Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/569c6b5c2f7042fd2ea84356f4317937c9f2e346.roa
File:                     569c6b5c2f7042fd2ea84356f4317937c9f2e346.roa (raw, json)
Hash identifier:          p6YknbSSqJbsG9/D4gqadl7CmJndQpV3Je+oVWfwsg0=
Subject key identifier:   E7:02:B4:38:0E:CA:22:5C:C9:CC:A6:F5:A7:B0:C1:34:8C:27:B8:8F
Certificate issuer:       /CN=2014fe312f512b7a037dbccfd3a2ed388671449a
Certificate serial:       0D45E5
Authority key identifier: 7D:34:3C:49:9B:65:2F:11:F3:02:18:BF:DD:B0:28:38:87:5F:A4:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2014fe312f512b7a037dbccfd3a2ed388671449a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/569c6b5c2f7042fd2ea84356f4317937c9f2e346.roa
Signing time:             Wed 24 Mar 2021 14:38:38 +0000
ROA not before:           Wed 24 Mar 2021 14:38:37 +0000
ROA not after:            Tue 24 Mar 2026 14:38:37 +0000
asID:                     264668
IP address blocks:        45.70.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869861 (0xd45e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2014fe312f512b7a037dbccfd3a2ed388671449a
        Validity
            Not Before: Mar 24 14:38:37 2021 GMT
            Not After : Mar 24 14:38:37 2026 GMT
        Subject: CN=569c6b5c2f7042fd2ea84356f4317937c9f2e346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:cd:84:b6:d5:b4:b0:9e:b1:8e:f5:e3:c7:
                    07:78:ec:ba:71:29:e7:74:2a:4f:7a:cb:58:5b:3c:
                    8f:27:7c:a4:67:2d:db:f3:fb:a4:de:73:d8:e1:df:
                    0e:f4:00:2e:a7:79:b0:cf:71:e1:3b:83:82:44:d6:
                    06:6f:6b:2f:9b:9c:ed:54:71:62:91:fc:88:77:c9:
                    22:00:fa:4b:c6:4c:1c:a2:ef:c5:81:42:d1:79:ac:
                    9a:04:6c:fd:e5:cc:d6:66:e5:a1:d1:0f:af:c2:61:
                    03:97:60:e7:36:96:b7:8b:14:8d:37:72:cf:d1:a6:
                    e9:1b:c4:19:f2:30:50:f0:23:35:d5:e8:26:76:f3:
                    f9:25:24:0e:f0:4c:2c:ad:30:88:dc:24:cd:b1:df:
                    ee:60:68:14:18:96:21:b4:ce:bb:45:e2:fd:37:83:
                    44:9e:d4:3c:76:73:74:84:2b:3f:52:78:d3:81:05:
                    5e:76:72:f2:98:55:8f:bf:60:fa:31:b2:e2:aa:cd:
                    8d:43:20:f1:bc:47:7a:55:bc:1c:f3:37:dc:94:58:
                    f9:62:35:24:2a:6b:06:76:49:d2:dc:78:a2:33:c5:
                    81:34:89:12:1e:05:f6:92:5f:eb:bd:c2:9f:28:56:
                    12:89:98:71:cb:dd:d1:05:fe:ed:44:f1:f8:a4:04:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:B4:38:0E:CA:22:5C:C9:CC:A6:F5:A7:B0:C1:34:8C:27:B8:8F
            X509v3 Authority Key Identifier:
                keyid:7D:34:3C:49:9B:65:2F:11:F3:02:18:BF:DD:B0:28:38:87:5F:A4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2014fe312f512b7a037dbccfd3a2ed388671449a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/569c6b5c2f7042fd2ea84356f4317937c9f2e346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/2014fe312f512b7a037dbccfd3a2ed388671449a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:4f:3a:bd:bb:2a:64:58:f1:73:d8:3f:72:d4:4b:88:2c:
         bc:0b:84:1f:e1:2e:f4:a7:60:34:f8:ba:82:e6:c5:6a:21:fb:
         1c:ad:15:dc:39:c6:75:5e:25:0b:e3:1d:5c:fd:41:90:bf:2f:
         96:c0:1d:3e:38:3e:ca:f2:b2:92:ea:ad:49:f2:8e:c9:78:c8:
         41:46:cd:15:7e:04:fa:80:80:1e:6b:3a:f6:13:e1:3a:0b:bb:
         39:1c:d4:44:ea:fa:db:34:c7:8e:13:ab:00:b9:be:a7:84:43:
         73:0f:ec:d3:51:e2:fb:45:f9:12:40:21:79:6b:ce:7e:b6:72:
         11:18:f7:8c:32:5e:61:f0:72:5a:d5:c3:b7:79:f7:cc:c4:cc:
         c9:79:14:60:f0:08:89:90:a5:cb:46:ee:dc:90:61:ba:fc:98:
         40:c4:49:a3:81:5f:d3:4c:bd:89:55:c5:f5:e6:d9:c4:ff:32:
         03:13:ab:98:3e:48:fb:5d:00:36:ff:d7:35:f3:e1:be:58:a1:
         02:9d:84:b7:ae:c0:80:6f:fb:19:bd:69:a6:19:1c:89:c9:5c:
         70:42:77:b1:60:88:91:92:37:33:42:20:11:30:7c:4f:db:d2:
         84:45:34:07:10:a5:f4:64:2f:52:a3:28:70:52:6a:40:66:b5:
         79:df:49:ef
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDUXlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
MTRmZTMxMmY1MTJiN2EwMzdkYmNjZmQzYTJlZDM4ODY3MTQ0OWEwHhcNMjEwMzI0
MTQzODM3WhcNMjYwMzI0MTQzODM3WjAzMTEwLwYDVQQDEyg1NjljNmI1YzJmNzA0
MmZkMmVhODQzNTZmNDMxNzkzN2M5ZjJlMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtALNhLbVtLCesY7148cHeOy6cSnndCpPestYWzyPJ3ykZy3b
8/uk3nPY4d8O9AAup3mwz3HhO4OCRNYGb2svm5ztVHFikfyId8kiAPpLxkwcou/F
gULReayaBGz95czWZuWh0Q+vwmEDl2DnNpa3ixSNN3LP0abpG8QZ8jBQ8CM11egm
dvP5JSQO8EwsrTCI3CTNsd/uYGgUGJYhtM67ReL9N4NEntQ8dnN0hCs/UnjTgQVe
dnLymFWPv2D6MbLiqs2NQyDxvEd6Vbwc8zfclFj5YjUkKmsGdknS3HiiM8WBNIkS
HgX2kl/rvcKfKFYSiZhxy93RBf7tRPH4pASKywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOcCtDgOyiJcycym9aewwTSMJ7iPMB8GA1UdIwQYMBaAFH00PEmbZS8R8wIY
v92wKDiHX6RaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjAxNGZl
MzEyZjUxMmI3YTAzN2RiY2NmZDNhMmVkMzg4NjcxNDQ5YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTZiZDZkZWYtODVhNS00MWQ4LThkMjctNWVjMzk4
NGRjNzJlLzU2OWM2YjVjMmY3MDQyZmQyZWE4NDM1NmY0MzE3OTM3YzlmMmUzNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NmJkNmRlZi04NWE1LTQxZDgtOGQyNy01ZWMz
OTg0ZGM3MmUvMjAxNGZlMzEyZjUxMmI3YTAzN2RiY2NmZDNhMmVkMzg4NjcxNDQ5
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1G7DANBgkqhkiG9w0BAQsFAAOCAQEAT+RPOr27KmRY8XPY
P3LUS4gsvAuEH+Eu9KdgNPi6gubFaiH7HK0V3DnGdV4lC+MdXP1BkL8vlsAdPjg+
yvKykuqtSfKOyXjIQUbNFX4E+oCAHms69hPhOgu7ORzUROr62zTHjhOrALm+p4RD
cw/s01Hi+0X5EkAheWvOfrZyERj3jDJeYfByWtXDt3n3zMTMyXkUYPAIiZCly0bu
3JBhuvyYQMRJo4Ff00y9iVXF9ebZxP8yAxOrmD5I+10ANv/XNfPhvlihAp2Et67A
gG/7Gb1pphkciclccEJ3sWCIkZI3M0IgETB8T9vShEU0BxCl9GQvUqMocFJqQGa1
ed9J7w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org