Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/b0cb589e92cb40830ba3885e5e5b8c0b9c8c9736.roa
File:                     b0cb589e92cb40830ba3885e5e5b8c0b9c8c9736.roa (raw, json)
Hash identifier:          sXO4SF/XbktQ+eIXq+7R7XRJNbTko0aMllwNaUNt3yc=
Subject key identifier:   7C:1E:71:BE:14:59:70:1F:ED:1B:87:7B:2C:6C:A1:51:70:06:E9:3A
Certificate issuer:       /CN=4bbec171df1af15102377d4faca6fbd809b04ea1
Certificate serial:       096A86
Authority key identifier: FB:39:F9:F3:E2:73:4B:8A:F2:88:D5:4D:2E:D8:A0:0F:CC:26:86:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bbec171df1af15102377d4faca6fbd809b04ea1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/b0cb589e92cb40830ba3885e5e5b8c0b9c8c9736.roa
Signing time:             Wed 26 Jan 2022 19:27:25 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Mon 24 Mar 2036 03:00:00 +0000
asID:                     265741
IP address blocks:        45.172.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617094 (0x96a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbec171df1af15102377d4faca6fbd809b04ea1
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2036 GMT
        Subject: CN=b0cb589e92cb40830ba3885e5e5b8c0b9c8c9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:9e:5c:a3:81:04:9d:55:7f:39:ed:7a:5a:
                    36:96:8e:10:be:df:bc:64:4b:4e:bf:82:82:c1:28:
                    08:2e:53:35:62:b0:67:8c:fa:e5:2d:0c:4b:6b:33:
                    e0:97:6f:95:4d:23:1c:be:9a:75:a5:3b:c4:a5:df:
                    c0:37:26:ed:46:b4:34:fc:c7:5c:5a:f1:a2:a6:ed:
                    e1:c0:3d:f8:86:e0:33:48:d2:1f:bf:99:26:fe:57:
                    45:b3:51:0f:9c:df:88:28:57:0d:a2:12:9d:66:ea:
                    32:12:7d:f4:6e:e5:3a:eb:64:55:40:2d:cb:fc:ff:
                    39:5f:c3:ec:f8:68:09:fc:13:8b:31:93:f2:d9:fb:
                    81:a6:02:1d:39:c6:5e:e6:f6:2d:3e:39:21:aa:7a:
                    3a:fe:8b:75:5e:70:73:9b:82:65:ef:d0:2e:c6:fd:
                    96:bb:35:26:3a:bb:68:8b:fe:a4:10:06:d2:10:48:
                    66:9b:37:a3:8f:c3:dc:0f:06:08:e8:1a:a3:e2:a3:
                    21:b5:df:ae:21:e6:3b:c5:d5:a4:55:1a:60:4a:26:
                    01:43:61:4d:d8:e4:cb:8f:ed:10:c5:30:df:08:83:
                    e8:68:8e:13:14:3d:0b:18:ce:c8:c4:87:68:73:0a:
                    68:d4:b6:07:f7:c0:65:de:36:9a:87:53:8e:b6:9c:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:71:BE:14:59:70:1F:ED:1B:87:7B:2C:6C:A1:51:70:06:E9:3A
            X509v3 Authority Key Identifier:
                keyid:FB:39:F9:F3:E2:73:4B:8A:F2:88:D5:4D:2E:D8:A0:0F:CC:26:86:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bbec171df1af15102377d4faca6fbd809b04ea1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/b0cb589e92cb40830ba3885e5e5b8c0b9c8c9736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d715fdb-9c91-4353-9d78-5bfc0619c771/4bbec171df1af15102377d4faca6fbd809b04ea1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:99:96:14:25:06:4c:7d:30:35:e2:a9:e0:0b:6d:04:d9:18:
         d2:8b:c5:4b:a3:93:5e:fb:a5:fd:56:81:7f:3f:10:77:32:3d:
         10:a4:99:d6:f0:a5:81:b4:9d:8e:5d:bf:9d:a3:bf:c2:a3:ba:
         71:88:5f:a0:c9:17:1d:50:19:6b:fb:7f:45:c7:1c:73:70:8d:
         8e:66:fb:d2:bd:a9:12:a0:1a:d6:31:9f:fa:ce:d3:fa:f2:b3:
         7a:b3:9e:d5:b2:d3:3c:49:a6:55:c1:f4:82:ec:aa:af:9b:43:
         1d:78:48:2e:bc:6e:55:42:37:57:86:63:22:9e:d8:6c:c8:6c:
         80:4b:07:22:4c:a8:ae:45:8b:5a:09:ec:70:f2:e0:85:3c:c7:
         39:c2:f6:83:f5:89:7d:77:00:38:91:e6:e4:47:46:a1:44:0e:
         87:8e:3c:ba:be:64:9a:ae:fe:33:10:d0:f9:47:f2:21:c8:e9:
         f0:c5:e9:a6:e7:fb:8b:a7:37:f9:8a:c8:fe:f8:b2:89:44:c3:
         4f:f0:d9:70:8d:a4:7b:11:5b:82:67:a6:26:27:ec:c6:6e:67:
         5b:d1:56:69:17:0d:1f:35:4a:5f:c5:5b:7e:07:54:8e:90:3b:
         12:3a:15:b7:32:86:56:e3:16:7a:73:04:5b:74:fd:0d:1e:13:
         ec:9b:01:1b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCWqGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
YmVjMTcxZGYxYWYxNTEwMjM3N2Q0ZmFjYTZmYmQ4MDliMDRlYTEwHhcNMjEwMzI0
MDMwMDAwWhcNMzYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhiMGNiNTg5ZTkyY2I0
MDgzMGJhMzg4NWU1ZTViOGMwYjljOGM5NzM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoM2eXKOBBJ1Vfzntelo2lo4Qvt+8ZEtOv4KCwSgILlM1YrBn
jPrlLQxLazPgl2+VTSMcvpp1pTvEpd/ANybtRrQ0/MdcWvGipu3hwD34huAzSNIf
v5km/ldFs1EPnN+IKFcNohKdZuoyEn30buU662RVQC3L/P85X8Ps+GgJ/BOLMZPy
2fuBpgIdOcZe5vYtPjkhqno6/ot1XnBzm4Jl79Auxv2WuzUmOrtoi/6kEAbSEEhm
mzejj8PcDwYI6Bqj4qMhtd+uIeY7xdWkVRpgSiYBQ2FN2OTLj+0QxTDfCIPoaI4T
FD0LGM7IxIdocwpo1LYH98Bl3jaah1OOtpxJ/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHwecb4UWXAf7RuHeyxsoVFwBuk6MB8GA1UdIwQYMBaAFPs5+fPic0uK8ojV
TS7YoA/MJobGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGJiZWMx
NzFkZjFhZjE1MTAyMzc3ZDRmYWNhNmZiZDgwOWIwNGVhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ3MTVmZGItOWM5MS00MzUzLTlkNzgtNWJmYzA2
MTljNzcxL2IwY2I1ODllOTJjYjQwODMwYmEzODg1ZTVlNWI4YzBiOWM4Yzk3MzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDcxNWZkYi05YzkxLTQzNTMtOWQ3OC01YmZj
MDYxOWM3NzEvNGJiZWMxNzFkZjFhZjE1MTAyMzc3ZDRmYWNhNmZiZDgwOWIwNGVh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2sbDANBgkqhkiG9w0BAQsFAAOCAQEAZJmWFCUGTH0wNeKp
4AttBNkY0ovFS6OTXvul/VaBfz8QdzI9EKSZ1vClgbSdjl2/naO/wqO6cYhfoMkX
HVAZa/t/Rcccc3CNjmb70r2pEqAa1jGf+s7T+vKzerOe1bLTPEmmVcH0guyqr5tD
HXhILrxuVUI3V4ZjIp7YbMhsgEsHIkyorkWLWgnscPLghTzHOcL2g/WJfXcAOJHm
5EdGoUQOh448ur5kmq7+MxDQ+UfyIcjp8MXppuf7i6c3+YrI/viyiUTDT/DZcI2k
exFbgmemJifsxm5nW9FWaRcNHzVKX8VbfgdUjpA7EjoVtzKGVuMWenMEW3T9DR4T
7JsBGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org