Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/727ae46b034cbeae1c4df2f8b4055b5d245518b5.roa
File:                     727ae46b034cbeae1c4df2f8b4055b5d245518b5.roa (raw, json)
Hash identifier:          uHxaOSL8x6wFGPTzgvWc2CTAveOvQlmBaK0lTsVg9+Y=
Subject key identifier:   94:B2:38:6B:9D:F7:E7:07:89:09:E2:2A:1C:85:2C:FF:A2:D6:5F:B8
Certificate issuer:       /CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
Certificate serial:       0645AF
Authority key identifier: D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/727ae46b034cbeae1c4df2f8b4055b5d245518b5.roa
Signing time:             Wed 24 Mar 2021 14:34:55 +0000
ROA not before:           Wed 24 Mar 2021 14:34:55 +0000
ROA not after:            Tue 24 Mar 2026 14:34:55 +0000
asID:                     266832
IP address blocks:        45.238.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411055 (0x645af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
        Validity
            Not Before: Mar 24 14:34:55 2021 GMT
            Not After : Mar 24 14:34:55 2026 GMT
        Subject: CN=727ae46b034cbeae1c4df2f8b4055b5d245518b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:aa:90:3a:8e:7b:bf:e3:ef:47:b6:08:51:
                    7b:d1:70:ac:b6:ca:7f:c2:c3:81:89:f8:bb:d5:1d:
                    5e:74:0e:28:62:f5:d8:3f:1e:ca:40:1f:04:e7:3e:
                    9c:e5:90:80:75:1d:4f:42:44:80:52:1a:7a:7e:5e:
                    26:2c:fb:87:ba:f9:a2:bc:13:9d:cc:df:5b:e0:fc:
                    14:09:a4:e3:50:e2:91:ed:72:a7:a2:16:ad:f4:c8:
                    17:fc:d0:7d:02:9d:72:6f:23:64:94:d3:3c:af:96:
                    0b:7d:2a:d1:42:49:52:46:21:52:ed:72:20:bd:ca:
                    ac:d7:2f:55:67:15:28:c8:e4:e5:e0:87:a8:32:28:
                    da:c0:b1:65:0b:b0:7e:e0:52:ed:5c:34:5c:f4:fb:
                    55:38:dc:38:ea:df:ce:9e:4d:0f:8d:cf:34:7f:38:
                    7c:7a:a5:d9:03:91:21:7f:b0:82:c9:1a:1b:72:7b:
                    18:a1:49:35:a0:12:5a:a0:82:db:07:68:18:7a:0b:
                    e0:cf:e9:4b:a6:eb:0e:f9:95:15:a2:76:d4:33:c4:
                    56:25:cd:76:19:f5:00:aa:a3:88:05:a0:d2:0e:70:
                    a3:2f:8f:e8:f1:68:4b:a5:32:94:ce:11:ab:6d:43:
                    e0:95:71:4e:b8:65:be:3e:d3:9b:cc:59:dd:1e:00:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B2:38:6B:9D:F7:E7:07:89:09:E2:2A:1C:85:2C:FF:A2:D6:5F:B8
            X509v3 Authority Key Identifier:
                keyid:D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/727ae46b034cbeae1c4df2f8b4055b5d245518b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:b3:6c:40:6a:b9:9c:44:bd:86:57:9b:52:a6:3a:63:2e:
         8d:b7:1b:32:c7:08:4b:94:05:44:d9:4f:00:d0:18:9d:ee:0f:
         aa:bb:7b:ce:7b:a7:48:70:67:3d:db:15:a9:7c:89:db:3d:c2:
         ed:3a:4c:8d:c3:2c:2b:1a:93:d2:90:50:25:89:8e:ef:4c:3a:
         74:2b:1f:cf:b1:e3:52:e4:66:4f:0e:4b:b8:a9:6a:d0:72:39:
         3a:3c:42:1f:cb:96:c3:c2:a3:7b:db:98:df:91:78:0a:e2:1a:
         0b:76:bb:ab:f1:0e:28:32:ba:9a:27:d4:a0:c6:9d:40:fa:63:
         c1:7c:33:68:5e:ed:1b:b0:11:28:e1:81:0d:6f:be:7b:1b:04:
         a9:2e:f8:52:c6:0e:49:6a:7f:93:8b:a6:4f:53:20:cd:7b:82:
         76:f9:d6:66:60:cb:87:a7:97:df:7a:cc:21:b2:83:e1:0e:7a:
         f5:5d:85:2c:5c:d8:10:04:0e:df:f7:86:67:c9:41:fa:2f:9e:
         d6:06:4c:3c:d7:7a:51:74:e1:87:be:7b:30:ac:d8:4b:08:83:
         5a:5a:02:41:43:aa:4a:83:a8:45:87:7d:ad:58:a2:5f:8b:a9:
         b4:ef:04:bd:2a:0f:a8:3c:06:87:72:8f:a0:66:13:79:b0:20:
         de:a8:39:91
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBkWvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
ODA4ZTJiZDhlMGUyMzA0YmUyMWE1N2ViZjgwNzdkMjlmYjczNjMwHhcNMjEwMzI0
MTQzNDU1WhcNMjYwMzI0MTQzNDU1WjAzMTEwLwYDVQQDEyg3MjdhZTQ2YjAzNGNi
ZWFlMWM0ZGYyZjhiNDA1NWI1ZDI0NTUxOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqseqkDqOe7/j70e2CFF70XCstsp/wsOBifi71R1edA4oYvXY
Px7KQB8E5z6c5ZCAdR1PQkSAUhp6fl4mLPuHuvmivBOdzN9b4PwUCaTjUOKR7XKn
ohat9MgX/NB9Ap1ybyNklNM8r5YLfSrRQklSRiFS7XIgvcqs1y9VZxUoyOTl4Ieo
MijawLFlC7B+4FLtXDRc9PtVONw46t/Onk0Pjc80fzh8eqXZA5Ehf7CCyRobcnsY
oUk1oBJaoILbB2gYegvgz+lLpusO+ZUVonbUM8RWJc12GfUAqqOIBaDSDnCjL4/o
8WhLpTKUzhGrbUPglXFOuGW+PtObzFndHgCnXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJSyOGud9+cHiQniKhyFLP+i1l+4MB8GA1UdIwQYMBaAFNBJWAH88Kx4+F+h
uLF8/08/o6YeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzA4MDhl
MmJkOGUwZTIzMDRiZTIxYTU3ZWJmODA3N2QyOWZiNzM2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTk5NzcxOTQtZjAxMS00ZDQxLTg1ZmEtZTdjMTg3
ZTNmNzMyLzcyN2FlNDZiMDM0Y2JlYWUxYzRkZjJmOGI0MDU1YjVkMjQ1NTE4YjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOTk3NzE5NC1mMDExLTRkNDEtODVmYS1lN2Mx
ODdlM2Y3MzIvNzA4MDhlMmJkOGUwZTIzMDRiZTIxYTU3ZWJmODA3N2QyOWZiNzM2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3ukDANBgkqhkiG9w0BAQsFAAOCAQEABa6zbEBquZxEvYZX
m1KmOmMujbcbMscIS5QFRNlPANAYne4Pqrt7znunSHBnPdsVqXyJ2z3C7TpMjcMs
KxqT0pBQJYmO70w6dCsfz7HjUuRmTw5LuKlq0HI5OjxCH8uWw8Kje9uY35F4CuIa
C3a7q/EOKDK6mifUoMadQPpjwXwzaF7tG7ARKOGBDW++exsEqS74UsYOSWp/k4um
T1MgzXuCdvnWZmDLh6eX33rMIbKD4Q569V2FLFzYEAQO3/eGZ8lB+i+e1gZMPNd6
UXThh757MKzYSwiDWloCQUOqSoOoRYd9rViiX4uptO8EvSoPqDwGh3KPoGYTebAg
3qg5kQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org