Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/767a495462ec2cb2598b72ca3fe576072c259bee.roa
File:                     767a495462ec2cb2598b72ca3fe576072c259bee.roa (raw, json)
Hash identifier:          1nAqkRke5NiBi164uVncW9GN2SU3tbguRMjpxoHKZb8=
Subject key identifier:   C8:C5:63:67:1F:52:8B:13:FA:C7:F5:68:F3:AA:A8:E5:E6:B2:E9:E3
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       18C779
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/767a495462ec2cb2598b72ca3fe576072c259bee.roa
Signing time:             Thu 23 Jun 2022 21:50:12 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     264668
IP address blocks:        45.71.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623929 (0x18c779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=767a495462ec2cb2598b72ca3fe576072c259bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:1a:7d:30:82:b0:55:02:23:2c:42:d6:f9:
                    8e:a9:ae:6f:5a:b9:be:9a:6a:e0:f4:7f:57:27:b7:
                    99:e5:7e:a5:e9:e0:4d:91:ea:a4:bf:5b:65:91:d5:
                    39:c7:d3:4b:d6:32:23:e5:c6:51:e0:b0:5b:94:bb:
                    77:1b:03:79:bc:3a:51:57:78:68:0c:85:51:f0:ad:
                    49:f1:10:3d:30:4a:ac:9c:59:37:e2:ce:fe:23:7e:
                    d9:03:86:a1:bc:06:b9:71:38:21:ea:86:df:95:22:
                    25:49:54:69:2a:94:41:f8:3d:42:6f:55:46:56:82:
                    0b:95:d6:5a:3c:ba:41:47:f0:9a:cd:b5:ff:1e:5a:
                    b6:f1:9c:44:ac:2e:6f:25:53:78:58:76:57:a2:55:
                    f8:0d:da:ec:40:a9:50:07:81:26:65:92:08:bf:26:
                    00:50:66:6f:4e:f5:18:b1:b4:c6:0f:1d:e9:a7:51:
                    ff:12:c2:4e:32:0f:c5:e7:05:3a:c6:ed:22:fc:41:
                    2a:04:6b:6f:f4:5e:00:2c:e9:70:5d:50:ea:c7:cb:
                    1b:03:5e:f1:74:f3:99:8a:8b:22:ab:1e:04:6d:9b:
                    3f:33:60:7e:fc:5c:16:4c:b4:24:e9:fc:99:e0:e4:
                    72:24:f2:4e:57:ca:99:d0:b9:62:bb:45:e3:88:76:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C5:63:67:1F:52:8B:13:FA:C7:F5:68:F3:AA:A8:E5:E6:B2:E9:E3
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/767a495462ec2cb2598b72ca3fe576072c259bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:67:27:de:2f:89:fd:20:3d:dd:10:eb:fb:26:8f:b6:e6:9f:
         47:50:6c:08:83:09:a1:7a:26:b0:56:18:6c:23:f3:0a:33:b2:
         4b:91:7c:c2:18:25:b0:80:2a:a6:3c:72:ed:86:cd:ce:5c:96:
         ef:c2:31:8c:c5:d5:52:fb:e1:66:dd:4e:09:20:d7:19:0b:d5:
         24:31:79:b4:cf:57:cf:c5:84:e7:9b:87:9d:8e:e8:3d:3c:4c:
         fc:bc:00:7b:6e:27:a9:08:20:50:b2:7b:77:9f:05:6e:d0:f7:
         70:96:ca:ec:f4:5f:08:34:74:77:f6:89:a9:84:47:18:63:64:
         2a:d6:a2:ca:1d:6d:aa:5f:ab:c5:d8:e1:bf:9c:14:ca:da:d0:
         8c:47:0f:44:cb:5a:40:30:56:2e:a6:af:45:fe:d5:46:87:f4:
         54:df:92:c8:4a:f1:cf:29:78:e0:ae:1c:8f:a7:a0:6e:d7:a9:
         56:ad:53:b1:12:b5:19:b1:16:c4:5f:a5:ea:d0:2c:fa:61:d1:
         a3:72:88:23:35:e7:a3:03:ea:82:40:70:30:04:c1:ac:03:6e:
         0d:0d:4c:d9:cd:af:44:d3:e1:bf:bf:55:f6:03:51:23:28:6b:
         a1:4d:8e:1e:ef:55:ab:17:ee:21:d7:ce:5c:fb:9f:d7:7b:4e:
         99:87:7d:36
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGMd5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
YzMzY2I3OWY2NWMyZTFhYzg1YWE1MjRmZDg0ZDc0ZThjY2EyYTcwHhcNMjIwNjIz
MDMwMDAwWhcNMjQwNjIzMDMwMDAwWjAzMTEwLwYDVQQDEyg3NjdhNDk1NDYyZWMy
Y2IyNTk4YjcyY2EzZmU1NzYwNzJjMjU5YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmEUafTCCsFUCIyxC1vmOqa5vWrm+mmrg9H9XJ7eZ5X6l6eBN
keqkv1tlkdU5x9NL1jIj5cZR4LBblLt3GwN5vDpRV3hoDIVR8K1J8RA9MEqsnFk3
4s7+I37ZA4ahvAa5cTgh6obflSIlSVRpKpRB+D1Cb1VGVoILldZaPLpBR/CazbX/
Hlq28ZxErC5vJVN4WHZXolX4DdrsQKlQB4EmZZIIvyYAUGZvTvUYsbTGDx3pp1H/
EsJOMg/F5wU6xu0i/EEqBGtv9F4ALOlwXVDqx8sbA17xdPOZiosiqx4EbZs/M2B+
/FwWTLQk6fyZ4ORyJPJOV8qZ0Lliu0XjiHY96QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMjFY2cfUosT+sf1aPOqqOXmsunjMB8GA1UdIwQYMBaAFAfCv4K4sqyYwHmL
sDAfVkkV0zA1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzhjMzNj
Yjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1OTdjNjYtZjBjYi00YmVjLTk2NzUtZjM0MzVk
YzU1ZDU3Lzc2N2E0OTU0NjJlYzJjYjI1OThiNzJjYTNmZTU3NjA3MmMyNTliZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTU5N2M2Ni1mMGNiLTRiZWMtOTY3NS1mMzQz
NWRjNTVkNTcvNzhjMzNjYjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1H/TANBgkqhkiG9w0BAQsFAAOCAQEAcGcn3i+J/SA93RDr
+yaPtuafR1BsCIMJoXomsFYYbCPzCjOyS5F8whglsIAqpjxy7YbNzlyW78IxjMXV
UvvhZt1OCSDXGQvVJDF5tM9Xz8WE55uHnY7oPTxM/LwAe24nqQggULJ7d58FbtD3
cJbK7PRfCDR0d/aJqYRHGGNkKtaiyh1tql+rxdjhv5wUytrQjEcPRMtaQDBWLqav
Rf7VRof0VN+SyErxzyl44K4cj6egbtepVq1TsRK1GbEWxF+l6tAs+mHRo3KIIzXn
owPqgkBwMATBrANuDQ1M2c2vRNPhv79V9gNRIyhroU2OHu9VqxfuIdfOXPuf13tO
mYd9Ng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org