Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/cd7214328efb07dba865c14ecbbac8e5d2fc9432.roa
File:                     cd7214328efb07dba865c14ecbbac8e5d2fc9432.roa (raw, json)
Hash identifier:          RfMUHGHBUEeXllpXxpSu58SjbHkdDH3Ttl2rMpOfDhE=
Subject key identifier:   DC:43:6B:02:4F:4E:E6:AA:43:7F:11:A0:2F:6C:B9:2B:98:52:4A:51
Certificate issuer:       /CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Certificate serial:       0C2392
Authority key identifier: 18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/cd7214328efb07dba865c14ecbbac8e5d2fc9432.roa
Signing time:             Wed 24 Mar 2021 14:44:38 +0000
ROA not before:           Wed 24 Mar 2021 14:44:37 +0000
ROA not after:            Tue 24 Mar 2026 14:44:37 +0000
asID:                     23470
IP address blocks:        45.170.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795538 (0xc2392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Validity
            Not Before: Mar 24 14:44:37 2021 GMT
            Not After : Mar 24 14:44:37 2026 GMT
        Subject: CN=cd7214328efb07dba865c14ecbbac8e5d2fc9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:60:d9:4f:3b:18:29:67:77:87:b0:d2:76:
                    23:f1:20:58:51:75:5f:28:21:69:86:bd:d0:d6:c7:
                    a4:ca:13:4e:e7:b3:25:d3:08:6a:b7:58:a3:61:d5:
                    1d:3b:01:cf:d3:9e:f7:63:d2:d1:ba:ad:11:7f:5b:
                    4e:a2:59:41:98:4e:dc:54:04:41:f8:71:5e:df:48:
                    2d:1d:38:bf:a4:8c:0e:81:1d:5d:b3:99:4e:d7:ec:
                    6d:5b:7b:7b:2a:e8:e8:68:31:0b:f7:7a:f7:ac:46:
                    ff:46:03:09:59:a3:af:dc:e2:64:40:8a:e9:1a:1d:
                    4f:d9:23:7b:b7:0f:8f:e4:e4:4b:82:dd:7a:f2:10:
                    ab:60:b2:85:c9:9e:82:92:3b:75:93:1c:bf:c7:f6:
                    07:a0:5b:b2:31:4c:7a:96:3e:20:80:fc:72:98:8a:
                    66:b9:57:a0:b1:bd:6b:a0:da:87:c9:79:54:3e:d4:
                    6e:00:40:a2:0e:03:3e:d6:fc:88:6f:0e:26:d5:02:
                    ac:f8:d9:88:7c:20:d0:e2:c8:b5:67:41:c3:86:a4:
                    56:49:82:73:1a:79:c6:51:19:3d:e6:42:6a:ec:1b:
                    cc:89:e4:b1:b7:12:4c:e0:d8:af:95:f9:88:15:c1:
                    46:01:c4:73:69:a4:3e:ce:94:08:91:06:58:3a:f9:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:6B:02:4F:4E:E6:AA:43:7F:11:A0:2F:6C:B9:2B:98:52:4A:51
            X509v3 Authority Key Identifier:
                keyid:18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/cd7214328efb07dba865c14ecbbac8e5d2fc9432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:0d:5a:e7:c7:19:4b:8e:08:4f:37:08:75:6e:0e:d6:43:
         5e:08:e6:63:25:a0:8b:8a:9d:72:94:7e:22:6f:a5:c9:c6:4c:
         d8:cb:ce:23:56:ce:5d:09:f7:fd:ea:02:91:fe:d1:08:03:6c:
         bc:89:bb:40:85:e6:ce:1e:20:e7:6b:b4:d0:54:46:d2:d0:d2:
         e3:be:46:fd:ad:f5:32:88:f8:67:4d:40:78:81:17:7f:dc:81:
         88:94:69:83:3b:4a:22:f2:95:6f:4e:e0:68:86:50:b3:ad:15:
         04:d5:0f:5d:dc:75:34:06:ee:de:42:47:f9:dd:f8:7b:a1:1c:
         69:4f:d9:cb:38:59:a0:57:a7:a2:b5:a8:16:99:c2:df:8b:40:
         97:71:91:6e:5a:35:0f:ea:a0:88:f3:b5:d1:65:49:0c:0f:7a:
         3a:ee:aa:b3:0f:ca:a8:bd:ff:d9:47:b9:ae:ee:21:0c:0a:40:
         1a:f8:0e:53:9f:77:50:7c:92:57:13:10:ef:de:4f:7f:32:16:
         5b:e7:4a:d1:01:25:21:3c:d7:28:93:22:3b:51:cf:f9:d6:49:
         37:5e:66:e4:49:8f:f2:c1:60:f3:1d:3c:e8:d5:26:c2:e8:43:
         9f:53:74:ab:07:71:f8:ae:2e:8d:56:c7:f0:34:cf:19:ab:f7:
         07:b5:27:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDCOSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
NGIzZDU4MGUwN2Y4NGVkYzg3YmVmZThiMjlkNGUyM2FjODcyNTgwHhcNMjEwMzI0
MTQ0NDM3WhcNMjYwMzI0MTQ0NDM3WjAzMTEwLwYDVQQDEyhjZDcyMTQzMjhlZmIw
N2RiYTg2NWMxNGVjYmJhYzhlNWQyZmM5NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArbZg2U87GClnd4ew0nYj8SBYUXVfKCFphr3Q1sekyhNO57Ml
0whqt1ijYdUdOwHP0573Y9LRuq0Rf1tOollBmE7cVARB+HFe30gtHTi/pIwOgR1d
s5lO1+xtW3t7KujoaDEL93r3rEb/RgMJWaOv3OJkQIrpGh1P2SN7tw+P5ORLgt16
8hCrYLKFyZ6Ckjt1kxy/x/YHoFuyMUx6lj4ggPxymIpmuVegsb1roNqHyXlUPtRu
AECiDgM+1vyIbw4m1QKs+NmIfCDQ4si1Z0HDhqRWSYJzGnnGURk95kJq7BvMieSx
txJM4NivlfmIFcFGAcRzaaQ+zpQIkQZYOvndxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNxDawJPTuaqQ38RoC9suSuYUkpRMB8GA1UdIwQYMBaAFBixV4KoRfgywbQw
wITcpK8sbOBaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjk0YjNk
NTgwZTA3Zjg0ZWRjODdiZWZlOGIyOWQ0ZTIzYWM4NzI1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTgxYjVkZWUtNWRmZS00M2VhLTgwYmYtNWMzZmYx
YWUzYzU1L2NkNzIxNDMyOGVmYjA3ZGJhODY1YzE0ZWNiYmFjOGU1ZDJmYzk0MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hODFiNWRlZS01ZGZlLTQzZWEtODBiZi01YzNm
ZjFhZTNjNTUvNjk0YjNkNTgwZTA3Zjg0ZWRjODdiZWZlOGIyOWQ0ZTIzYWM4NzI1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2q9zANBgkqhkiG9w0BAQsFAAOCAQEALxUNWufHGUuOCE83
CHVuDtZDXgjmYyWgi4qdcpR+Im+lycZM2MvOI1bOXQn3/eoCkf7RCANsvIm7QIXm
zh4g52u00FRG0tDS475G/a31Moj4Z01AeIEXf9yBiJRpgztKIvKVb07gaIZQs60V
BNUPXdx1NAbu3kJH+d34e6EcaU/ZyzhZoFenorWoFpnC34tAl3GRblo1D+qgiPO1
0WVJDA96Ou6qsw/KqL3/2Ue5ru4hDApAGvgOU593UHySVxMQ795PfzIWW+dK0QEl
ITzXKJMiO1HP+dZJN15m5EmP8sFg8x086NUmwuhDn1N0qwdx+K4ujVbH8DTPGav3
B7Un1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org