Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/8508610bb4afbd0c9dce58bd5c76fa0cf2eb59ba.roa
File:                     8508610bb4afbd0c9dce58bd5c76fa0cf2eb59ba.roa (raw, json)
Hash identifier:          lGccXBKnEK6aQmLTAbu0HseTCSleN6+qWfTUiiG60fs=
Subject key identifier:   EB:DF:08:DD:8C:6E:71:EF:D6:28:F2:70:7B:5E:76:E2:17:0D:D3:C1
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       0D003F
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/8508610bb4afbd0c9dce58bd5c76fa0cf2eb59ba.roa
Signing time:             Wed 24 Mar 2021 14:45:15 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     49453
IP address blocks:        45.227.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852031 (0xd003f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=8508610bb4afbd0c9dce58bd5c76fa0cf2eb59ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:6e:cd:6c:8b:35:a8:da:0e:4b:48:3d:de:
                    a0:8e:08:52:9f:9e:c7:6d:db:50:7c:b1:bf:35:ec:
                    07:6d:83:d8:8e:49:9b:2c:69:2d:8a:0d:0b:35:4a:
                    75:25:60:ac:fa:a3:40:9b:53:dd:46:c5:b9:64:73:
                    7f:5b:a2:a1:10:af:9d:ab:b0:b3:90:aa:0b:d8:e1:
                    29:cb:65:a6:53:f2:51:36:4e:0e:00:6a:56:99:e6:
                    15:eb:ef:60:e0:62:d0:02:5b:d2:3b:6c:bc:51:5b:
                    e6:fe:02:22:ed:58:81:97:b8:75:78:31:27:11:83:
                    54:c0:86:9e:c7:c7:1a:a5:e7:6d:06:64:bc:a0:7f:
                    33:52:06:d4:af:f5:fe:e0:9c:6e:f2:3e:0a:f4:fa:
                    80:da:9c:f6:2a:71:5c:74:5b:2b:14:cf:ac:d4:8d:
                    fa:69:23:af:3c:ea:4f:9d:3b:7e:cf:9a:3c:13:aa:
                    11:45:af:ed:b7:9d:75:ee:3d:b4:1d:4f:1c:08:58:
                    03:80:5d:25:43:6c:e6:5e:22:40:91:9d:66:80:5d:
                    03:94:15:2b:5b:45:a6:c1:3e:56:1b:0b:a5:d9:66:
                    6e:e7:c8:41:e7:4b:f6:d6:c3:47:1d:5c:5f:9b:32:
                    33:52:aa:57:86:be:02:cd:d0:6c:53:a0:d2:e5:89:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DF:08:DD:8C:6E:71:EF:D6:28:F2:70:7B:5E:76:E2:17:0D:D3:C1
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/8508610bb4afbd0c9dce58bd5c76fa0cf2eb59ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:0a:d1:cd:09:f5:ee:c6:a1:c7:6c:91:b1:1b:75:ef:ec:
         8e:e4:1f:2c:76:fd:8e:23:80:09:ae:bc:10:04:32:32:b5:b5:
         cf:f0:0a:ee:29:68:51:76:1b:82:43:bb:50:9e:e3:a3:7f:5d:
         a6:6c:18:19:59:9d:82:72:56:c2:9f:ae:34:25:a4:9d:ca:20:
         c6:69:43:e7:57:a6:3e:28:cc:47:4b:db:99:b6:a3:90:64:73:
         f0:f0:81:93:f1:51:da:75:ae:1c:f6:ab:37:35:9f:bb:04:1a:
         27:c5:1d:bf:c0:e3:95:e8:d1:55:12:b6:ab:11:da:c0:a6:cc:
         ce:a8:b0:0a:79:59:b2:ee:ff:9a:10:75:91:8b:3e:ba:ea:ec:
         e0:0e:8c:c2:94:ca:95:0a:09:d0:51:fd:02:cb:4c:f4:8d:b3:
         54:84:b5:68:a9:cd:88:07:70:5e:17:d1:22:9e:02:27:f1:e3:
         d1:a7:01:11:cc:7c:78:74:97:75:8b:1f:ab:c7:3f:d6:7d:7f:
         65:da:0d:28:57:1d:d9:74:a8:dc:f4:a5:94:98:ae:8a:55:1a:
         85:57:9d:19:c3:78:9b:f9:19:af:56:e0:d4:e3:2e:57:4b:2d:
         0f:79:18:1b:06:48:46:37:fa:46:c2:29:e6:56:3c:f9:1f:f5:
         ce:c0:29:d5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDQA/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
MDZlYWJkOTVkZWYzODI5ZGJkMThhZDNmOTQxNDVmNGYwNGE5YjcwHhcNMjEwMzI0
MTQ0NTE1WhcNMjYwMzI0MTQ0NTE1WjAzMTEwLwYDVQQDEyg4NTA4NjEwYmI0YWZi
ZDBjOWRjZTU4YmQ1Yzc2ZmEwY2YyZWI1OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2lVuzWyLNajaDktIPd6gjghSn57HbdtQfLG/NewHbYPYjkmb
LGktig0LNUp1JWCs+qNAm1PdRsW5ZHN/W6KhEK+dq7CzkKoL2OEpy2WmU/JRNk4O
AGpWmeYV6+9g4GLQAlvSO2y8UVvm/gIi7ViBl7h1eDEnEYNUwIaex8capedtBmS8
oH8zUgbUr/X+4Jxu8j4K9PqA2pz2KnFcdFsrFM+s1I36aSOvPOpPnTt+z5o8E6oR
Ra/tt5117j20HU8cCFgDgF0lQ2zmXiJAkZ1mgF0DlBUrW0WmwT5WGwul2WZu58hB
50v21sNHHVxfmzIzUqpXhr4CzdBsU6DS5YnZiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOvfCN2MbnHv1ijycHteduIXDdPBMB8GA1UdIwQYMBaAFFq3mMn9UwUeBofq
D/38MjOZGK02MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjkwNmVh
YmQ5NWRlZjM4MjlkYmQxOGFkM2Y5NDE0NWY0ZjA0YTliNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYThiYjAwNTktNzQ4Mi00ZTMyLWFmZjctY2YxNTVi
N2RmZmQ2Lzg1MDg2MTBiYjRhZmJkMGM5ZGNlNThiZDVjNzZmYTBjZjJlYjU5YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOGJiMDA1OS03NDgyLTRlMzItYWZmNy1jZjE1
NWI3ZGZmZDYvNjkwNmVhYmQ5NWRlZjM4MjlkYmQxOGFkM2Y5NDE0NWY0ZjA0YTli
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3j/TANBgkqhkiG9w0BAQsFAAOCAQEAGx0K0c0J9e7Gocds
kbEbde/sjuQfLHb9jiOACa68EAQyMrW1z/AK7iloUXYbgkO7UJ7jo39dpmwYGVmd
gnJWwp+uNCWkncogxmlD51emPijMR0vbmbajkGRz8PCBk/FR2nWuHParNzWfuwQa
J8Udv8DjlejRVRK2qxHawKbMzqiwCnlZsu7/mhB1kYs+uurs4A6MwpTKlQoJ0FH9
AstM9I2zVIS1aKnNiAdwXhfRIp4CJ/Hj0acBEcx8eHSXdYsfq8c/1n1/ZdoNKFcd
2XSo3PSllJiuilUahVedGcN4m/kZr1bg1OMuV0stD3kYGwZIRjf6RsIp5lY8+R/1
zsAp1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org