Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/ddf5c35cd88dba8599e5f0077217cc5c1a02e089.roa
File:                     ddf5c35cd88dba8599e5f0077217cc5c1a02e089.roa (raw, json)
Hash identifier:          +blyHrnMzQq3Q2rRdeyiC6Tp2FgDN3T16f9Slvya87w=
Subject key identifier:   F2:98:2F:D0:12:20:D1:6D:BF:1A:28:23:0A:0D:9F:0D:9F:4D:79:CA
Certificate issuer:       /CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
Certificate serial:       0CEF3D
Authority key identifier: C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/ddf5c35cd88dba8599e5f0077217cc5c1a02e089.roa
Signing time:             Wed 24 Mar 2021 14:34:23 +0000
ROA not before:           Wed 24 Mar 2021 14:34:23 +0000
ROA not after:            Tue 24 Mar 2026 14:34:23 +0000
asID:                     269733
IP address blocks:        45.160.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847677 (0xcef3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
        Validity
            Not Before: Mar 24 14:34:23 2021 GMT
            Not After : Mar 24 14:34:23 2026 GMT
        Subject: CN=ddf5c35cd88dba8599e5f0077217cc5c1a02e089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:8e:fe:6f:ec:98:4e:f6:c9:f1:a1:fc:75:
                    9d:7c:21:71:2c:2d:be:7b:0e:d2:b5:ec:c6:1f:0c:
                    45:ad:39:13:0a:a3:8a:12:f3:2d:a3:83:3b:89:4f:
                    d9:26:fa:49:88:7f:94:47:9e:8d:de:f9:8a:43:ae:
                    bf:08:4d:7d:a4:c5:4f:42:90:f2:6f:53:1c:7f:91:
                    f1:81:27:35:00:ff:3d:ae:84:b9:17:2c:da:3d:f6:
                    4b:7f:d1:cf:49:15:29:b4:fd:c6:e0:69:d5:c7:0e:
                    49:2d:86:7c:da:f7:23:0c:fe:9a:e1:fc:8b:17:d8:
                    5d:db:d2:97:c6:33:7a:3e:79:ae:3c:4e:4a:a2:09:
                    a4:7d:15:25:63:d1:ee:4a:9e:7b:cf:17:f0:37:f2:
                    ed:3c:69:3a:0a:60:97:5f:7b:3a:19:6a:9e:cb:3d:
                    e1:5f:31:65:de:ca:18:1e:21:a5:c8:76:89:aa:c6:
                    ee:6d:a9:e5:b6:ec:c6:86:eb:b2:05:3c:16:50:b0:
                    34:f6:86:92:6f:e4:12:52:7d:ce:2d:3b:53:8e:12:
                    ee:63:ca:43:f3:8e:3f:52:69:5f:7c:d8:40:7c:c5:
                    e4:5d:57:5a:49:62:45:27:12:6b:52:a9:62:83:a3:
                    22:34:43:41:20:37:4f:da:00:c9:91:89:fe:f6:2e:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:2F:D0:12:20:D1:6D:BF:1A:28:23:0A:0D:9F:0D:9F:4D:79:CA
            X509v3 Authority Key Identifier:
                keyid:C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/ddf5c35cd88dba8599e5f0077217cc5c1a02e089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:cc:12:fa:58:5a:89:2b:63:9f:eb:86:0d:c1:66:93:4b:
         26:49:3a:05:a3:4e:27:08:52:19:7d:93:d1:83:67:d6:e0:98:
         fc:66:92:79:9c:99:6c:61:2d:19:94:a0:ea:56:8b:b0:42:6c:
         3c:9a:84:a5:10:4d:d6:d5:9b:a7:55:2e:56:8e:d5:58:61:ce:
         f3:09:ef:1f:e6:e5:11:96:2a:a1:5e:25:26:92:81:ba:bc:95:
         c7:cd:e6:40:25:df:50:3f:00:63:e7:22:ea:63:ee:f6:13:1f:
         b9:76:4c:62:1b:16:7f:65:ef:44:ab:45:f3:9a:f5:7f:ac:4d:
         f9:0f:a4:f7:70:4a:12:1c:a7:a7:02:42:77:50:90:c8:f4:81:
         17:40:d9:ad:53:89:71:c7:d4:56:1b:4a:da:fe:fe:e6:06:2f:
         ef:1d:13:fb:e1:41:2f:17:9b:34:7c:50:10:ab:24:28:b2:d4:
         b8:62:e7:74:f7:54:f1:40:d6:dc:b8:bb:d6:a7:06:c4:ca:96:
         77:bf:d6:70:7d:72:24:24:9c:7e:77:80:4f:10:91:26:e8:bf:
         48:ca:35:89:2e:7c:d0:2d:34:58:ee:07:2d:c4:ab:6a:7f:09:
         4c:0f:85:69:26:a8:62:1d:5a:91:70:46:40:dc:9b:72:4c:f8:
         62:0b:c3:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDO89MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
ZGNlNTdjZGZmYjY3NmI4OWVlYjQ1OGNjODZkOWE2N2ZiZGQxMDQwHhcNMjEwMzI0
MTQzNDIzWhcNMjYwMzI0MTQzNDIzWjAzMTEwLwYDVQQDEyhkZGY1YzM1Y2Q4OGRi
YTg1OTllNWYwMDc3MjE3Y2M1YzFhMDJlMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlemO/m/smE72yfGh/HWdfCFxLC2+ew7StezGHwxFrTkTCqOK
EvMto4M7iU/ZJvpJiH+UR56N3vmKQ66/CE19pMVPQpDyb1Mcf5HxgSc1AP89roS5
FyzaPfZLf9HPSRUptP3G4GnVxw5JLYZ82vcjDP6a4fyLF9hd29KXxjN6PnmuPE5K
ogmkfRUlY9HuSp57zxfwN/LtPGk6CmCXX3s6GWqeyz3hXzFl3soYHiGlyHaJqsbu
banltuzGhuuyBTwWULA09oaSb+QSUn3OLTtTjhLuY8pD844/UmlffNhAfMXkXVda
SWJFJxJrUqlig6MiNENBIDdP2gDJkYn+9i5/fQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPKYL9ASINFtvxooIwoNnw2fTXnKMB8GA1UdIwQYMBaAFMY/+pBi3bVHWVKx
FTnuZL2pt/nWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNkY2U1
N2NkZmZiNjc2Yjg5ZWViNDU4Y2M4NmQ5YTY3ZmJkZDEwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTE3YTg0OGUtNmJkNi00MWY3LTg0MDYtN2Q2ODk0
YzM1OTFmL2RkZjVjMzVjZDg4ZGJhODU5OWU1ZjAwNzcyMTdjYzVjMWEwMmUwODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMTdhODQ4ZS02YmQ2LTQxZjctODQwNi03ZDY4
OTRjMzU5MWYvNDNkY2U1N2NkZmZiNjc2Yjg5ZWViNDU4Y2M4NmQ5YTY3ZmJkZDEw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2gDDANBgkqhkiG9w0BAQsFAAOCAQEAS1nMEvpYWokrY5/r
hg3BZpNLJkk6BaNOJwhSGX2T0YNn1uCY/GaSeZyZbGEtGZSg6laLsEJsPJqEpRBN
1tWbp1UuVo7VWGHO8wnvH+blEZYqoV4lJpKBuryVx83mQCXfUD8AY+ci6mPu9hMf
uXZMYhsWf2XvRKtF85r1f6xN+Q+k93BKEhynpwJCd1CQyPSBF0DZrVOJccfUVhtK
2v7+5gYv7x0T++FBLxebNHxQEKskKLLUuGLndPdU8UDW3Li71qcGxMqWd7/WcH1y
JCScfneATxCRJui/SMo1iS580C00WO4HLcSran8JTA+FaSaoYh1akXBGQNybckz4
YgvDug==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org