Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/c6aeb69cdb673b42269a32fab3453656d6be77e1.roa
File:                     c6aeb69cdb673b42269a32fab3453656d6be77e1.roa (raw, json)
Hash identifier:          7qtiNzL9B4RxgxQu+CB4bBugHaJNz8yaOKd3doR1nEM=
Subject key identifier:   02:1A:37:3C:ED:E0:ED:F0:43:FE:D5:3E:7D:62:03:D7:FD:58:3D:15
Certificate issuer:       /CN=9d586db69acc08f54288edff4f9498f226daa7cc
Certificate serial:       202797
Authority key identifier: 78:5A:06:46:66:21:9A:5F:38:33:E2:75:5C:7A:3D:08:4E:A7:23:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d586db69acc08f54288edff4f9498f226daa7cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/c6aeb69cdb673b42269a32fab3453656d6be77e1.roa
Signing time:             Wed 21 Jun 2023 08:30:00 +0000
ROA not before:           Tue 20 Jun 2023 08:30:00 +0000
ROA not after:            Thu 19 Jun 2025 08:30:00 +0000
asID:                     267738
IP address blocks:        45.167.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107287 (0x202797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d586db69acc08f54288edff4f9498f226daa7cc
        Validity
            Not Before: Jun 20 08:30:00 2023 GMT
            Not After : Jun 19 08:30:00 2025 GMT
        Subject: CN=c6aeb69cdb673b42269a32fab3453656d6be77e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:bd:1b:a2:eb:5f:9e:10:85:21:d8:4e:20:
                    29:51:a4:9c:6a:7d:32:98:cd:80:da:3f:77:bb:da:
                    05:b6:f1:dd:d1:f9:54:2a:0a:d3:37:62:82:3c:b1:
                    8e:b1:3d:89:e8:44:e3:3e:cb:41:d9:83:d2:ba:14:
                    95:f2:d5:31:ba:a0:70:4d:e6:3d:99:e7:7a:db:73:
                    ee:59:b6:20:d2:5f:9a:83:a1:3c:d3:8f:4b:c1:09:
                    ce:ba:70:ee:ed:6b:69:70:7c:b3:f2:ed:65:9d:17:
                    43:07:f1:d0:ae:78:37:0c:51:c7:68:22:a1:16:5c:
                    f6:ff:10:33:75:c0:5f:43:20:4f:50:fd:a5:47:1c:
                    5b:64:30:5a:dd:48:b4:29:04:b0:ee:2a:cd:14:30:
                    c1:26:65:aa:c7:f2:bf:02:ec:77:7a:8e:25:e7:25:
                    93:7d:d4:d2:35:ee:44:13:21:fd:ae:df:f4:03:1c:
                    dc:47:35:fd:35:aa:8a:f1:99:e3:fb:ba:42:a1:c0:
                    6e:08:4c:67:58:b1:3c:60:e1:a3:22:dc:14:b4:eb:
                    c1:ca:38:86:1b:86:68:9b:44:33:cb:32:ef:01:5e:
                    42:bf:73:da:e3:72:3e:97:15:84:91:eb:df:90:89:
                    6d:1e:e2:90:86:55:96:40:49:05:ac:19:5e:fb:b7:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:37:3C:ED:E0:ED:F0:43:FE:D5:3E:7D:62:03:D7:FD:58:3D:15
            X509v3 Authority Key Identifier:
                keyid:78:5A:06:46:66:21:9A:5F:38:33:E2:75:5C:7A:3D:08:4E:A7:23:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d586db69acc08f54288edff4f9498f226daa7cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/c6aeb69cdb673b42269a32fab3453656d6be77e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/9d586db69acc08f54288edff4f9498f226daa7cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:49:f5:35:b2:dd:eb:83:38:de:43:cc:aa:28:97:a8:00:
         ed:5e:c4:c9:71:a8:c2:3c:6f:87:d7:df:5a:78:8c:2e:c9:c8:
         c1:58:ed:59:a6:ce:b5:27:97:b3:e4:e8:f0:21:7a:70:bf:ae:
         ed:3c:7e:44:ae:2b:37:a4:4e:7a:5e:36:b8:ba:0a:ff:b1:1b:
         66:f4:3b:a1:9c:46:d2:71:36:9b:fe:fb:f4:55:af:47:68:27:
         37:d5:1c:4e:3a:84:c9:90:08:38:98:96:d1:41:7e:3b:52:52:
         96:5b:6a:7f:b0:b1:99:08:1d:06:09:d2:41:43:f5:cc:98:a1:
         f0:b5:1d:b9:f7:a6:81:ad:96:c5:42:cb:af:93:d6:3d:a4:c5:
         cb:11:54:59:01:66:78:fa:7a:98:96:cc:5d:7b:c0:ef:9f:17:
         fd:7a:70:56:2f:1a:e3:40:b0:22:7a:b7:6a:6d:c9:57:85:54:
         d1:ca:aa:2c:69:f0:31:80:c8:f2:9c:e7:3d:3d:b2:97:bc:c3:
         54:3d:73:00:58:9e:87:14:52:97:e5:fe:18:36:f6:09:e4:63:
         65:da:a1:4a:de:ec:cf:bb:1b:0c:bc:71:f8:11:4c:dc:e8:ac:
         e2:23:59:df:f8:01:a7:49:b7:93:3f:01:b5:d3:c2:bd:8b:bb:
         4c:cf:87:09
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDICeXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
NTg2ZGI2OWFjYzA4ZjU0Mjg4ZWRmZjRmOTQ5OGYyMjZkYWE3Y2MwHhcNMjMwNjIw
MDgzMDAwWhcNMjUwNjE5MDgzMDAwWjAzMTEwLwYDVQQDEyhjNmFlYjY5Y2RiNjcz
YjQyMjY5YTMyZmFiMzQ1MzY1NmQ2YmU3N2UxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwtu9G6LrX54QhSHYTiApUaScan0ymM2A2j93u9oFtvHd0flU
KgrTN2KCPLGOsT2J6ETjPstB2YPSuhSV8tUxuqBwTeY9med623PuWbYg0l+ag6E8
049LwQnOunDu7WtpcHyz8u1lnRdDB/HQrng3DFHHaCKhFlz2/xAzdcBfQyBPUP2l
RxxbZDBa3Ui0KQSw7irNFDDBJmWqx/K/Aux3eo4l5yWTfdTSNe5EEyH9rt/0Axzc
RzX9NaqK8Znj+7pCocBuCExnWLE8YOGjItwUtOvByjiGG4Zom0QzyzLvAV5Cv3Pa
43I+lxWEkevfkIltHuKQhlWWQEkFrBle+7cL1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAIaNzzt4O3wQ/7VPn1iA9f9WD0VMB8GA1UdIwQYMBaAFHhaBkZmIZpfODPi
dVx6PQhOpyN/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQ1ODZk
YjY5YWNjMDhmNTQyODhlZGZmNGY5NDk4ZjIyNmRhYTdjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTRiZjhlYzMtNjUzOS00MDI4LThiOWEtMGM3YmRl
OTU1Nzg5L2M2YWViNjljZGI2NzNiNDIyNjlhMzJmYWIzNDUzNjU2ZDZiZTc3ZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNGJmOGVjMy02NTM5LTQwMjgtOGI5YS0wYzdi
ZGU5NTU3ODkvOWQ1ODZkYjY5YWNjMDhmNTQyODhlZGZmNGY5NDk4ZjIyNmRhYTdj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2nqDANBgkqhkiG9w0BAQsFAAOCAQEAXdNJ9TWy3euDON5D
zKool6gA7V7EyXGowjxvh9ffWniMLsnIwVjtWabOtSeXs+To8CF6cL+u7Tx+RK4r
N6ROel42uLoK/7EbZvQ7oZxG0nE2m/779FWvR2gnN9UcTjqEyZAIOJiW0UF+O1JS
lltqf7CxmQgdBgnSQUP1zJih8LUdufemga2WxULLr5PWPaTFyxFUWQFmePp6mJbM
XXvA758X/XpwVi8a40CwInq3am3JV4VU0cqqLGnwMYDI8pznPT2yl7zDVD1zAFie
hxRSl+X+GDb2CeRjZdqhSt7sz7sbDLxx+BFM3Ois4iNZ3/gBp0m3kz8BtdPCvYu7
TM+HCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org