Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/10715e31dc6c8306f40a7c8f8303bb00203c5219.roa
File:                     10715e31dc6c8306f40a7c8f8303bb00203c5219.roa (raw, json)
Hash identifier:          ziw/9z3EHkzfr7jSITTRad3EXVrsDZNDVBbcP5w4Zps=
Subject key identifier:   51:AE:53:B5:A5:FB:CD:C6:D7:85:EF:BD:D5:3E:40:95:D9:40:EF:39
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       21E1C5
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/10715e31dc6c8306f40a7c8f8303bb00203c5219.roa
Signing time:             Tue 19 Sep 2023 03:42:24 +0000
ROA not before:           Mon 18 Sep 2023 03:42:23 +0000
ROA not after:            Fri 19 Sep 2025 03:42:23 +0000
asID:                     3816
IP address blocks:        45.173.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220485 (0x21e1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Sep 18 03:42:23 2023 GMT
            Not After : Sep 19 03:42:23 2025 GMT
        Subject: CN=10715e31dc6c8306f40a7c8f8303bb00203c5219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:bd:d5:7d:8e:9f:76:2b:e6:8e:fb:70:d4:
                    9f:8e:3d:71:7d:e6:3f:7e:a5:f0:73:c0:4d:b0:ca:
                    2e:de:4f:94:c7:a4:56:77:77:d1:76:d6:b5:af:02:
                    7d:aa:05:0e:9d:45:8d:7b:57:14:19:04:51:33:69:
                    2f:a4:d7:c9:3c:5b:b3:de:0c:ed:34:c6:91:f8:5b:
                    85:37:66:d2:88:eb:e5:de:02:a1:91:fb:12:33:18:
                    a8:5a:58:9c:ea:9c:3a:c8:aa:e9:8f:96:41:89:69:
                    d0:15:a1:78:a5:be:64:eb:73:bf:1f:37:4f:c2:25:
                    4a:88:3d:ef:61:4a:db:78:72:67:25:64:cc:f9:b6:
                    3c:00:11:56:a8:26:b8:aa:9f:f3:37:cf:e3:7b:c5:
                    40:1f:1b:02:e5:0b:33:d1:59:67:88:32:27:53:92:
                    ff:03:1a:64:3a:da:e3:28:61:6e:8d:e1:d2:4d:cb:
                    01:8c:ea:42:47:37:8d:cd:de:00:30:79:c6:e0:a5:
                    35:f3:28:e6:5f:8c:9b:3d:72:8a:8c:e2:15:72:b1:
                    fe:b4:4d:fe:a6:a6:2c:4a:91:ae:07:ac:04:e2:06:
                    8b:93:b4:06:a4:11:70:bc:f1:b8:17:90:8c:4a:c3:
                    d5:ef:70:27:59:4d:0b:f5:54:cc:99:b1:34:27:08:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:53:B5:A5:FB:CD:C6:D7:85:EF:BD:D5:3E:40:95:D9:40:EF:39
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/10715e31dc6c8306f40a7c8f8303bb00203c5219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:41:1a:56:e3:a6:d7:cb:8d:c0:5a:e1:4a:b2:cf:0f:fa:67:
         ff:34:7a:7e:e9:2a:6a:66:cf:76:35:d1:1f:55:9b:b0:ac:4f:
         98:fa:fe:2e:c0:7d:e9:60:35:82:66:37:75:38:f6:6c:7b:af:
         12:93:00:a9:c2:34:d0:68:f7:f5:ad:56:03:59:a3:54:44:64:
         d2:8c:d0:d0:9e:d2:bf:af:20:23:f2:d1:44:4d:3b:87:07:3f:
         3b:0b:c9:90:b5:82:da:ba:9d:1b:b6:ec:fa:c7:fa:28:60:34:
         e3:b2:20:9e:6f:92:19:26:9a:56:c4:16:54:e8:be:42:34:3c:
         4e:3d:32:54:8c:8f:24:53:fe:15:1e:5b:99:d8:55:85:97:8b:
         e5:85:bf:4f:79:26:b8:f3:9d:1d:fb:be:f9:8d:95:f0:4e:ea:
         d0:48:ee:e6:6a:d1:c4:ea:63:e2:f2:2c:40:45:32:74:77:21:
         5b:97:59:72:81:5e:b8:44:03:78:17:bd:b5:8e:dc:bd:f9:8a:
         77:8b:b9:85:a3:07:64:f0:8d:26:6b:32:ab:81:d2:54:16:0b:
         74:b6:22:a8:a7:d1:b3:60:a6:53:25:75:26:1d:c5:ff:31:0d:
         bb:e2:b8:f0:85:2c:19:91:a2:ee:1e:b2:b7:05:a1:a3:e4:85:
         ce:09:c4:6b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIeHFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUy
MzZmZTVmODg0ZjY3ZjJkYjE0NzZkYjJmM2JkOWVlMDgwNWZkMmQwHhcNMjMwOTE4
MDM0MjIzWhcNMjUwOTE5MDM0MjIzWjAzMTEwLwYDVQQDEygxMDcxNWUzMWRjNmM4
MzA2ZjQwYTdjOGY4MzAzYmIwMDIwM2M1MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzdu91X2On3Yr5o77cNSfjj1xfeY/fqXwc8BNsMou3k+Ux6RW
d3fRdta1rwJ9qgUOnUWNe1cUGQRRM2kvpNfJPFuz3gztNMaR+FuFN2bSiOvl3gKh
kfsSMxioWlic6pw6yKrpj5ZBiWnQFaF4pb5k63O/HzdPwiVKiD3vYUrbeHJnJWTM
+bY8ABFWqCa4qp/zN8/je8VAHxsC5Qsz0VlniDInU5L/AxpkOtrjKGFujeHSTcsB
jOpCRzeNzd4AMHnG4KU18yjmX4ybPXKKjOIVcrH+tE3+pqYsSpGuB6wE4gaLk7QG
pBFwvPG4F5CMSsPV73AnWU0L9VTMmbE0Jwh0pQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFGuU7Wl+83G14XvvdU+QJXZQO85MB8GA1UdIwQYMBaAFJVrCT80wPTM0cqQ
0K+T36CGudaRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTIzNmZl
NWY4ODRmNjdmMmRiMTQ3NmRiMmYzYmQ5ZWUwODA1ZmQyZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYThiYzRjZTItNjFmNy00OWJhLTkyNGEtZWI0ZmNk
NmUwZjFmLzEwNzE1ZTMxZGM2YzgzMDZmNDBhN2M4ZjgzMDNiYjAwMjAzYzUyMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOGJjNGNlMi02MWY3LTQ5YmEtOTI0YS1lYjRm
Y2Q2ZTBmMWYvZTIzNmZlNWY4ODRmNjdmMmRiMTQ3NmRiMmYzYmQ5ZWUwODA1ZmQy
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2tLDANBgkqhkiG9w0BAQsFAAOCAQEAcUEaVuOm18uNwFrh
SrLPD/pn/zR6fukqambPdjXRH1WbsKxPmPr+LsB96WA1gmY3dTj2bHuvEpMAqcI0
0Gj39a1WA1mjVERk0ozQ0J7Sv68gI/LRRE07hwc/OwvJkLWC2rqdG7bs+sf6KGA0
47Ignm+SGSaaVsQWVOi+QjQ8Tj0yVIyPJFP+FR5bmdhVhZeL5YW/T3kmuPOdHfu+
+Y2V8E7q0Eju5mrRxOpj4vIsQEUydHchW5dZcoFeuEQDeBe9tY7cvfmKd4u5haMH
ZPCNJmsyq4HSVBYLdLYiqKfRs2CmUyV1Jh3F/zENu+K48IUsGZGi7h6ytwWho+SF
zgnEaw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org