Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/62a841336a3153fab63dff0b71c3a02a25cdef59.roa
File:                     62a841336a3153fab63dff0b71c3a02a25cdef59.roa (raw, json)
Hash identifier:          W9V4CwzziRNT8HVBcq8q73AzgXownA0VdWZBKc7D4Hs=
Subject key identifier:   70:26:16:B5:92:2C:24:09:B8:BE:16:2F:7F:EB:D0:6F:DE:8A:B7:2A
Certificate issuer:       /CN=9d586db69acc08f54288edff4f9498f226daa7cc
Certificate serial:       0BDDD0
Authority key identifier: 78:5A:06:46:66:21:9A:5F:38:33:E2:75:5C:7A:3D:08:4E:A7:23:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d586db69acc08f54288edff4f9498f226daa7cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/62a841336a3153fab63dff0b71c3a02a25cdef59.roa
Signing time:             Wed 24 Mar 2021 14:30:42 +0000
ROA not before:           Wed 24 Mar 2021 14:30:42 +0000
ROA not after:            Tue 24 Mar 2026 14:30:42 +0000
asID:                     267738
IP address blocks:        45.167.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777680 (0xbddd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d586db69acc08f54288edff4f9498f226daa7cc
        Validity
            Not Before: Mar 24 14:30:42 2021 GMT
            Not After : Mar 24 14:30:42 2026 GMT
        Subject: CN=62a841336a3153fab63dff0b71c3a02a25cdef59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:70:67:3c:e2:22:93:a6:ea:70:de:4d:9d:2e:
                    bf:9c:e9:4c:6a:fd:77:bd:da:9e:8a:08:2a:52:d1:
                    9a:15:9b:17:a3:1d:f1:db:3c:82:9f:84:03:34:3d:
                    1f:19:76:d2:a7:ac:45:f5:43:0a:8e:3a:ac:c5:89:
                    71:f2:fa:4a:8c:a4:19:3d:a1:16:ae:2e:20:99:f7:
                    e8:58:4a:9d:f0:4f:47:e8:d4:35:fb:c0:3c:91:ff:
                    12:64:ec:77:2d:ff:72:2d:fb:32:66:58:55:cf:b5:
                    3f:30:15:ec:4b:d9:a3:c7:9c:a2:87:7d:d7:99:94:
                    bb:05:63:c0:1b:a0:1d:3f:5e:83:41:e3:86:23:5b:
                    c1:ad:31:d1:ce:7b:88:42:0b:20:97:6b:0a:02:ef:
                    3c:e9:da:62:67:ce:b1:d5:15:bf:05:d0:f3:39:25:
                    cb:8b:c4:d6:e3:30:33:7d:dc:a6:08:21:ed:a3:ad:
                    f6:16:34:9d:90:2b:3f:03:d8:1b:a8:17:3c:17:12:
                    bb:0d:cd:f9:0e:02:ae:3a:f2:9b:6b:74:44:ad:0c:
                    84:0c:43:5d:c5:ff:28:60:e6:d1:d1:ff:66:6f:d1:
                    f1:9c:7a:84:92:fe:27:d7:ca:c1:6c:bc:58:37:bb:
                    4a:f7:76:03:c6:e5:6b:ca:b6:69:1c:f5:22:22:54:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:16:B5:92:2C:24:09:B8:BE:16:2F:7F:EB:D0:6F:DE:8A:B7:2A
            X509v3 Authority Key Identifier:
                keyid:78:5A:06:46:66:21:9A:5F:38:33:E2:75:5C:7A:3D:08:4E:A7:23:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d586db69acc08f54288edff4f9498f226daa7cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/62a841336a3153fab63dff0b71c3a02a25cdef59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/9d586db69acc08f54288edff4f9498f226daa7cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:d8:32:81:a4:41:d5:b8:12:c6:95:82:77:fc:0e:97:04:
         e5:33:9a:c0:62:80:5a:8b:43:97:60:bd:51:5d:0a:f1:e4:e7:
         85:c2:9c:87:91:56:83:66:e1:11:86:16:d1:9e:fb:f0:97:84:
         c3:bc:53:d4:94:d9:f6:0f:a2:20:82:fa:38:a1:52:eb:d3:6b:
         ef:05:67:a8:52:05:09:0a:7d:e7:9b:72:e2:d1:25:82:ef:5b:
         c1:1a:03:ea:1c:5e:cc:8f:36:30:6f:be:8e:4c:f5:63:ee:ab:
         6f:92:83:a5:f3:27:84:51:ab:d2:cc:c5:19:e3:68:11:89:28:
         f7:5d:1d:70:d1:2f:ff:54:6b:66:ac:f1:08:8d:33:12:2c:01:
         39:eb:69:e2:0a:df:d4:11:b7:44:df:4a:61:b2:7c:a4:f7:1f:
         eb:a7:76:79:06:ce:2d:b3:d3:d3:06:a4:03:c6:5e:7c:78:db:
         f3:07:04:63:4e:d3:bc:12:11:43:ae:6c:8a:c8:6f:13:ce:64:
         bf:16:c2:df:6a:71:ae:47:ce:ef:81:28:94:b1:5a:64:51:3a:
         97:2c:49:b5:ea:48:ac:34:eb:96:31:f5:a7:81:e1:a2:3b:99:
         22:b6:ae:cb:11:a9:42:d5:34:9d:69:39:16:3c:f8:7f:a0:4a:
         c3:bd:69:ed
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC93QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
NTg2ZGI2OWFjYzA4ZjU0Mjg4ZWRmZjRmOTQ5OGYyMjZkYWE3Y2MwHhcNMjEwMzI0
MTQzMDQyWhcNMjYwMzI0MTQzMDQyWjAzMTEwLwYDVQQDEyg2MmE4NDEzMzZhMzE1
M2ZhYjYzZGZmMGI3MWMzYTAyYTI1Y2RlZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjHBnPOIik6bqcN5NnS6/nOlMav13vdqeiggqUtGaFZsXox3x
2zyCn4QDND0fGXbSp6xF9UMKjjqsxYlx8vpKjKQZPaEWri4gmffoWEqd8E9H6NQ1
+8A8kf8SZOx3Lf9yLfsyZlhVz7U/MBXsS9mjx5yih33XmZS7BWPAG6AdP16DQeOG
I1vBrTHRznuIQgsgl2sKAu886dpiZ86x1RW/BdDzOSXLi8TW4zAzfdymCCHto632
FjSdkCs/A9gbqBc8FxK7Dc35DgKuOvKba3RErQyEDENdxf8oYObR0f9mb9HxnHqE
kv4n18rBbLxYN7tK93YDxuVryrZpHPUiIlRYMwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHAmFrWSLCQJuL4WL3/r0G/eircqMB8GA1UdIwQYMBaAFHhaBkZmIZpfODPi
dVx6PQhOpyN/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQ1ODZk
YjY5YWNjMDhmNTQyODhlZGZmNGY5NDk4ZjIyNmRhYTdjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTRiZjhlYzMtNjUzOS00MDI4LThiOWEtMGM3YmRl
OTU1Nzg5LzYyYTg0MTMzNmEzMTUzZmFiNjNkZmYwYjcxYzNhMDJhMjVjZGVmNTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNGJmOGVjMy02NTM5LTQwMjgtOGI5YS0wYzdi
ZGU5NTU3ODkvOWQ1ODZkYjY5YWNjMDhmNTQyODhlZGZmNGY5NDk4ZjIyNmRhYTdj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2nqDANBgkqhkiG9w0BAQsFAAOCAQEAVdDYMoGkQdW4EsaV
gnf8DpcE5TOawGKAWotDl2C9UV0K8eTnhcKch5FWg2bhEYYW0Z778JeEw7xT1JTZ
9g+iIIL6OKFS69Nr7wVnqFIFCQp955ty4tElgu9bwRoD6hxezI82MG++jkz1Y+6r
b5KDpfMnhFGr0szFGeNoEYko910dcNEv/1RrZqzxCI0zEiwBOetp4grf1BG3RN9K
YbJ8pPcf66d2eQbOLbPT0wakA8ZefHjb8wcEY07TvBIRQ65sishvE85kvxbC32px
rkfO74EolLFaZFE6lyxJtepIrDTrljH1p4HhojuZIrauyxGpQtU0nWk5Fjz4f6BK
w71p7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org