Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/91db1f9d1a98b809d750741392386197c64b560f.roa
File:                     91db1f9d1a98b809d750741392386197c64b560f.roa (raw, json)
Hash identifier:          pA3MikAj9qmIzmQCyJmZfDZ5rHqww5SWE+vWr+e5+g8=
Subject key identifier:   AD:99:B0:E1:40:2C:43:B0:06:50:9D:27:E2:D9:41:8F:87:36:12:BD
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       1FE6E2
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/91db1f9d1a98b809d750741392386197c64b560f.roa
Signing time:             Sun 14 May 2023 16:01:57 +0000
ROA not before:           Sat 13 May 2023 16:01:57 +0000
ROA not after:            Wed 14 May 2025 16:01:57 +0000
asID:                     271927
IP address blocks:        45.176.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090722 (0x1fe6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: May 13 16:01:57 2023 GMT
            Not After : May 14 16:01:57 2025 GMT
        Subject: CN=91db1f9d1a98b809d750741392386197c64b560f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:53:60:2c:49:aa:c9:a3:a0:94:7a:fa:1f:
                    91:c4:60:7f:dc:0d:e1:a3:9b:6b:8f:95:03:b1:44:
                    39:96:b6:a1:20:eb:0a:a4:ed:66:23:54:b2:cf:79:
                    75:69:dc:d4:b9:43:6c:e5:b5:eb:f7:70:21:22:8f:
                    e0:82:f3:ef:2e:83:a8:be:e8:b5:d5:6b:0f:2f:40:
                    6f:92:bf:1d:9c:38:2b:23:9f:3f:44:fa:37:11:b3:
                    a0:79:60:3f:47:f4:ab:af:73:8f:86:b3:84:de:d9:
                    7f:4f:57:32:36:c4:56:c3:ff:f5:e5:96:43:14:ef:
                    2e:41:39:ea:d1:1e:df:40:bc:ca:32:09:6b:87:ff:
                    42:c9:08:fe:7f:8d:47:2f:4c:7a:a7:71:d3:92:18:
                    ae:5c:1b:70:5d:9e:a2:be:25:d4:2c:10:fe:5b:f1:
                    40:6c:84:46:3b:1b:81:c4:ab:49:81:30:6c:a9:96:
                    c8:e0:1d:41:ec:ee:10:42:b1:ce:97:fe:a1:66:bc:
                    91:47:4c:6b:71:5f:9b:a1:45:6e:3a:c0:30:7b:ea:
                    dd:36:13:db:08:91:1a:54:90:40:e2:a9:84:ab:e0:
                    6d:42:32:da:fe:be:10:03:40:ad:81:45:61:93:95:
                    dd:55:cf:af:04:18:a1:9e:25:88:fb:95:a5:ab:f1:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:B0:E1:40:2C:43:B0:06:50:9D:27:E2:D9:41:8F:87:36:12:BD
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/91db1f9d1a98b809d750741392386197c64b560f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:18:41:0e:db:c2:b4:c1:cd:0d:c7:d4:49:88:6a:dd:8d:c9:
         1e:dc:76:92:5e:c6:66:ca:3a:b9:5b:9f:e9:4a:b5:8e:81:22:
         b8:38:06:e1:47:d3:06:8f:f3:f8:de:ce:fc:49:3b:84:59:2c:
         6f:a3:00:0d:81:3d:49:73:50:7d:cf:fb:3c:fb:42:f2:bf:a4:
         2e:c2:5a:4e:2f:2b:cf:c6:e4:2c:e9:d5:e6:46:f0:ba:d0:78:
         93:b3:4e:40:e5:bc:33:c4:c7:d8:b9:08:30:bf:ee:2d:23:ef:
         27:18:53:f8:86:60:56:82:88:78:d0:b0:1e:06:76:ed:75:9d:
         14:f2:14:c4:46:1c:02:cf:bf:7a:45:4f:2a:05:f0:bb:89:42:
         d8:5b:92:8b:3b:ac:d7:3b:74:28:69:36:fc:c6:87:d7:64:6f:
         b7:06:60:af:f3:b4:9d:2c:e2:2c:3c:9a:7d:6d:ba:38:8a:99:
         8f:51:69:05:a0:e4:d9:b3:2a:98:ed:df:3d:9d:e9:30:9a:d6:
         41:6e:c4:a6:cb:81:28:6e:ec:4e:05:7b:3b:02:c9:d9:6b:11:
         a7:fb:66:5a:86:81:63:d7:5f:11:16:94:11:c9:32:ef:6d:4b:
         ab:73:34:1b:06:ba:9d:d0:c5:e6:dd:95:ba:d9:42:03:0a:11:
         e3:57:88:02
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH+biMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
OTQ0ODJlYTIzZjhhMzRkNGMyOGYwY2RkNDAzOGM2NDFlNjNiYmMwHhcNMjMwNTEz
MTYwMTU3WhcNMjUwNTE0MTYwMTU3WjAzMTEwLwYDVQQDEyg5MWRiMWY5ZDFhOThi
ODA5ZDc1MDc0MTM5MjM4NjE5N2M2NGI1NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuVBTYCxJqsmjoJR6+h+RxGB/3A3ho5trj5UDsUQ5lrahIOsK
pO1mI1Syz3l1adzUuUNs5bXr93AhIo/ggvPvLoOovui11WsPL0Bvkr8dnDgrI58/
RPo3EbOgeWA/R/Srr3OPhrOE3tl/T1cyNsRWw//15ZZDFO8uQTnq0R7fQLzKMglr
h/9CyQj+f41HL0x6p3HTkhiuXBtwXZ6iviXULBD+W/FAbIRGOxuBxKtJgTBsqZbI
4B1B7O4QQrHOl/6hZryRR0xrcV+boUVuOsAwe+rdNhPbCJEaVJBA4qmEq+BtQjLa
/r4QA0CtgUVhk5XdVc+vBBihniWI+5Wlq/FmfwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK2ZsOFALEOwBlCdJ+LZQY+HNhK9MB8GA1UdIwQYMBaAFOuss2xa9YVEMgiW
gLMgsBm7KF6SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWE5NDQ4
MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2JiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOThmNzkwZGQtYWVhOC00YmNkLTk4OWQtOTAyZjUw
YTIxNThhLzkxZGIxZjlkMWE5OGI4MDlkNzUwNzQxMzkyMzg2MTk3YzY0YjU2MGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OGY3OTBkZC1hZWE4LTRiY2QtOTg5ZC05MDJm
NTBhMjE1OGEvNWE5NDQ4MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2Ji
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wvDANBgkqhkiG9w0BAQsFAAOCAQEAURhBDtvCtMHNDcfU
SYhq3Y3JHtx2kl7GZso6uVuf6Uq1joEiuDgG4UfTBo/z+N7O/Ek7hFksb6MADYE9
SXNQfc/7PPtC8r+kLsJaTi8rz8bkLOnV5kbwutB4k7NOQOW8M8TH2LkIML/uLSPv
JxhT+IZgVoKIeNCwHgZ27XWdFPIUxEYcAs+/ekVPKgXwu4lC2FuSizus1zt0KGk2
/MaH12RvtwZgr/O0nSziLDyafW26OIqZj1FpBaDk2bMqmO3fPZ3pMJrWQW7EpsuB
KG7sTgV7OwLJ2WsRp/tmWoaBY9dfERaUEcky721Lq3M0Gwa6ndDF5t2VutlCAwoR
41eIAg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org