Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/f14ef64cffbb46e4304b82ddc9e1e0a6c2898d55.roa
File:                     f14ef64cffbb46e4304b82ddc9e1e0a6c2898d55.roa (raw, json)
Hash identifier:          HfD9HaMf42buVrbxGn35pr4tFPsZ2p47RPOr81EZmEY=
Subject key identifier:   9E:35:32:A6:35:D1:7D:FC:5F:12:BD:48:5E:D2:A2:63:4A:BF:8E:CD
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       1FDB11
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/f14ef64cffbb46e4304b82ddc9e1e0a6c2898d55.roa
Signing time:             Sun 14 May 2023 15:57:23 +0000
ROA not before:           Sat 13 May 2023 15:57:21 +0000
ROA not after:            Wed 14 May 2025 15:57:21 +0000
asID:                     12679
IP address blocks:        45.176.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087697 (0x1fdb11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: May 13 15:57:21 2023 GMT
            Not After : May 14 15:57:21 2025 GMT
        Subject: CN=f14ef64cffbb46e4304b82ddc9e1e0a6c2898d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:48:a4:27:b1:15:1d:b3:ab:4a:28:1d:58:36:
                    90:bc:60:54:d8:b8:fa:25:1f:21:7c:d0:fd:d6:94:
                    02:cb:8f:22:05:36:32:6a:da:3f:67:44:56:01:cb:
                    44:08:99:10:6b:5a:b7:31:e9:68:f2:5a:2d:9d:e7:
                    8f:0d:8e:aa:0d:e4:55:3b:1b:4c:7e:ac:c6:b9:26:
                    8e:e1:4c:46:e7:e0:69:0b:fe:71:8a:0d:8b:c6:7d:
                    f9:a4:24:50:3c:d8:0b:20:fd:b8:84:01:55:e9:9a:
                    31:dc:84:e8:f8:ac:e0:59:71:b7:e0:fc:ac:33:6f:
                    6f:77:dd:bd:4d:2c:26:45:3e:1d:32:87:f5:e6:3e:
                    b9:07:be:52:b0:7e:4e:96:bd:24:f0:3b:e7:e3:d2:
                    63:77:02:5b:1e:98:e2:28:eb:f2:0b:1a:69:35:83:
                    7d:eb:99:74:a0:f0:10:38:ea:ef:1c:52:50:08:37:
                    e1:e0:64:aa:14:eb:b9:61:af:42:34:58:74:5d:4c:
                    84:3f:da:47:ba:f8:9f:f7:7e:95:f6:d6:5c:cb:79:
                    d5:c4:74:e6:86:e9:17:15:ad:9e:77:4c:a4:26:66:
                    69:6a:34:f2:cd:53:9d:8c:93:c5:38:08:a7:7a:6b:
                    b4:1e:14:19:89:94:ed:32:a6:96:6c:a6:67:c2:71:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:32:A6:35:D1:7D:FC:5F:12:BD:48:5E:D2:A2:63:4A:BF:8E:CD
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/f14ef64cffbb46e4304b82ddc9e1e0a6c2898d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:42:1f:f3:93:77:7a:30:d6:2a:94:51:22:e9:d6:a3:96:
         cd:fb:90:be:ff:42:bc:cc:70:b9:04:e2:50:a2:9b:12:fc:79:
         f3:b4:fb:07:d3:64:e6:12:74:45:20:14:2f:49:5c:2e:d2:6b:
         c4:91:20:f5:43:53:c2:36:29:71:8d:68:a9:cb:68:fc:99:a9:
         26:1e:2c:f4:70:6b:9c:48:90:ac:55:fb:03:88:7d:53:4c:64:
         ad:86:91:ca:7b:1d:ed:0f:18:de:f5:7d:f0:fb:2d:c2:aa:fb:
         31:fc:52:6d:7d:e0:14:d7:35:f6:1b:95:24:4d:c1:94:09:2f:
         28:ff:b2:9b:57:65:77:a9:7e:f6:28:b5:fd:8b:1d:f9:d9:83:
         5e:72:d2:a5:66:2e:40:39:3a:c6:3f:79:e3:76:39:80:44:c6:
         86:2a:27:a1:50:e0:9c:40:aa:14:85:e8:fd:12:27:04:df:b5:
         21:30:20:f5:1d:17:92:03:3b:c2:6d:cc:1a:4b:4f:4d:2c:b1:
         a6:28:37:29:b8:0f:05:67:93:7b:26:48:0b:04:80:27:f6:a2:
         d6:95:b4:75:b0:b2:fa:32:34:6e:53:68:93:5b:bc:5c:5b:b0:
         7b:9a:36:cc:4d:e1:9d:c3:02:1b:ab:8d:9f:7c:80:b5:5e:90:
         18:90:e6:7a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH9sRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
OTQ0ODJlYTIzZjhhMzRkNGMyOGYwY2RkNDAzOGM2NDFlNjNiYmMwHhcNMjMwNTEz
MTU1NzIxWhcNMjUwNTE0MTU1NzIxWjAzMTEwLwYDVQQDEyhmMTRlZjY0Y2ZmYmI0
NmU0MzA0YjgyZGRjOWUxZTBhNmMyODk4ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjEikJ7EVHbOrSigdWDaQvGBU2Lj6JR8hfND91pQCy48iBTYy
ato/Z0RWActECJkQa1q3Melo8lotneePDY6qDeRVOxtMfqzGuSaO4UxG5+BpC/5x
ig2Lxn35pCRQPNgLIP24hAFV6Zox3ITo+KzgWXG34PysM29vd929TSwmRT4dMof1
5j65B75SsH5Olr0k8Dvn49JjdwJbHpjiKOvyCxppNYN965l0oPAQOOrvHFJQCDfh
4GSqFOu5Ya9CNFh0XUyEP9pHuvif936V9tZcy3nVxHTmhukXFa2ed0ykJmZpajTy
zVOdjJPFOAinemu0HhQZiZTtMqaWbKZnwnEIiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ41MqY10X38XxK9SF7SomNKv47NMB8GA1UdIwQYMBaAFOuss2xa9YVEMgiW
gLMgsBm7KF6SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWE5NDQ4
MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2JiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOThmNzkwZGQtYWVhOC00YmNkLTk4OWQtOTAyZjUw
YTIxNThhL2YxNGVmNjRjZmZiYjQ2ZTQzMDRiODJkZGM5ZTFlMGE2YzI4OThkNTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OGY3OTBkZC1hZWE4LTRiY2QtOTg5ZC05MDJm
NTBhMjE1OGEvNWE5NDQ4MmVhMjNmOGEzNGQ0YzI4ZjBjZGQ0MDM4YzY0MWU2M2Ji
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wvjANBgkqhkiG9w0BAQsFAAOCAQEAAb1CH/OTd3ow1iqU
USLp1qOWzfuQvv9CvMxwuQTiUKKbEvx587T7B9Nk5hJ0RSAUL0lcLtJrxJEg9UNT
wjYpcY1oqcto/JmpJh4s9HBrnEiQrFX7A4h9U0xkrYaRynsd7Q8Y3vV98Pstwqr7
MfxSbX3gFNc19huVJE3BlAkvKP+ym1dld6l+9ii1/Ysd+dmDXnLSpWYuQDk6xj95
43Y5gETGhionoVDgnECqFIXo/RInBN+1ITAg9R0XkgM7wm3MGktPTSyxpig3KbgP
BWeTeyZICwSAJ/ai1pW0dbCy+jI0blNok1u8XFuwe5o2zE3hncMCG6uNn3yAtV6Q
GJDmeg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org