Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/0e964b34836ea2f5a9f68a496cc8ed1d9da0dda3.roa
File:                     0e964b34836ea2f5a9f68a496cc8ed1d9da0dda3.roa (raw, json)
Hash identifier:          mkYsXbYg16pnXuWaeaGC8+pqCsrGu8L1HPOXuQhUDqo=
Subject key identifier:   5C:8B:8B:6A:9C:E8:DC:78:83:9B:57:CF:DC:C9:B4:54:F8:66:2C:89
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       186637
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/0e964b34836ea2f5a9f68a496cc8ed1d9da0dda3.roa
Signing time:             Mon 04 Jul 2022 13:40:00 +0000
ROA not before:           Mon 04 Jul 2022 03:00:00 +0000
ROA not after:            Thu 04 Jul 2024 03:00:00 +0000
asID:                     209272
IP address blocks:        45.227.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599031 (0x186637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Jul  4 03:00:00 2022 GMT
            Not After : Jul  4 03:00:00 2024 GMT
        Subject: CN=0e964b34836ea2f5a9f68a496cc8ed1d9da0dda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:b9:9c:64:ea:05:eb:6e:92:fd:cc:48:95:
                    69:42:bc:af:bf:e2:63:47:0e:62:c5:19:e4:7d:3a:
                    c0:a5:23:ca:f2:70:c4:17:de:d9:d4:6a:b1:85:ec:
                    aa:4e:c9:3f:c0:a7:d8:c7:0e:d2:4b:62:71:f6:fa:
                    55:87:67:fd:ed:32:d7:3f:28:9a:37:e7:df:d1:89:
                    5f:6d:9e:48:7d:f3:fb:fa:5a:b1:28:87:93:a1:ff:
                    46:08:11:5a:43:aa:39:fb:06:f1:59:6f:ea:ee:89:
                    ca:07:e1:86:fb:0e:f0:3a:29:8f:13:76:60:d3:9d:
                    ed:ef:d0:3b:5a:85:86:8e:24:c6:3c:f4:9c:b1:79:
                    cb:71:74:3c:2a:82:ea:4b:b7:26:71:3b:bd:2f:19:
                    27:73:45:c0:6b:7c:03:62:56:75:77:7e:f2:c4:32:
                    49:d7:f7:a8:ff:6d:c1:b1:61:d1:d4:8d:c9:44:88:
                    56:10:c9:ce:82:a7:dd:0e:bf:8a:ed:47:3b:ed:d3:
                    b1:a5:f0:fb:57:3a:45:4a:59:6e:1b:72:e6:3b:95:
                    80:f6:c5:d4:44:52:71:a1:77:a2:68:c3:ff:18:32:
                    f7:95:83:aa:f9:f0:9a:0a:59:36:c8:b9:39:e1:aa:
                    f0:74:ef:11:78:a6:f8:1c:15:25:95:41:32:f8:55:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:8B:6A:9C:E8:DC:78:83:9B:57:CF:DC:C9:B4:54:F8:66:2C:89
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/0e964b34836ea2f5a9f68a496cc8ed1d9da0dda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:7f:23:f4:6d:c0:f5:c4:5b:d6:00:8f:c3:45:9d:bf:ea:
         f8:1f:2a:58:24:62:63:3e:67:64:ac:07:68:13:72:e9:15:40:
         3f:b2:25:dc:b7:fb:e3:db:af:94:a2:ac:86:2a:ad:ef:05:e6:
         2e:92:e4:86:51:41:d8:07:e4:f3:31:c3:c4:1b:31:0f:18:0e:
         01:bc:cc:9c:9c:8a:ef:54:65:2c:97:c5:a7:41:8a:9c:44:8d:
         e0:65:23:13:d5:ad:b0:99:ea:9a:6f:80:32:20:fa:8e:f8:34:
         d6:cb:7d:37:2a:c5:f6:f5:f7:6d:2c:55:d9:84:4b:73:3a:c6:
         63:da:62:d8:b2:c1:ce:de:19:9e:68:1e:f3:c8:5c:a0:28:87:
         47:b0:31:73:dc:e9:5a:ef:9d:57:f5:76:64:7f:54:02:e3:a8:
         9e:80:15:3a:8c:12:c8:75:66:a2:bf:85:78:1b:a2:b2:6b:e1:
         03:ef:d9:3a:2a:24:14:40:48:bf:90:22:0d:1d:bd:d3:c3:d5:
         36:c5:5b:a6:4d:58:c9:05:a1:c4:c4:56:05:2b:58:ea:7a:ce:
         df:2a:26:91:89:1f:b0:2f:a6:bd:30:a3:c2:64:f2:82:87:2b:
         bb:36:f7:b0:2e:17:19:a1:b1:36:0e:3a:e9:e5:50:61:ed:45:
         38:b3:af:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGGY3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
MDZlYWJkOTVkZWYzODI5ZGJkMThhZDNmOTQxNDVmNGYwNGE5YjcwHhcNMjIwNzA0
MDMwMDAwWhcNMjQwNzA0MDMwMDAwWjAzMTEwLwYDVQQDEygwZTk2NGIzNDgzNmVh
MmY1YTlmNjhhNDk2Y2M4ZWQxZDlkYTBkZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqia5nGTqBetukv3MSJVpQryvv+JjRw5ixRnkfTrApSPK8nDE
F97Z1GqxheyqTsk/wKfYxw7SS2Jx9vpVh2f97TLXPyiaN+ff0YlfbZ5IffP7+lqx
KIeTof9GCBFaQ6o5+wbxWW/q7onKB+GG+w7wOimPE3Zg053t79A7WoWGjiTGPPSc
sXnLcXQ8KoLqS7cmcTu9Lxknc0XAa3wDYlZ1d37yxDJJ1/eo/23BsWHR1I3JRIhW
EMnOgqfdDr+K7Uc77dOxpfD7VzpFSlluG3LmO5WA9sXURFJxoXeiaMP/GDL3lYOq
+fCaClk2yLk54arwdO8ReKb4HBUllUEy+FVUrQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFyLi2qc6Nx4g5tXz9zJtFT4ZiyJMB8GA1UdIwQYMBaAFFq3mMn9UwUeBofq
D/38MjOZGK02MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjkwNmVh
YmQ5NWRlZjM4MjlkYmQxOGFkM2Y5NDE0NWY0ZjA0YTliNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYThiYjAwNTktNzQ4Mi00ZTMyLWFmZjctY2YxNTVi
N2RmZmQ2LzBlOTY0YjM0ODM2ZWEyZjVhOWY2OGE0OTZjYzhlZDFkOWRhMGRkYTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOGJiMDA1OS03NDgyLTRlMzItYWZmNy1jZjE1
NWI3ZGZmZDYvNjkwNmVhYmQ5NWRlZjM4MjlkYmQxOGFkM2Y5NDE0NWY0ZjA0YTli
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3j/DANBgkqhkiG9w0BAQsFAAOCAQEAQS1/I/RtwPXEW9YA
j8NFnb/q+B8qWCRiYz5nZKwHaBNy6RVAP7Il3Lf749uvlKKshiqt7wXmLpLkhlFB
2Afk8zHDxBsxDxgOAbzMnJyK71RlLJfFp0GKnESN4GUjE9WtsJnqmm+AMiD6jvg0
1st9NyrF9vX3bSxV2YRLczrGY9pi2LLBzt4Znmge88hcoCiHR7Axc9zpWu+dV/V2
ZH9UAuOonoAVOowSyHVmor+FeBuismvhA+/ZOiokFEBIv5AiDR2908PVNsVbpk1Y
yQWhxMRWBStY6nrO3yomkYkfsC+mvTCjwmTygocruzb3sC4XGaGxNg466eVQYe1F
OLOvug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org