Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/bec647eb4153e8edd1287b9d6e4c8fd2f1d647da.roa
File:                     bec647eb4153e8edd1287b9d6e4c8fd2f1d647da.roa (raw, json)
Hash identifier:          KA58a46NUhO/QzzfVAYX/P5yxL2CMYKHeZpA2/xnja4=
Subject key identifier:   D0:6C:7A:9E:E4:F1:69:3F:A4:60:A5:EA:DF:0D:C1:4F:EE:EE:0B:34
Certificate issuer:       /CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
Certificate serial:       22D8F8
Authority key identifier: E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/bec647eb4153e8edd1287b9d6e4c8fd2f1d647da.roa
Signing time:             Tue 24 Oct 2023 21:02:58 +0000
ROA not before:           Tue 24 Oct 2023 21:02:58 +0000
ROA not after:            Fri 24 Oct 2025 21:02:58 +0000
asID:                     265667
IP address blocks:        45.184.226.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283768 (0x22d8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
        Validity
            Not Before: Oct 24 21:02:58 2023 GMT
            Not After : Oct 24 21:02:58 2025 GMT
        Subject: CN=bec647eb4153e8edd1287b9d6e4c8fd2f1d647da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:64:b6:43:9d:1c:3f:24:24:3b:72:72:29:
                    9b:be:1c:8e:af:fe:83:ef:64:d6:f4:7e:e1:7f:52:
                    3c:e4:88:b6:c3:17:56:68:80:c3:bf:c1:cb:8e:c5:
                    1c:f8:07:9e:61:cc:af:4c:35:56:30:6d:01:bf:c5:
                    81:89:6a:0e:d8:9b:f5:ed:cf:16:00:02:87:b3:fb:
                    db:59:8a:82:a7:1e:7b:fe:98:b2:f5:3e:63:9b:f7:
                    ac:bc:35:e8:0a:64:9a:f0:73:13:96:df:13:9a:3d:
                    86:de:7e:59:34:d7:3f:83:a0:3f:e8:c4:5a:e2:af:
                    0e:a8:3e:b8:a0:9b:e0:86:bc:79:a0:9d:f8:94:43:
                    22:7d:cd:d0:4c:b6:ac:7b:a7:ae:c9:c4:fa:20:fb:
                    c1:08:a8:1c:1f:86:37:29:66:81:c3:2b:ae:41:98:
                    5f:f9:a5:f9:58:f6:36:1f:aa:4c:2f:b8:20:01:b3:
                    30:55:0f:d4:3e:e7:36:dc:d8:89:ec:c5:76:29:bf:
                    8c:d7:37:dd:b4:15:90:a8:83:52:81:1a:c6:92:27:
                    ed:a8:9a:94:b3:07:8e:39:c9:16:6f:72:d1:73:1f:
                    3a:37:27:3c:74:7d:93:c2:47:05:fe:e1:33:02:30:
                    8e:93:e6:85:38:00:60:b9:45:5b:80:6b:75:65:44:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:7A:9E:E4:F1:69:3F:A4:60:A5:EA:DF:0D:C1:4F:EE:EE:0B:34
            X509v3 Authority Key Identifier:
                keyid:E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/bec647eb4153e8edd1287b9d6e4c8fd2f1d647da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:44:59:b1:e3:3e:a6:6e:be:94:a2:15:51:31:f3:85:8f:86:
         a9:eb:d2:cb:2b:5b:c7:a1:f2:c4:49:c6:93:70:74:6d:05:90:
         9e:b6:21:f3:f1:45:f5:95:1c:5e:a5:ee:b5:60:71:e2:28:8e:
         b0:5f:f3:ff:dc:12:b8:10:66:e0:52:a0:36:ab:e0:e7:f6:bd:
         06:9a:3c:21:ed:43:d3:d9:cc:7f:42:2a:a0:31:ce:c2:25:3f:
         7d:6f:f4:ad:e1:50:61:a3:5c:f6:81:69:de:32:24:a7:8d:30:
         69:51:66:de:35:f2:5b:ad:f5:da:8f:e7:56:95:80:27:3c:dc:
         6f:c3:85:0f:4c:cc:e8:a2:22:c3:5d:8b:7b:f0:d8:2f:31:99:
         67:f0:36:47:b4:b9:af:23:dd:47:61:bd:1c:a0:19:56:b1:d0:
         0c:2c:6f:d2:cc:c0:5e:64:c1:0d:fe:71:2c:59:40:a7:d0:0b:
         fb:fe:48:a2:bb:90:47:e9:4c:1e:3a:41:96:50:54:04:c6:6c:
         81:cd:de:6b:68:5d:03:0a:60:ca:58:0e:b7:5b:0d:9f:21:b5:
         e8:7c:eb:17:d2:10:97:7d:cd:9d:2e:79:8f:9c:00:39:88:3c:
         40:8a:df:61:f0:83:03:91:c1:4a:0c:c0:ed:42:04:63:75:6f:
         33:1f:1f:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDItj4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
YmRhMGIxOWEzNjkyNjM2NWVhNDU2YzFhZDBmMWZkZjdlYzIzMjcwHhcNMjMxMDI0
MjEwMjU4WhcNMjUxMDI0MjEwMjU4WjAzMTEwLwYDVQQDEyhiZWM2NDdlYjQxNTNl
OGVkZDEyODdiOWQ2ZTRjOGZkMmYxZDY0N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvPhktkOdHD8kJDtycimbvhyOr/6D72TW9H7hf1I85Ii2wxdW
aIDDv8HLjsUc+AeeYcyvTDVWMG0Bv8WBiWoO2Jv17c8WAAKHs/vbWYqCpx57/piy
9T5jm/esvDXoCmSa8HMTlt8Tmj2G3n5ZNNc/g6A/6MRa4q8OqD64oJvghrx5oJ34
lEMifc3QTLase6euycT6IPvBCKgcH4Y3KWaBwyuuQZhf+aX5WPY2H6pML7ggAbMw
VQ/UPuc23NiJ7MV2Kb+M1zfdtBWQqINSgRrGkiftqJqUsweOOckWb3LRcx86Nyc8
dH2TwkcF/uEzAjCOk+aFOABguUVbgGt1ZUQn5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNBsep7k8Wk/pGCl6t8NwU/u7gs0MB8GA1UdIwQYMBaAFOa6cAZOJGCIcsa2
HuWGUTsjhl3hMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGViZGEw
YjE5YTM2OTI2MzY1ZWE0NTZjMWFkMGYxZmRmN2VjMjMyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODlkZGVmZTEtMjQ3YS00MjkwLTk4ZmQtZDhjYWI5
ODFlMDkwL2JlYzY0N2ViNDE1M2U4ZWRkMTI4N2I5ZDZlNGM4ZmQyZjFkNjQ3ZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OWRkZWZlMS0yNDdhLTQyOTAtOThmZC1kOGNh
Yjk4MWUwOTAvNGViZGEwYjE5YTM2OTI2MzY1ZWE0NTZjMWFkMGYxZmRmN2VjMjMy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS244jANBgkqhkiG9w0BAQsFAAOCAQEApkRZseM+pm6+lKIV
UTHzhY+GqevSyytbx6HyxEnGk3B0bQWQnrYh8/FF9ZUcXqXutWBx4iiOsF/z/9wS
uBBm4FKgNqvg5/a9Bpo8Ie1D09nMf0IqoDHOwiU/fW/0reFQYaNc9oFp3jIkp40w
aVFm3jXyW6312o/nVpWAJzzcb8OFD0zM6KIiw12Le/DYLzGZZ/A2R7S5ryPdR2G9
HKAZVrHQDCxv0szAXmTBDf5xLFlAp9AL+/5IoruQR+lMHjpBllBUBMZsgc3ea2hd
AwpgylgOt1sNnyG16HzrF9IQl33NnS55j5wAOYg8QIrfYfCDA5HBSgzA7UIEY3Vv
Mx8f5A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org