Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5bb713165e3509e772f79f26fb5bf8147febb0f7.roa
File:                     5bb713165e3509e772f79f26fb5bf8147febb0f7.roa (raw, json)
Hash identifier:          cKaAOaQUqrmJi3tovMxxv/czWrK4CiDi+FY5iQnCQu4=
Subject key identifier:   6C:EC:99:17:BC:6D:64:70:F3:A1:B4:CD:E0:CD:A1:3D:C2:57:FC:69
Certificate issuer:       /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Certificate serial:       1EA89E
Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5bb713165e3509e772f79f26fb5bf8147febb0f7.roa
Signing time:             Mon 29 May 2023 08:30:00 +0000
ROA not before:           Sun 28 May 2023 08:30:00 +0000
ROA not after:            Tue 27 May 2025 08:30:00 +0000
asID:                     267871
IP address blocks:        45.177.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009246 (0x1ea89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
        Validity
            Not Before: May 28 08:30:00 2023 GMT
            Not After : May 27 08:30:00 2025 GMT
        Subject: CN=5bb713165e3509e772f79f26fb5bf8147febb0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:3c:28:98:3e:43:2a:65:fe:50:d4:83:4f:
                    4b:7e:a0:3c:c1:59:ac:62:17:9a:b0:01:64:94:a5:
                    e0:b0:d0:38:a6:4f:cf:01:05:bc:0a:4f:45:58:e1:
                    62:e5:a7:cc:4f:a4:9b:da:da:60:5b:c6:3a:e3:48:
                    47:df:c2:b7:85:c6:d2:e4:0c:ce:10:e8:e2:c0:03:
                    7e:45:8a:92:fd:9c:20:d6:bf:0e:60:3e:b8:f6:4e:
                    62:35:ab:35:2b:d3:45:c3:da:d4:f2:6b:3f:36:d4:
                    cd:c4:23:33:27:ef:bb:2d:93:59:ec:8f:50:64:f9:
                    f2:38:4d:44:6c:23:80:4b:4f:77:59:04:74:5e:59:
                    49:41:25:c4:57:64:8c:8a:6b:29:21:44:b3:a9:1f:
                    21:54:a9:a5:9e:2f:f1:46:fd:72:5c:53:c7:50:e8:
                    55:3e:58:2b:f9:32:eb:24:cf:e0:18:21:76:2a:30:
                    da:b2:c1:41:94:f6:c9:ac:3b:be:2d:83:2c:a2:1d:
                    32:db:da:e6:06:81:91:4d:00:57:fa:9b:bf:5c:c1:
                    0c:93:92:de:b6:27:4c:a9:ab:18:3b:d0:e5:83:eb:
                    9c:9d:be:d4:88:ca:68:69:fa:3e:6f:f6:2e:45:5d:
                    a2:db:6d:a4:fc:5d:60:78:32:6c:57:de:1b:04:5e:
                    26:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EC:99:17:BC:6D:64:70:F3:A1:B4:CD:E0:CD:A1:3D:C2:57:FC:69
            X509v3 Authority Key Identifier:
                keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/5bb713165e3509e772f79f26fb5bf8147febb0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:76:f9:36:c5:f8:d0:0f:ed:ed:ff:19:55:61:93:23:13:d2:
         3f:59:e8:29:bc:bc:34:9b:6f:ca:83:d5:74:ee:25:bd:d0:c0:
         e6:50:43:f3:b8:4f:64:35:af:14:6c:15:c1:47:11:54:7b:88:
         c6:b9:5f:a0:58:cb:ed:95:b8:03:35:be:b0:e0:8b:4d:90:23:
         fb:2e:30:78:13:22:c9:ed:40:94:5c:d7:05:20:39:c0:6d:49:
         67:69:04:46:ab:55:67:5e:30:a0:9d:20:06:af:d7:a4:d9:fd:
         d3:f8:fc:cd:74:c8:9d:4b:62:cb:c8:98:61:71:79:f9:e8:86:
         7e:fa:6c:57:ac:cd:d7:23:47:f0:04:35:c3:10:76:47:c4:fc:
         9c:79:74:30:7a:d5:4f:97:f1:b8:6b:1d:02:9a:9a:ba:8f:39:
         86:91:b0:bd:d9:f2:e9:6b:8b:e7:e0:b4:3d:b6:83:38:c8:41:
         48:5b:3b:23:af:95:56:59:23:59:ba:b5:ea:8f:78:38:0b:69:
         64:cc:c1:19:98:b1:67:7f:c6:86:50:a8:95:3a:5d:63:b8:56:
         ab:00:ed:58:28:8f:af:97:99:1c:f9:ae:16:99:80:65:28:33:
         12:ea:f4:83:86:b4:b0:22:98:17:99:14:ca:6e:1e:4d:2b:af:
         94:fe:15:18
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHqieMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
ZjY2MmM0OThjMGNiZDJiYjY4YjNlZjc0YjYwMmEyZDQ5NGQ5MDEwHhcNMjMwNTI4
MDgzMDAwWhcNMjUwNTI3MDgzMDAwWjAzMTEwLwYDVQQDEyg1YmI3MTMxNjVlMzUw
OWU3NzJmNzlmMjZmYjViZjgxNDdmZWJiMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyfI8KJg+Qypl/lDUg09LfqA8wVmsYheasAFklKXgsNA4pk/P
AQW8Ck9FWOFi5afMT6Sb2tpgW8Y640hH38K3hcbS5AzOEOjiwAN+RYqS/Zwg1r8O
YD649k5iNas1K9NFw9rU8ms/NtTNxCMzJ++7LZNZ7I9QZPnyOE1EbCOAS093WQR0
XllJQSXEV2SMimspIUSzqR8hVKmlni/xRv1yXFPHUOhVPlgr+TLrJM/gGCF2KjDa
ssFBlPbJrDu+LYMsoh0y29rmBoGRTQBX+pu/XMEMk5LetidMqasYO9Dlg+ucnb7U
iMpoafo+b/YuRV2i222k/F1geDJsV94bBF4m9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGzsmRe8bWRw86G0zeDNoT3CV/xpMB8GA1UdIwQYMBaAFLvRICWwSPa1rhX8
ULFUYG9SfKrgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFmNjYy
YzQ5OGMwY2JkMmJiNjhiM2VmNzRiNjAyYTJkNDk0ZDkwMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGFjY2M5NjgtMDdmMi00MGMzLWI4YTgtMTQ3ZTUy
MDE1MGIyLzViYjcxMzE2NWUzNTA5ZTc3MmY3OWYyNmZiNWJmODE0N2ZlYmIwZjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YWNjYzk2OC0wN2YyLTQwYzMtYjhhOC0xNDdl
NTIwMTUwYjIvNGFmNjYyYzQ5OGMwY2JkMmJiNjhiM2VmNzRiNjAyYTJkNDk0ZDkw
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2xFDANBgkqhkiG9w0BAQsFAAOCAQEASHb5NsX40A/t7f8Z
VWGTIxPSP1noKby8NJtvyoPVdO4lvdDA5lBD87hPZDWvFGwVwUcRVHuIxrlfoFjL
7ZW4AzW+sOCLTZAj+y4weBMiye1AlFzXBSA5wG1JZ2kERqtVZ14woJ0gBq/XpNn9
0/j8zXTInUtiy8iYYXF5+eiGfvpsV6zN1yNH8AQ1wxB2R8T8nHl0MHrVT5fxuGsd
Apqauo85hpGwvdny6WuL5+C0PbaDOMhBSFs7I6+VVlkjWbq16o94OAtpZMzBGZix
Z3/GhlColTpdY7hWqwDtWCiPr5eZHPmuFpmAZSgzEur0g4a0sCKYF5kUym4eTSuv
lP4VGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org