:
         42:88:40:93:10:92:a8:1f:e6:9c:b1:c4:83:f2:4a:07:ad:97:
         ab:5e:ad:94:a8:d6:b6:51:ff:aa:0e:32:de:54:16:76:b9:63:
         fb:a7:02:0f:0e:88:e4:2f:78:3d:cb:3c:60:a1:53:f1:18:5a:
         4e:cb:54:cd:22:30:1e:88:a2:76:d6:6f:8c:cb:98:a6:af:9d:
         89:04:0f:8d:8c:f4:70:5d:22:83:f8:b9:7e:cf:59:18:8c:ef:
         da:d5:51:1a:4d:cb:f9:e5:30:d9:fc:57:52:2b:4c:d4:9f:ea:
         1e:bf:ba:e9:cd:62:f2:7e:fb:04:c0:8b:e9:72:87:69:eb:40:
         2f:22:9e:a0:e7:e7:ef:f2:8d:c2:62:81:5a:ae:56:b4:13:b3:
         31:18:df:41:4f:85:47:57:87:43:ee:d6:a5:2a:d3:28:ae:1d:
         fd:a4:6c:30:c2:96:fb:8f:e7:63:71:35:74:2a:34:8b:34:24:
         be:e6:77:7b:1d:6a:18:1e:79:dc:26:fa:62:7b:ce:f5:64:b4:
         8e:bd:0f:d8:a8:b9:2d:8b:23:34:38:7f:69:5a:2d:ba:9f:e5:
         5d:01:85:d9:f4:0f:2f:aa:8e:12:5d:f0:39:3b:42:b7:27:36:
         85:b1:27:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGZctMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OGU5YWNlNTY5NWUxODhmZTUwZjJhNzYxZDgxOGU3OTk3NmMwODYwHhcNMjMwNTMw
MjAxMjU2WhcNMjUwNTMxMjAxMjU2WjAzMTEwLwYDVQQDEyg0ZGI3NGYxMDdhNmE3
OTMzMjU2NWQ3ODk5ZDhhMjRjMjNhMzkxYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwelxgsgBoShHU7Aaon7RcE1FpQabGfYzhvJ/Lq885GhmODsk
CQCwvuVZQd3bpQucdUE7X6ur+GfVRBiOHutOeM5LPfAhi6wVoSx3Zw5cnw2KE30b
gpwzQuh06JvC36ahOlDziDV5NCjVCMoaNtEcedBhJ27biqsAbH4bRuIIcKlt5Sne
6KGj2cnNPnIVKvkppRlANDfWdL3XzZTjG154e5tI/yfJWajKay6oerXbofq6bJFo
tqSxhvChPfBj6C9TCntAA8yLu9xCyYdstkP4QkzCFoi/ozgnKTZHhgbO1HnI6bsw
HZ0xUWz5vi8hjLoOQbtkA1WQl4hPYu3g1wt32wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOWGS9D8BkFsFtxe5We7aCpMt14iMB8GA1UdIwQYMBaAFDtEtP/zKg3RBIAs
K7MWuJWL4U7PMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU4ZTlh
Y2U1Njk1ZTE4OGZlNTBmMmE3NjFkODE4ZTc5OTc2YzA4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODVmYzI2NTctOWRkNS00ZTE4LWEwNDMtYzFlZDk2
NzMwYmY4LzRkYjc0ZjEwN2E2YTc5MzMyNTY1ZDc4OTlkOGEyNGMyM2EzOTFiZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NWZjMjY1Ny05ZGQ1LTRlMTgtYTA0My1jMWVk
OTY3MzBiZjgvZjU4ZTlhY2U1Njk1ZTE4OGZlNTBmMmE3NjFkODE4ZTc5OTc2YzA4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3k3jANBgkqhkiG9w0BAQsFAAOCAQEATC8LuqQLmCSUfSSO
QaKZ695lQohAkxCSqB/mnLHEg/JKB62Xq16tlKjWtlH/qg4y3lQWdrlj+6cCDw6I
5C94Pcs8YKFT8RhaTstUzSIwHoiidtZvjMuYpq+diQQPjYz0cF0ig/i5fs9ZGIzv
2tVRGk3L+eUw2fxXUitM1J/qHr+66c1i8n77BMCL6XKHaetALyKeoOfn7/KNwmKB
Wq5WtBOzMRjfQU+FR1eHQ+7WpSrTKK4d/aRsMMKW+4/nY3E1dCo0izQkvuZ3ex1q
GB553Cb6YnvO9WS0jr0P2Ki5LYsjNDh/aVotup/lXQGF2fQPL6qOEl3wOTtCtyc2
hbEnWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org