Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/d3ae4533491e9b4a987e508a5df9072309c4989a.roa
File:                     d3ae4533491e9b4a987e508a5df9072309c4989a.roa (raw, json)
Hash identifier:          kHNwBddAEZLdkvNFgy2byUkFULrcOjBetFixwFhJmO4=
Subject key identifier:   23:B0:65:5F:C1:B4:88:B0:7B:B6:F2:59:95:22:24:EB:FA:A2:22:62
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       214CF5
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/d3ae4533491e9b4a987e508a5df9072309c4989a.roa
Signing time:             Sun 16 Apr 2023 18:32:46 +0000
ROA not before:           Fri 14 Apr 2023 18:26:42 +0000
ROA not after:            Wed 16 Apr 2025 18:26:42 +0000
asID:                     272954
IP address blocks:        45.71.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182389 (0x214cf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Apr 14 18:26:42 2023 GMT
            Not After : Apr 16 18:26:42 2025 GMT
        Subject: CN=d3ae4533491e9b4a987e508a5df9072309c4989a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:ba:87:c6:6b:eb:ab:9b:2e:38:5d:cb:5a:
                    f2:fe:74:b0:40:5a:3e:fd:25:a3:03:83:98:12:55:
                    7a:82:75:d1:a8:81:98:45:8a:60:78:15:7e:c6:ba:
                    fb:cc:4c:4b:a5:3e:75:90:5d:7c:5e:47:ca:b3:96:
                    06:4b:93:2b:c3:0f:45:7f:58:61:fb:3c:1f:44:41:
                    32:e9:1a:54:ea:a1:50:52:31:c8:4b:8c:1e:78:e0:
                    ec:86:b6:2f:fd:76:cc:d5:c5:35:6c:40:6e:44:f5:
                    3e:37:48:7d:2b:0c:56:41:6b:d8:dd:fa:1a:6d:a5:
                    90:9c:83:24:a1:d0:fa:53:36:60:d2:d1:83:d6:99:
                    db:cb:86:87:d9:92:b2:46:d5:f1:7b:61:04:7f:4c:
                    a8:1d:3a:2b:fd:ba:f8:54:04:6c:de:e5:a3:37:84:
                    10:58:f1:6b:72:b1:a1:4b:df:6e:74:cb:c2:72:28:
                    d8:21:b2:f0:9a:d8:c7:c2:db:f9:e6:e3:5a:7c:0f:
                    60:03:a4:98:b0:36:b0:d8:3e:e7:f7:19:03:ba:ae:
                    8d:bf:4b:3a:8d:e5:91:6d:92:2e:14:36:03:e4:eb:
                    ad:b3:02:84:00:c5:7d:25:a7:22:ff:cc:dd:35:7b:
                    18:b5:90:ce:18:c3:94:71:b1:28:f2:a3:c8:9d:77:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B0:65:5F:C1:B4:88:B0:7B:B6:F2:59:95:22:24:EB:FA:A2:22:62
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/d3ae4533491e9b4a987e508a5df9072309c4989a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:81:d6:a4:f9:de:08:f7:37:7c:cf:65:a4:64:3c:7f:e0:
         25:6d:d8:24:a2:ad:14:24:e3:55:c6:d5:1c:8d:df:b9:eb:b3:
         ec:c9:e1:99:67:b0:39:67:03:7c:cd:87:6b:f7:8b:cc:f3:94:
         19:cc:df:58:aa:5d:03:c6:16:3d:c6:f3:da:81:d7:08:b7:21:
         f7:32:0f:49:5d:5f:5c:83:59:9d:26:1d:b6:6d:17:e0:78:85:
         43:34:c4:25:0f:18:ef:9d:29:08:61:6e:c2:2c:5f:50:dd:fc:
         36:07:54:db:69:37:bc:da:6f:c0:bd:a8:31:92:94:63:ea:7a:
         9c:9d:e5:0a:bc:30:04:a4:04:91:37:a5:d6:0e:4d:26:64:6d:
         28:6b:f3:63:6d:81:9d:58:15:9e:bd:76:ac:50:72:0c:68:73:
         1c:12:5a:94:0d:0a:a5:cb:77:c7:71:10:7e:27:56:15:bd:75:
         d0:d3:41:3b:81:c5:a0:6e:d2:a4:ae:ac:94:08:6d:cb:a8:79:
         bd:0c:8f:dd:c9:c3:8a:c4:85:ca:52:fc:2e:e8:6a:9f:70:72:
         64:c1:ff:46:de:ec:66:4f:cd:9d:47:7b:52:de:4b:cf:0b:16:
         2a:27:bf:35:a6:3a:52:7c:16:2f:c9:b4:0b:ac:a2:4b:85:05:
         3d:c8:88:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIUz1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
YzMzY2I3OWY2NWMyZTFhYzg1YWE1MjRmZDg0ZDc0ZThjY2EyYTcwHhcNMjMwNDE0
MTgyNjQyWhcNMjUwNDE2MTgyNjQyWjAzMTEwLwYDVQQDEyhkM2FlNDUzMzQ5MWU5
YjRhOTg3ZTUwOGE1ZGY5MDcyMzA5YzQ5ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApA66h8Zr66ubLjhdy1ry/nSwQFo+/SWjA4OYElV6gnXRqIGY
RYpgeBV+xrr7zExLpT51kF18XkfKs5YGS5Mrww9Ff1hh+zwfREEy6RpU6qFQUjHI
S4weeODshrYv/XbM1cU1bEBuRPU+N0h9KwxWQWvY3foabaWQnIMkodD6UzZg0tGD
1pnby4aH2ZKyRtXxe2EEf0yoHTor/br4VARs3uWjN4QQWPFrcrGhS99udMvCcijY
IbLwmtjHwtv55uNafA9gA6SYsDaw2D7n9xkDuq6Nv0s6jeWRbZIuFDYD5OutswKE
AMV9Jaci/8zdNXsYtZDOGMOUcbEo8qPInXf0QwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCOwZV/BtIiwe7byWZUiJOv6oiJiMB8GA1UdIwQYMBaAFAfCv4K4sqyYwHmL
sDAfVkkV0zA1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzhjMzNj
Yjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1OTdjNjYtZjBjYi00YmVjLTk2NzUtZjM0MzVk
YzU1ZDU3L2QzYWU0NTMzNDkxZTliNGE5ODdlNTA4YTVkZjkwNzIzMDljNDk4OWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTU5N2M2Ni1mMGNiLTRiZWMtOTY3NS1mMzQz
NWRjNTVkNTcvNzhjMzNjYjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1H/TANBgkqhkiG9w0BAQsFAAOCAQEAlJ2B1qT53gj3N3zP
ZaRkPH/gJW3YJKKtFCTjVcbVHI3fueuz7MnhmWewOWcDfM2Ha/eLzPOUGczfWKpd
A8YWPcbz2oHXCLch9zIPSV1fXINZnSYdtm0X4HiFQzTEJQ8Y750pCGFuwixfUN38
NgdU22k3vNpvwL2oMZKUY+p6nJ3lCrwwBKQEkTel1g5NJmRtKGvzY22BnVgVnr12
rFByDGhzHBJalA0Kpct3x3EQfidWFb110NNBO4HFoG7SpK6slAhty6h5vQyP3cnD
isSFylL8Luhqn3ByZMH/Rt7sZk/NnUd7Ut5LzwsWKie/NaY6UnwWL8m0C6yiS4UF
PciIxw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org