Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/2573606f1a89998b8532390a65f35d9669f110ba.roa
File:                     2573606f1a89998b8532390a65f35d9669f110ba.roa (raw, json)
Hash identifier:          NuQNmsJ4OkP0u8zTp6WI4GHsDsS5NJ/Us2ERXbA3cf8=
Subject key identifier:   FC:76:2C:3E:B5:D3:4F:1D:E3:17:D3:C8:AE:F3:E2:21:75:31:44:1B
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       1863A2
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/2573606f1a89998b8532390a65f35d9669f110ba.roa
Signing time:             Wed 27 Jul 2022 00:20:59 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Wed 26 Jul 2023 03:00:00 +0000
asID:                     272812
IP address blocks:        45.176.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598370 (0x1863a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Jul 26 03:00:00 2023 GMT
        Subject: CN=2573606f1a89998b8532390a65f35d9669f110ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:e3:04:42:43:ad:0c:14:41:e4:44:6e:2a:
                    50:c9:96:88:24:ee:14:cf:33:28:9b:b6:35:b0:6c:
                    d4:73:55:a2:ab:88:3d:8b:b1:4b:d9:2a:83:cf:87:
                    44:9c:34:5e:11:e2:d8:33:6d:b5:89:61:35:c2:ea:
                    74:4d:8b:cb:13:b4:40:5c:22:72:3c:41:90:bf:cc:
                    19:70:1a:48:9d:ee:ff:21:32:4b:a2:eb:81:4f:4f:
                    5e:3a:d7:d5:01:3e:6f:5b:a5:e9:04:cb:42:81:8b:
                    69:ba:c3:fb:06:c2:2b:1a:74:49:e7:68:80:4e:7f:
                    87:cd:0d:28:dd:c7:bd:73:7f:03:74:3a:08:1b:45:
                    f1:82:69:e7:ca:ca:14:3e:42:ab:ae:f2:9c:f4:f2:
                    60:6a:4a:8b:97:76:e4:52:58:f2:a0:ef:8d:a3:14:
                    4c:ba:0f:cd:4e:6b:a4:0c:6e:1b:ff:25:77:0a:1e:
                    65:5f:e1:38:af:ac:3b:c6:b4:3c:f8:5f:7f:09:31:
                    9e:33:45:44:b0:d2:a7:45:68:f2:a6:57:ec:e3:cc:
                    d6:ca:97:dc:20:65:08:64:a0:37:9e:ca:68:b6:76:
                    1d:94:a6:9e:0f:af:8c:87:e1:e0:13:57:53:e5:e9:
                    ab:66:01:c6:c0:82:a6:d2:1d:96:56:af:58:81:58:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:2C:3E:B5:D3:4F:1D:E3:17:D3:C8:AE:F3:E2:21:75:31:44:1B
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/2573606f1a89998b8532390a65f35d9669f110ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:9b:83:3f:16:3d:b1:f9:be:05:8d:19:32:42:42:69:2c:
         6b:10:40:78:56:9d:db:f0:de:75:62:98:a0:7f:82:3b:f5:17:
         ec:18:1a:b9:33:d1:4a:5f:ed:65:a1:6e:a2:f8:6f:05:6b:40:
         f9:85:51:08:aa:8c:da:ba:65:10:cc:2a:4c:14:42:f8:68:ad:
         b8:a7:69:09:97:ca:a2:8c:cc:3e:81:44:6a:4a:0f:38:65:30:
         21:1b:e2:a7:60:19:de:b5:58:39:32:1b:a6:9b:db:61:19:8e:
         d0:b9:8b:ce:04:d5:94:74:f1:fc:3c:35:9d:65:c0:48:3e:5a:
         15:eb:f2:98:b1:9a:f4:e2:d2:ca:0a:56:80:66:58:38:84:ef:
         ca:a1:61:76:07:a8:9f:a4:50:43:2c:09:82:23:8a:a8:e1:18:
         f6:0c:8d:50:d4:ae:2d:06:a0:ff:67:88:47:d4:09:50:f0:1d:
         e8:c1:9a:46:6d:da:09:04:e0:8a:74:78:f4:16:8d:b6:4a:66:
         3f:89:ae:69:56:05:82:91:2a:3f:85:3b:e3:6b:c8:78:d5:c3:
         a2:85:47:11:ea:2d:0c:92:fd:9a:ab:20:8c:18:50:ac:07:35:
         5d:06:ce:ea:73:e6:57:e6:b8:11:9b:08:02:f8:1c:56:ac:2f:
         3a:6f:d0:79
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGGOiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
OTQ0ODJlYTIzZjhhMzRkNGMyOGYwY2RkNDAzOGM2NDFlNjNiYmMwHhcNMjIwNzI2
MDMwMDAwWhcNMjMwNzI2MDMwMDAwWjAzMTEwLwYDVQQDEygyNTczNjA2ZjFhODk5
OThiODUzMjM5MGE2NWYzNWQ5NjY5ZjExMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkNXjBEJDrQwUQeREbipQyZaIJO4UzzMom7Y1sGzUc1Wiq4g9
i7FL2SqDz4dEnDReEeLYM221iWE1wup0TYvLE7RAXCJyPEGQv8wZcBpIne7/ITJL
ouuBT09eOtfVAT5vW6XpBMtCgYtpusP7BsIrGnRJ52iATn+HzQ0o3ce9c38DdDoI
G0XxgmnnysoUPkKrrvKc9PJgakqLl3bkUljyoO+NoxRMug/NTmukDG4b/yV3Ch5l
X+E4r6w7xrQ8+F9/CTGeM0VEsNKnRWjyplfs48zWypfcIGUIZKA3nspotnYdlKae
D6+Mh+HgE1dT5emrZgHGwIKm0h2WVq9YgVi18QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPx2LD61008d4xfTyK7z4iF1MUQbMB8GA1UdIwQYMBaAFOuss2xa9YVEMgiW
gLMgsBm7KF6SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWE5NDQ4
MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2JiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOThmNzkwZGQtYWVhOC00YmNkLTk4OWQtOTAyZjUw
YTIxNThhLzI1NzM2MDZmMWE4OTk5OGI4NTMyMzkwYTY1ZjM1ZDk2NjlmMTEwYmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OGY3OTBkZC1hZWE4LTRiY2QtOTg5ZC05MDJm
NTBhMjE1OGEvNWE5NDQ4MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2Ji
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wvTANBgkqhkiG9w0BAQsFAAOCAQEAVI6bgz8WPbH5vgWN
GTJCQmksaxBAeFad2/DedWKYoH+CO/UX7BgauTPRSl/tZaFuovhvBWtA+YVRCKqM
2rplEMwqTBRC+GituKdpCZfKoozMPoFEakoPOGUwIRvip2AZ3rVYOTIbppvbYRmO
0LmLzgTVlHTx/Dw1nWXASD5aFevymLGa9OLSygpWgGZYOITvyqFhdgeon6RQQywJ
giOKqOEY9gyNUNSuLQag/2eIR9QJUPAd6MGaRm3aCQTginR49BaNtkpmP4muaVYF
gpEqP4U742vIeNXDooVHEeotDJL9mqsgjBhQrAc1XQbO6nPmV+a4EZsIAvgcVqwv
Om/QeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org