Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/f97a1ab34d232f72bd3c36d2d68b3e115dd44e31.roa
File:                     f97a1ab34d232f72bd3c36d2d68b3e115dd44e31.roa (raw, json)
Hash identifier:          5/X/2BwqvjNy2fQq7xsQObNIku45eNNI58q7UgTMGeA=
Subject key identifier:   DD:15:80:7D:01:AC:14:59:D0:F8:7C:FD:1C:80:96:99:A0:27:CB:10
Certificate issuer:       /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial:       1C8DC6
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/f97a1ab34d232f72bd3c36d2d68b3e115dd44e31.roa
Signing time:             Fri 24 Nov 2023 11:12:17 +0000
ROA not before:           Fri 24 Nov 2023 11:12:17 +0000
ROA not after:            Mon 24 Nov 2025 11:12:17 +0000
asID:                     52363
IP address blocks:        45.232.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871302 (0x1c8dc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
        Validity
            Not Before: Nov 24 11:12:17 2023 GMT
            Not After : Nov 24 11:12:17 2025 GMT
        Subject: CN=f97a1ab34d232f72bd3c36d2d68b3e115dd44e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:66:54:05:2e:5e:ba:fc:26:59:79:03:fd:
                    03:3e:86:7b:13:fa:0f:67:42:17:51:dc:2d:fd:1c:
                    ad:30:11:3a:d6:01:7e:9b:04:c6:f2:33:73:19:57:
                    07:8d:ef:a8:d5:f1:18:ef:bd:90:d8:4d:61:60:51:
                    5f:2e:a3:39:cd:79:67:4b:b2:1b:47:38:f5:6c:c3:
                    80:43:6f:f2:41:1d:0b:a0:8d:ac:42:e7:dd:05:09:
                    8a:ed:f0:c6:68:4b:5e:47:f7:3a:c7:40:21:01:15:
                    f7:59:0e:b8:43:8d:ed:a6:85:9e:4f:5e:be:35:7a:
                    12:99:16:2d:71:c6:cc:81:a3:26:ce:6d:e3:9d:aa:
                    5b:3a:c6:f3:b1:38:a5:38:9a:de:00:f2:c2:83:89:
                    8c:a5:98:40:8b:cd:a0:a5:5a:a2:94:20:f5:85:fd:
                    a1:16:b1:36:4a:43:69:8e:30:18:d0:97:db:99:16:
                    73:1a:13:06:a4:12:f5:54:f8:98:e6:e8:a1:2f:47:
                    fb:b4:8f:94:30:81:61:b5:c0:ca:4c:5e:5a:b5:82:
                    68:37:6c:2d:a0:64:b9:c5:e8:6a:53:00:80:09:c8:
                    00:ac:d4:06:08:49:d9:2d:75:ef:55:ac:fd:c6:05:
                    2d:2c:d0:22:ba:cb:0a:41:07:1d:2f:4e:76:56:c1:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:80:7D:01:AC:14:59:D0:F8:7C:FD:1C:80:96:99:A0:27:CB:10
            X509v3 Authority Key Identifier:
                keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/f97a1ab34d232f72bd3c36d2d68b3e115dd44e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:35:00:51:91:9e:3e:23:10:ec:f5:02:bb:78:e4:d0:bc:29:
         33:f8:7f:1b:93:a9:0a:99:8c:fc:04:c9:a7:fd:20:8c:e4:c5:
         dd:29:9c:1d:af:84:bc:01:8f:2d:0e:eb:e4:7b:ae:57:1b:2f:
         8f:b9:be:fd:47:df:c6:aa:e9:cc:42:00:42:4b:ef:db:e8:64:
         d4:d2:b3:a2:1e:cf:aa:e8:4a:75:d9:f8:86:5e:6b:88:bd:5c:
         01:dd:ee:57:cc:8a:aa:d5:eb:c3:fb:7b:e6:94:8b:29:8d:19:
         52:23:86:87:f4:c2:84:50:1b:44:2f:b6:d1:14:4e:d5:ed:e2:
         50:aa:c1:62:4e:a6:44:6a:41:6f:78:b3:78:2c:af:39:ac:24:
         c5:39:81:b7:a9:66:3e:a9:e1:73:bf:72:4a:f0:89:5b:f9:7d:
         d9:eb:3a:3e:5a:02:a6:fc:1e:33:74:78:e6:28:78:1e:71:2e:
         cc:e8:7c:b5:b7:43:85:aa:34:56:c2:26:33:c0:2b:30:4b:51:
         a3:66:3b:2a:35:04:58:1a:b1:18:c7:24:f5:25:98:ce:8a:59:
         ed:f4:9c:39:e4:b4:2f:a8:26:94:97:09:bc:1b:0b:de:d5:92:
         61:3f:c8:8a:94:ab:d6:85:5a:67:24:87:7d:68:8f:80:2b:d6:
         29:88:48:ff
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHI3GMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
MmNhMTliNDMyYzQ4M2Q1YWEyZGJiZWZkMDAwNjFiM2U4NmIyOWMwHhcNMjMxMTI0
MTExMjE3WhcNMjUxMTI0MTExMjE3WjAzMTEwLwYDVQQDEyhmOTdhMWFiMzRkMjMy
ZjcyYmQzYzM2ZDJkNjhiM2UxMTVkZDQ0ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxl9mVAUuXrr8Jll5A/0DPoZ7E/oPZ0IXUdwt/RytMBE61gF+
mwTG8jNzGVcHje+o1fEY772Q2E1hYFFfLqM5zXlnS7IbRzj1bMOAQ2/yQR0LoI2s
QufdBQmK7fDGaEteR/c6x0AhARX3WQ64Q43tpoWeT16+NXoSmRYtccbMgaMmzm3j
napbOsbzsTilOJreAPLCg4mMpZhAi82gpVqilCD1hf2hFrE2SkNpjjAY0JfbmRZz
GhMGpBL1VPiY5uihL0f7tI+UMIFhtcDKTF5atYJoN2wtoGS5xehqUwCACcgArNQG
CEnZLXXvVaz9xgUtLNAiussKQQcdL052VsHBQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN0VgH0BrBRZ0Ph8/RyAlpmgJ8sQMB8GA1UdIwQYMBaAFJvPhiGAtabcfw6z
liRzqOVdSYNVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzkyY2Ex
OWI0MzJjNDgzZDVhYTJkYmJlZmQwMDA2MWIzZTg2YjI5Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWVlMDUwMTctYmU4Ny00N2M4LTliMzctNDYxM2Jl
MzZiN2Q3L2Y5N2ExYWIzNGQyMzJmNzJiZDNjMzZkMmQ2OGIzZTExNWRkNDRlMzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZWUwNTAxNy1iZTg3LTQ3YzgtOWIzNy00NjEz
YmUzNmI3ZDcvMzkyY2ExOWI0MzJjNDgzZDVhYTJkYmJlZmQwMDA2MWIzZTg2YjI5
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3ozDANBgkqhkiG9w0BAQsFAAOCAQEAbzUAUZGePiMQ7PUC
u3jk0LwpM/h/G5OpCpmM/ATJp/0gjOTF3SmcHa+EvAGPLQ7r5HuuVxsvj7m+/Uff
xqrpzEIAQkvv2+hk1NKzoh7PquhKddn4hl5riL1cAd3uV8yKqtXrw/t75pSLKY0Z
UiOGh/TChFAbRC+20RRO1e3iUKrBYk6mRGpBb3izeCyvOawkxTmBt6lmPqnhc79y
SvCJW/l92es6PloCpvweM3R45ih4HnEuzOh8tbdDhao0VsImM8ArMEtRo2Y7KjUE
WBqxGMck9SWYzopZ7fScOeS0L6gmlJcJvBsL3tWSYT/IipSr1oVaZySHfWiPgCvW
KYhI/w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org