Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/dd4f4aab44f7d2af20621b62946b43359b8ef39c.roa
File:                     dd4f4aab44f7d2af20621b62946b43359b8ef39c.roa (raw, json)
Hash identifier:          W37S3vIUCQ4qSv53VHDQx4sE1SyMLeIx+X2eZkO8P9I=
Subject key identifier:   60:08:97:61:01:43:4F:3A:75:74:D3:E0:9F:8B:DA:A8:45:2E:DB:91
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       0D02F5
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/dd4f4aab44f7d2af20621b62946b43359b8ef39c.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     267784
IP address blocks:        45.227.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852725 (0xd02f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=dd4f4aab44f7d2af20621b62946b43359b8ef39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:ec:80:22:7f:d0:e4:7d:b6:5c:6a:80:8d:
                    76:1c:84:ef:57:19:24:81:bf:dc:06:71:4b:f1:9c:
                    45:36:7b:b1:93:1a:b9:51:9e:7f:61:4e:e7:ce:78:
                    cd:83:ea:83:23:3d:a3:5f:f9:69:ad:7f:7d:ee:f6:
                    e8:f3:3c:cc:51:81:88:75:58:78:d5:27:59:a8:42:
                    60:54:c1:9e:e8:dc:4a:22:bb:42:5f:51:9b:98:35:
                    4b:40:bd:fc:eb:7c:cc:a1:eb:06:9e:83:10:0f:3d:
                    61:3b:1e:5e:62:62:10:69:9e:d5:b6:d4:1d:f1:38:
                    2e:10:95:ea:6c:b0:f5:ab:bf:fe:04:73:30:e3:72:
                    47:dc:6f:27:5e:04:38:b6:e5:82:64:b3:e9:3c:c0:
                    6c:85:10:5c:38:37:70:44:a4:cc:01:07:4a:93:7a:
                    3a:15:7c:2c:75:0e:b1:b8:60:eb:42:2a:e5:c3:f0:
                    39:ae:8f:c8:0f:61:bd:76:12:da:af:2a:ab:a2:9d:
                    58:b2:48:79:c7:c5:61:ab:5c:af:dc:ce:1d:4b:87:
                    2f:e0:20:9e:e2:a8:12:9e:b7:63:9e:d3:ad:96:7a:
                    68:f4:92:a8:67:a5:ed:38:a7:5c:7a:e5:4f:e4:96:
                    60:f8:6e:34:e9:3e:39:0c:ee:7a:15:f7:0f:de:0b:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:97:61:01:43:4F:3A:75:74:D3:E0:9F:8B:DA:A8:45:2E:DB:91
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/dd4f4aab44f7d2af20621b62946b43359b8ef39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:08:2f:5a:e2:67:07:29:83:2f:7f:78:78:6e:3c:bc:89:2a:
         1e:fa:b4:05:91:2a:f6:51:57:b4:3a:09:a7:44:8d:47:8c:ad:
         b5:20:cf:77:04:0c:72:41:07:8b:1b:f5:fd:b2:5c:6e:6b:50:
         ec:13:d6:06:24:2f:8b:01:55:1a:95:36:f1:b2:98:8b:7f:24:
         a0:85:41:b1:b1:d4:22:bc:43:b2:c1:e5:62:c0:c5:83:99:1c:
         c2:56:0e:41:e6:f9:d5:e0:1f:51:7b:40:2d:11:c1:59:ae:6c:
         72:28:f6:ba:b1:d7:ac:83:0f:c2:28:72:25:c2:ca:c5:09:35:
         ca:93:90:04:39:b5:03:a3:30:fb:d2:a6:93:72:51:c1:cf:e3:
         10:89:75:9b:47:03:57:ad:16:d0:61:a6:8f:ba:ba:6b:38:a0:
         58:4c:2c:db:7e:da:3c:ec:c5:f5:a7:87:ed:74:41:56:ee:e6:
         b5:57:a0:5b:59:7b:df:1e:66:95:d0:70:c2:9a:40:67:b3:8e:
         51:5e:51:32:70:e3:c3:80:91:b4:79:93:c4:f8:85:30:e3:e5:
         95:0b:50:44:4c:8e:44:7a:01:2a:eb:f7:4d:41:cd:9d:13:28:
         2d:0d:e8:62:17:c7:ba:ff:ad:83:44:fc:6f:c5:58:ed:9c:97:
         6d:7f:3c:a8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDQL1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
MDZlYWJkOTVkZWYzODI5ZGJkMThhZDNmOTQxNDVmNGYwNGE5YjcwHhcNMjEwMzI0
MTQ0NTE1WhcNMjYwMzI0MTQ0NTE1WjAzMTEwLwYDVQQDEyhkZDRmNGFhYjQ0Zjdk
MmFmMjA2MjFiNjI5NDZiNDMzNTliOGVmMzljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkNTsgCJ/0OR9tlxqgI12HITvVxkkgb/cBnFL8ZxFNnuxkxq5
UZ5/YU7nznjNg+qDIz2jX/lprX997vbo8zzMUYGIdVh41SdZqEJgVMGe6NxKIrtC
X1GbmDVLQL3863zMoesGnoMQDz1hOx5eYmIQaZ7VttQd8TguEJXqbLD1q7/+BHMw
43JH3G8nXgQ4tuWCZLPpPMBshRBcODdwRKTMAQdKk3o6FXwsdQ6xuGDrQirlw/A5
ro/ID2G9dhLaryqrop1Yskh5x8Vhq1yv3M4dS4cv4CCe4qgSnrdjntOtlnpo9JKo
Z6XtOKdceuVP5JZg+G406T45DO56FfcP3gu3BwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGAIl2EBQ086dXTT4J+L2qhFLtuRMB8GA1UdIwQYMBaAFFq3mMn9UwUeBofq
D/38MjOZGK02MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjkwNmVh
YmQ5NWRlZjM4MjlkYmQxOGFkM2Y5NDE0NWY0ZjA0YTliNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYThiYjAwNTktNzQ4Mi00ZTMyLWFmZjctY2YxNTVi
N2RmZmQ2L2RkNGY0YWFiNDRmN2QyYWYyMDYyMWI2Mjk0NmI0MzM1OWI4ZWYzOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOGJiMDA1OS03NDgyLTRlMzItYWZmNy1jZjE1
NWI3ZGZmZDYvNjkwNmVhYmQ5NWRlZjM4MjlkYmQxOGFkM2Y5NDE0NWY0ZjA0YTli
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3j/jANBgkqhkiG9w0BAQsFAAOCAQEAdwgvWuJnBymDL394
eG48vIkqHvq0BZEq9lFXtDoJp0SNR4yttSDPdwQMckEHixv1/bJcbmtQ7BPWBiQv
iwFVGpU28bKYi38koIVBsbHUIrxDssHlYsDFg5kcwlYOQeb51eAfUXtALRHBWa5s
cij2urHXrIMPwihyJcLKxQk1ypOQBDm1A6Mw+9Kmk3JRwc/jEIl1m0cDV60W0GGm
j7q6azigWEws237aPOzF9aeH7XRBVu7mtVegW1l73x5mldBwwppAZ7OOUV5RMnDj
w4CRtHmTxPiFMOPllQtQREyORHoBKuv3TUHNnRMoLQ3oYhfHuv+tg0T8b8VY7ZyX
bX88qA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org