Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/765f7ad5cd5f439073aeeab182b5a22f82363590.roa
File:                     765f7ad5cd5f439073aeeab182b5a22f82363590.roa (raw, json)
Hash identifier:          uSqOvIHPhWeG79xszUnK3ldzMYJTUI0mQ557Kp8kW2A=
Subject key identifier:   A6:19:58:6A:09:A7:A4:10:D1:32:C8:6C:11:FD:CD:02:A4:1A:78:D3
Certificate issuer:       /CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
Certificate serial:       0D0951
Authority key identifier: 04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/765f7ad5cd5f439073aeeab182b5a22f82363590.roa
Signing time:             Wed 24 Mar 2021 14:40:33 +0000
ROA not before:           Wed 24 Mar 2021 14:40:32 +0000
ROA not after:            Tue 24 Mar 2026 14:40:32 +0000
asID:                     27947
IP address blocks:        45.224.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854353 (0xd0951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
        Validity
            Not Before: Mar 24 14:40:32 2021 GMT
            Not After : Mar 24 14:40:32 2026 GMT
        Subject: CN=765f7ad5cd5f439073aeeab182b5a22f82363590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:d2:d6:b2:8a:2f:9c:21:4b:92:3a:20:be:
                    f6:52:7e:a5:66:98:09:96:2e:34:90:e9:29:ff:ce:
                    17:ca:04:75:21:ed:67:73:41:a0:0c:8a:2d:3b:46:
                    a1:2d:e7:8e:c9:68:d3:dc:39:02:15:01:df:41:82:
                    8a:cd:b1:5e:7d:c2:a8:55:0c:d4:11:b0:45:77:80:
                    30:20:1b:73:14:0a:a4:b8:fe:65:9d:3c:0a:02:83:
                    ee:9d:ab:23:22:54:59:3d:e3:10:a6:09:e4:5e:6e:
                    0d:4e:25:c8:a4:f8:fb:ea:67:52:52:26:a1:f6:5c:
                    60:7f:18:33:d3:18:d5:2c:f0:fa:24:62:b2:fe:25:
                    62:cd:06:b6:d4:25:5d:53:d8:c8:f0:bf:b2:d8:69:
                    71:46:7f:cc:7e:96:56:d6:8f:26:73:a6:ab:76:85:
                    02:b9:3b:3a:eb:0c:d1:f5:22:0b:f9:1d:f3:d9:9d:
                    fc:93:8a:49:15:e4:8c:b0:37:4b:53:5b:cd:e0:94:
                    a0:a4:72:5a:af:ce:86:01:47:cd:78:02:1a:7c:d4:
                    06:5c:9d:35:44:d3:46:f3:9a:27:6d:72:16:90:90:
                    13:54:89:9e:54:32:a6:17:49:d1:e6:42:84:fb:02:
                    b9:7d:f2:c5:b1:db:ec:2c:c3:b7:e3:f9:45:30:34:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:19:58:6A:09:A7:A4:10:D1:32:C8:6C:11:FD:CD:02:A4:1A:78:D3
            X509v3 Authority Key Identifier:
                keyid:04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/765f7ad5cd5f439073aeeab182b5a22f82363590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:3b:bb:af:0d:6c:2f:57:bd:f8:f8:53:7c:ce:a0:e3:c7:
         21:b3:47:fd:67:a6:f7:19:46:7e:4e:ed:f9:0f:1f:e8:7a:9b:
         8d:2b:e4:1b:44:ef:2b:42:a0:30:e2:2b:64:16:06:ca:a3:5a:
         1b:3f:0e:97:8c:42:ea:5e:6d:b3:c8:0e:f2:30:ed:87:6f:41:
         44:1b:9c:0d:8b:1b:4f:a6:9e:b5:72:38:a7:bb:ad:72:1d:69:
         f2:0a:35:b4:8c:c3:9a:50:99:9a:8c:64:e0:a1:f5:59:ed:42:
         bc:ee:b6:38:78:03:d8:06:f2:39:35:35:ac:90:c4:75:bf:1d:
         84:6f:9c:59:21:0d:85:45:fd:7a:12:bc:92:a9:88:f2:ac:b5:
         7c:59:5e:f7:ae:f0:9e:2e:29:f5:b8:9e:ae:e9:24:67:00:de:
         b7:55:7d:44:f5:a2:17:05:a2:00:2e:04:c4:b3:56:31:fc:2c:
         4c:23:a1:c3:17:db:eb:0c:28:fd:b2:b2:e5:71:06:9b:bc:d7:
         23:34:33:6d:d4:af:0f:14:e4:be:f2:31:da:ad:d9:c9:b6:6c:
         d7:61:98:fe:34:73:82:66:e1:54:00:5a:78:1d:b7:37:37:5f:
         b6:8b:a5:ef:a3:cb:ab:fb:c2:2b:67:e5:37:87:e3:d2:39:b7:
         02:bc:cf:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDQlRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
MDNkNjMzZTdhMmI2N2Q2MTVhZGJiMWQ5NTFlOWQxZWFhMjlkYWEwHhcNMjEwMzI0
MTQ0MDMyWhcNMjYwMzI0MTQ0MDMyWjAzMTEwLwYDVQQDEyg3NjVmN2FkNWNkNWY0
MzkwNzNhZWVhYjE4MmI1YTIyZjgyMzYzNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAke3S1rKKL5whS5I6IL72Un6lZpgJli40kOkp/84XygR1Ie1n
c0GgDIotO0ahLeeOyWjT3DkCFQHfQYKKzbFefcKoVQzUEbBFd4AwIBtzFAqkuP5l
nTwKAoPunasjIlRZPeMQpgnkXm4NTiXIpPj76mdSUiah9lxgfxgz0xjVLPD6JGKy
/iVizQa21CVdU9jI8L+y2GlxRn/MfpZW1o8mc6ardoUCuTs66wzR9SIL+R3z2Z38
k4pJFeSMsDdLU1vN4JSgpHJar86GAUfNeAIafNQGXJ01RNNG85onbXIWkJATVIme
VDKmF0nR5kKE+wK5ffLFsdvsLMO34/lFMDT27QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKYZWGoJp6QQ0TLIbBH9zQKkGnjTMB8GA1UdIwQYMBaAFARBT4bxJSSiH8HS
Bben+ORQ65DcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDcwM2Q2
MzNlN2EyYjY3ZDYxNWFkYmIxZDk1MWU5ZDFlYWEyOWRhYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTkyYjMwMTItYWQ1OS00YWFlLTg3NzctNGU2YWZm
MWEyMTY2Lzc2NWY3YWQ1Y2Q1ZjQzOTA3M2FlZWFiMTgyYjVhMjJmODIzNjM1OTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOTJiMzAxMi1hZDU5LTRhYWUtODc3Ny00ZTZh
ZmYxYTIxNjYvNDcwM2Q2MzNlN2EyYjY3ZDYxNWFkYmIxZDk1MWU5ZDFlYWEyOWRh
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3gYjANBgkqhkiG9w0BAQsFAAOCAQEAgSw7u68NbC9Xvfj4
U3zOoOPHIbNH/Wem9xlGfk7t+Q8f6HqbjSvkG0TvK0KgMOIrZBYGyqNaGz8Ol4xC
6l5ts8gO8jDth29BRBucDYsbT6aetXI4p7utch1p8go1tIzDmlCZmoxk4KH1We1C
vO62OHgD2AbyOTU1rJDEdb8dhG+cWSENhUX9ehK8kqmI8qy1fFle967wni4p9bie
rukkZwDet1V9RPWiFwWiAC4ExLNWMfwsTCOhwxfb6wwo/bKy5XEGm7zXIzQzbdSv
DxTkvvIx2q3ZybZs12GY/jRzgmbhVABaeB23Nzdftoul76PLq/vCK2flN4fj0jm3
ArzPHw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org