Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/b8c7e9fa027ee0f6929d793767641bde78fb937c.roa
File:                     b8c7e9fa027ee0f6929d793767641bde78fb937c.roa (raw, json)
Hash identifier:          Bkwur1TP1yxQAiNWj/tQLwGK7c2BQfCFykUhp82Z7GM=
Subject key identifier:   6E:E3:E8:DB:D1:96:7F:B3:29:40:08:67:84:88:F1:49:7E:22:66:EE
Certificate issuer:       /CN=7d4b649384481a70163fa549e8ceb813fed96d9d
Certificate serial:       24981B
Authority key identifier: 62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/b8c7e9fa027ee0f6929d793767641bde78fb937c.roa
Signing time:             Thu 14 Dec 2023 16:06:17 +0000
ROA not before:           Thu 14 Dec 2023 16:06:17 +0000
ROA not after:            Sun 14 Dec 2025 16:06:17 +0000
asID:                     267733
IP address blocks:        45.167.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398235 (0x24981b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4b649384481a70163fa549e8ceb813fed96d9d
        Validity
            Not Before: Dec 14 16:06:17 2023 GMT
            Not After : Dec 14 16:06:17 2025 GMT
        Subject: CN=b8c7e9fa027ee0f6929d793767641bde78fb937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:22:04:7a:8b:71:a1:ad:0c:28:8f:c1:a8:
                    cb:d9:d8:ae:2d:52:8a:b1:f2:5b:03:ae:5e:3c:48:
                    80:32:24:ff:ba:8a:e3:cf:d6:bc:e9:99:95:7c:b6:
                    92:19:a9:93:9a:ef:bb:9a:16:4c:af:3f:2e:23:07:
                    33:8a:3d:df:d4:9a:5f:6d:53:ab:78:af:eb:a4:94:
                    46:de:d6:bd:14:68:8d:a5:60:e9:1d:5e:0a:b8:48:
                    8f:ef:42:16:b8:e0:8d:ae:c0:f4:b1:2b:64:7d:c2:
                    2c:94:e4:b5:b4:3f:af:bb:a8:70:1c:95:8b:cf:a0:
                    bd:0c:1a:cc:17:01:a3:ae:92:21:68:b2:be:fb:f6:
                    33:96:28:2b:5b:5a:8b:21:c5:33:ae:e9:60:14:0f:
                    59:7c:bc:cd:33:61:01:c3:b8:3f:52:3b:97:c1:5a:
                    d5:a0:e7:bf:a2:7d:0f:8d:2f:c4:09:3e:25:22:6e:
                    1d:34:5c:ea:8f:a8:c8:06:84:89:bf:38:1d:1a:0c:
                    fa:41:de:e3:c5:3f:eb:17:74:d8:84:4e:2c:a4:f0:
                    c8:6f:ff:08:f1:15:1d:7c:80:bd:f2:d7:d2:2a:9e:
                    a6:35:99:a9:aa:e1:e4:d7:a9:70:86:f3:b7:ac:3e:
                    66:9a:4a:ca:62:0e:c0:13:b7:9a:06:c8:8d:c2:69:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:E8:DB:D1:96:7F:B3:29:40:08:67:84:88:F1:49:7E:22:66:EE
            X509v3 Authority Key Identifier:
                keyid:62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/b8c7e9fa027ee0f6929d793767641bde78fb937c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/7d4b649384481a70163fa549e8ceb813fed96d9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:87:b8:37:ef:54:e5:3d:a9:e1:9e:58:60:61:ca:d5:11:00:
         22:85:52:37:13:8d:3e:af:19:97:81:bc:a5:50:a6:a7:ad:e7:
         8d:d4:ce:0e:8a:16:75:54:ce:0c:a0:a4:90:9b:3d:8b:9e:dd:
         61:4a:1b:c8:ea:bb:68:07:09:b6:48:04:3f:ab:90:99:a2:d3:
         01:80:0a:ae:22:15:75:28:96:a4:1c:fe:22:88:c0:39:cc:26:
         53:0b:f3:93:4b:93:75:7a:b8:c4:16:05:26:56:33:02:37:4e:
         26:49:80:f6:ca:2e:cd:2c:c8:ee:3b:aa:6a:a5:11:0c:ac:a7:
         82:d5:fd:9a:4a:be:a3:d0:7e:83:9b:88:15:cf:2c:ec:b9:cf:
         7e:fc:a9:2e:b2:fe:e5:b4:a7:0c:0d:dd:d0:a9:95:2a:6c:4a:
         28:1a:bb:c7:24:ac:ac:3f:0e:5f:df:7f:83:da:7b:12:15:cd:
         9d:77:8f:eb:0c:49:6c:6d:ff:d2:04:14:96:44:27:d7:28:49:
         f7:6e:93:be:d5:ce:1b:c3:03:ea:fd:fa:c3:b7:5b:3d:80:1d:
         7b:4f:56:8b:39:0f:7a:5f:27:4e:2e:cd:19:11:66:2c:15:7e:
         e1:bf:13:a0:e9:d1:52:3a:5c:12:c8:b6:9d:ee:91:ce:c8:9b:
         d2:1d:0e:5d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJJgbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
NGI2NDkzODQ0ODFhNzAxNjNmYTU0OWU4Y2ViODEzZmVkOTZkOWQwHhcNMjMxMjE0
MTYwNjE3WhcNMjUxMjE0MTYwNjE3WjAzMTEwLwYDVQQDEyhiOGM3ZTlmYTAyN2Vl
MGY2OTI5ZDc5Mzc2NzY0MWJkZTc4ZmI5MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx5giBHqLcaGtDCiPwajL2diuLVKKsfJbA65ePEiAMiT/uorj
z9a86ZmVfLaSGamTmu+7mhZMrz8uIwczij3f1JpfbVOreK/rpJRG3ta9FGiNpWDp
HV4KuEiP70IWuOCNrsD0sStkfcIslOS1tD+vu6hwHJWLz6C9DBrMFwGjrpIhaLK+
+/YzligrW1qLIcUzrulgFA9ZfLzNM2EBw7g/UjuXwVrVoOe/on0PjS/ECT4lIm4d
NFzqj6jIBoSJvzgdGgz6Qd7jxT/rF3TYhE4spPDIb/8I8RUdfIC98tfSKp6mNZmp
quHk16lwhvO3rD5mmkrKYg7AE7eaBsiNwmkykwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG7j6NvRln+zKUAIZ4SI8Ul+ImbuMB8GA1UdIwQYMBaAFGJRvzz73+uDSlws
3ZdcAi8YhtG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Q0YjY0
OTM4NDQ4MWE3MDE2M2ZhNTQ5ZThjZWI4MTNmZWQ5NmQ5ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBlZTI0NjktODNlYS00MWU4LTk1MzUtZGMxNjA5
Y2FhY2M3L2I4YzdlOWZhMDI3ZWUwZjY5MjlkNzkzNzY3NjQxYmRlNzhmYjkzN2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGVlMjQ2OS04M2VhLTQxZTgtOTUzNS1kYzE2
MDljYWFjYzcvN2Q0YjY0OTM4NDQ4MWE3MDE2M2ZhNTQ5ZThjZWI4MTNmZWQ5NmQ5
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2nwDANBgkqhkiG9w0BAQsFAAOCAQEASoe4N+9U5T2p4Z5Y
YGHK1REAIoVSNxONPq8Zl4G8pVCmp63njdTODooWdVTODKCkkJs9i57dYUobyOq7
aAcJtkgEP6uQmaLTAYAKriIVdSiWpBz+IojAOcwmUwvzk0uTdXq4xBYFJlYzAjdO
JkmA9souzSzI7juqaqURDKyngtX9mkq+o9B+g5uIFc8s7LnPfvypLrL+5bSnDA3d
0KmVKmxKKBq7xySsrD8OX99/g9p7EhXNnXeP6wxJbG3/0gQUlkQn1yhJ926TvtXO
G8MD6v36w7dbPYAde09WizkPel8nTi7NGRFmLBV+4b8ToOnRUjpcEsi2ne6Rzsib
0h0OXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org