Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/e9d023d51908c104c468e87b8070039e91da028f.roa
File:                     e9d023d51908c104c468e87b8070039e91da028f.roa (raw, json)
Hash identifier:          ApFNsoWzGdUw7DzUgZmirMW4b2/uCp1vFGbHgEp9qhI=
Subject key identifier:   62:C0:CF:78:63:13:84:EF:11:19:A8:9D:C0:65:2A:CD:A8:93:93:4D
Certificate issuer:       /CN=40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc
Certificate serial:       0CD7A8
Authority key identifier: B5:DD:5D:60:DB:94:C2:17:EE:FD:3C:17:AF:2B:3A:2B:81:26:28:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/e9d023d51908c104c468e87b8070039e91da028f.roa
Signing time:             Wed 24 Mar 2021 14:34:17 +0000
ROA not before:           Wed 24 Mar 2021 14:34:17 +0000
ROA not after:            Tue 24 Mar 2026 14:34:17 +0000
asID:                     266901
IP address blocks:        45.161.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841640 (0xcd7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc
        Validity
            Not Before: Mar 24 14:34:17 2021 GMT
            Not After : Mar 24 14:34:17 2026 GMT
        Subject: CN=e9d023d51908c104c468e87b8070039e91da028f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:54:65:34:4c:3e:9e:74:48:2a:6c:e6:e2:
                    ba:d1:d4:62:7a:af:56:09:b4:31:e2:5b:9b:6b:b7:
                    b6:07:00:48:5a:3b:64:3d:56:88:9f:52:cc:30:91:
                    e7:ff:a1:38:10:0e:3b:87:93:fd:0b:1f:0c:f8:c3:
                    4c:49:36:79:fc:27:c9:bb:52:24:dd:74:8a:63:ab:
                    ca:7d:d4:3a:e9:14:c5:39:34:72:f0:74:3e:92:d2:
                    61:68:b9:d1:f4:f7:98:24:4d:07:0d:94:5d:ed:e9:
                    39:2e:7e:3f:d6:bf:61:c2:42:06:c1:7f:fa:e5:39:
                    69:4f:b0:37:dc:c0:ba:ec:1f:dc:11:28:16:e0:a2:
                    15:1e:3d:33:4f:08:06:e1:49:b6:e7:de:17:b8:5d:
                    9c:89:ef:b8:08:35:e6:f8:c4:ee:0d:e1:ec:56:2a:
                    6e:49:30:29:90:d3:bc:40:86:65:f4:2d:7f:03:0d:
                    61:7a:b5:0a:0f:a3:ce:01:e9:f9:d6:50:75:60:b2:
                    b9:23:f8:bc:44:43:cd:c7:0a:36:f9:9d:29:c9:c2:
                    d7:25:92:af:9a:c2:23:3b:29:d2:2b:ba:06:ba:3b:
                    88:8f:28:7b:18:ce:ef:cd:fd:29:66:3f:33:47:83:
                    ea:97:91:8b:bd:a3:d1:e8:56:36:f0:0f:c5:a0:c6:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:CF:78:63:13:84:EF:11:19:A8:9D:C0:65:2A:CD:A8:93:93:4D
            X509v3 Authority Key Identifier:
                keyid:B5:DD:5D:60:DB:94:C2:17:EE:FD:3C:17:AF:2B:3A:2B:81:26:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/e9d023d51908c104c468e87b8070039e91da028f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b0:57:35:89:96:c2:d0:37:bd:73:20:ed:ee:ae:fd:22:d3:
         71:28:79:78:34:b0:a8:2e:d5:46:31:0c:7f:2f:a2:7c:ec:6a:
         16:04:f4:fc:3d:d3:fa:24:d1:4f:56:f1:fe:5d:19:60:5f:91:
         48:ff:df:10:0e:44:62:70:1f:17:ce:70:5c:9e:4a:d4:e2:be:
         28:88:0d:45:6c:79:06:0d:81:6a:23:b9:cd:67:9b:18:33:be:
         35:1b:9f:9e:35:c1:21:eb:d3:cc:b0:73:2c:5a:32:a9:d7:6c:
         32:72:3b:aa:27:d7:81:e7:b7:f6:7c:f6:22:60:9a:d4:50:44:
         5e:b0:a1:fb:8c:7a:47:ad:4c:ec:58:28:c9:46:d6:c7:31:dd:
         57:b1:04:20:7f:99:32:96:14:a9:12:50:a6:d9:89:94:d2:12:
         bf:ff:b4:d2:1d:39:ad:9d:b2:07:11:c8:70:26:7d:5c:39:86:
         cb:2a:e3:a1:a9:72:56:8f:3c:8e:74:64:9b:28:63:80:79:c2:
         bd:25:e9:2d:ea:ba:90:7f:cf:c3:f5:19:bb:93:85:ad:9f:ec:
         58:47:70:8e:a5:f1:05:68:32:30:e1:ac:9d:2c:33:ed:c3:e8:
         ea:00:f8:03:56:f4:30:b0:af:0e:30:e2:fb:16:a7:e0:77:44:
         c1:6a:dd:42
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDNeoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw
YjcwMjZkZmUzNjRkMWRiZDFjNTA0YmRjYzZmZmIyOGZiYzQxZmMwHhcNMjEwMzI0
MTQzNDE3WhcNMjYwMzI0MTQzNDE3WjAzMTEwLwYDVQQDEyhlOWQwMjNkNTE5MDhj
MTA0YzQ2OGU4N2I4MDcwMDM5ZTkxZGEwMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmJ5UZTRMPp50SCps5uK60dRieq9WCbQx4luba7e2BwBIWjtk
PVaIn1LMMJHn/6E4EA47h5P9Cx8M+MNMSTZ5/CfJu1Ik3XSKY6vKfdQ66RTFOTRy
8HQ+ktJhaLnR9PeYJE0HDZRd7ek5Ln4/1r9hwkIGwX/65TlpT7A33MC67B/cESgW
4KIVHj0zTwgG4Um2594XuF2cie+4CDXm+MTuDeHsVipuSTApkNO8QIZl9C1/Aw1h
erUKD6POAen51lB1YLK5I/i8REPNxwo2+Z0pycLXJZKvmsIjOynSK7oGujuIjyh7
GM7vzf0pZj8zR4Pql5GLvaPR6FY28A/FoMYckQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGLAz3hjE4TvERmoncBlKs2ok5NNMB8GA1UdIwQYMBaAFLXdXWDblMIX7v08
F68rOiuBJijmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDBiNzAy
NmRmZTM2NGQxZGJkMWM1MDRiZGNjNmZmYjI4ZmJjNDFmYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODk5MmY5YmQtZGJhYS00ZDc0LTk2MjEtYTE1YTlj
NGMyNDFmL2U5ZDAyM2Q1MTkwOGMxMDRjNDY4ZTg3YjgwNzAwMzllOTFkYTAyOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OTkyZjliZC1kYmFhLTRkNzQtOTYyMS1hMTVh
OWM0YzI0MWYvNDBiNzAyNmRmZTM2NGQxZGJkMWM1MDRiZGNjNmZmYjI4ZmJjNDFm
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2hbDANBgkqhkiG9w0BAQsFAAOCAQEACLBXNYmWwtA3vXMg
7e6u/SLTcSh5eDSwqC7VRjEMfy+ifOxqFgT0/D3T+iTRT1bx/l0ZYF+RSP/fEA5E
YnAfF85wXJ5K1OK+KIgNRWx5Bg2BaiO5zWebGDO+NRufnjXBIevTzLBzLFoyqdds
MnI7qifXgee39nz2ImCa1FBEXrCh+4x6R61M7FgoyUbWxzHdV7EEIH+ZMpYUqRJQ
ptmJlNISv/+00h05rZ2yBxHIcCZ9XDmGyyrjoalyVo88jnRkmyhjgHnCvSXpLeq6
kH/Pw/UZu5OFrZ/sWEdwjqXxBWgyMOGsnSwz7cPo6gD4A1b0MLCvDjDi+xan4HdE
wWrdQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org