Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/3853363d3791468e479e4929d0843f79d1f1dd02.roa
File:                     3853363d3791468e479e4929d0843f79d1f1dd02.roa (raw, json)
Hash identifier:          j9ee3/1MMihNWpZUopZJ3/yhw4e5MP1jRAJJ7Ilmrpc=
Subject key identifier:   67:42:AF:CF:74:81:90:05:D9:D3:C5:9E:59:01:E3:48:AC:1E:58:B4
Certificate issuer:       /CN=4a2871620c9111cdbe95d600f335da1f24376c39
Certificate serial:       0B7D7D
Authority key identifier: B0:34:25:48:DB:FD:A2:CA:55:4B:EE:B4:29:56:82:75:0F:49:0B:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a2871620c9111cdbe95d600f335da1f24376c39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/3853363d3791468e479e4929d0843f79d1f1dd02.roa
Signing time:             Wed 24 Mar 2021 14:34:01 +0000
ROA not before:           Wed 24 Mar 2021 14:34:01 +0000
ROA not after:            Tue 24 Mar 2026 14:34:01 +0000
asID:                     267868
IP address blocks:        45.176.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753021 (0xb7d7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2871620c9111cdbe95d600f335da1f24376c39
        Validity
            Not Before: Mar 24 14:34:01 2021 GMT
            Not After : Mar 24 14:34:01 2026 GMT
        Subject: CN=3853363d3791468e479e4929d0843f79d1f1dd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:90:84:52:45:eb:e2:3d:7c:44:6e:31:06:
                    77:61:20:0f:72:71:b5:c6:35:45:87:f5:3e:e7:a7:
                    87:26:0e:91:a6:a7:0a:f2:95:cd:65:59:31:1d:9c:
                    50:8b:82:a6:62:3c:d5:3d:c3:a9:be:02:f0:77:da:
                    bc:0f:54:5a:f9:7d:ed:ab:d1:cc:95:3c:76:ec:85:
                    bc:d1:d2:2c:66:65:55:1f:5a:79:cc:43:a8:f9:d6:
                    dc:ec:45:ce:b3:5f:47:ca:29:bc:64:63:bd:05:0d:
                    58:73:9c:52:74:53:5c:b3:2e:c3:40:1f:30:1d:b5:
                    d2:2f:01:75:47:f6:f3:27:21:d3:4d:4a:e1:16:37:
                    7d:b0:c7:bf:c9:45:a3:e3:aa:71:07:df:4b:7e:cd:
                    c0:b3:4b:26:63:a2:bd:f0:c8:a4:37:f4:94:0c:f8:
                    16:69:4a:5d:1c:78:66:cb:bd:1d:aa:93:a3:53:73:
                    9b:11:0d:3d:3f:0b:01:e3:78:27:09:f1:ce:38:6a:
                    dc:41:0b:45:bb:c2:64:b2:e0:2d:c9:a6:9e:11:81:
                    fb:46:93:1b:58:6f:9e:a1:da:7b:c6:a4:4a:ea:82:
                    7e:c9:52:2f:b5:43:74:b1:a6:88:0f:6c:86:ac:ec:
                    d6:b8:7f:a9:aa:ef:08:a3:b3:36:38:64:6d:63:10:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:AF:CF:74:81:90:05:D9:D3:C5:9E:59:01:E3:48:AC:1E:58:B4
            X509v3 Authority Key Identifier:
                keyid:B0:34:25:48:DB:FD:A2:CA:55:4B:EE:B4:29:56:82:75:0F:49:0B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a2871620c9111cdbe95d600f335da1f24376c39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/3853363d3791468e479e4929d0843f79d1f1dd02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ac61a92e-9933-427c-b081-c57c248da571/4a2871620c9111cdbe95d600f335da1f24376c39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ab:fd:c8:af:91:ba:03:43:b1:5b:e3:34:0c:a8:fd:71:58:
         3c:6f:84:9b:d9:cb:e9:1a:7a:ba:7f:91:05:e4:41:13:19:be:
         31:e7:12:fa:c5:57:b1:5f:0f:87:30:97:19:52:87:15:71:97:
         bc:6e:04:a7:a5:6c:c7:e2:c3:df:a4:df:e6:63:29:98:fa:f7:
         5e:1c:be:78:72:71:19:22:18:ee:a4:b3:d0:6a:6b:ed:33:82:
         e0:06:06:50:5b:3a:a3:32:73:43:83:1a:e3:04:a1:3a:99:f7:
         35:5c:93:f7:f2:4d:92:5c:80:e1:50:04:02:b1:ae:45:75:98:
         cf:da:c1:58:aa:98:a3:da:69:74:96:fa:36:19:9d:b5:dd:11:
         bd:89:ca:a6:d7:7a:71:e4:68:50:a9:cb:a3:18:00:03:f4:d8:
         e9:1a:5a:8f:0d:17:15:19:18:c7:f3:c1:5a:06:f5:b8:a9:7f:
         c8:82:64:3d:e8:9a:72:c4:56:67:ea:58:24:f0:1e:c6:72:a7:
         80:e5:d8:83:22:58:d1:3f:b5:b6:68:9a:47:7d:e8:c0:eb:2f:
         9b:77:1f:ef:8c:09:21:3e:d0:9d:4f:1d:82:b2:6f:14:1e:1b:
         fb:19:9f:71:05:37:9a:ad:ac:c0:32:b1:c7:14:9d:a1:ae:8d:
         79:66:b9:e8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC319MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
Mjg3MTYyMGM5MTExY2RiZTk1ZDYwMGYzMzVkYTFmMjQzNzZjMzkwHhcNMjEwMzI0
MTQzNDAxWhcNMjYwMzI0MTQzNDAxWjAzMTEwLwYDVQQDEygzODUzMzYzZDM3OTE0
NjhlNDc5ZTQ5MjlkMDg0M2Y3OWQxZjFkZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxImQhFJF6+I9fERuMQZ3YSAPcnG1xjVFh/U+56eHJg6RpqcK
8pXNZVkxHZxQi4KmYjzVPcOpvgLwd9q8D1Ra+X3tq9HMlTx27IW80dIsZmVVH1p5
zEOo+dbc7EXOs19Hyim8ZGO9BQ1Yc5xSdFNcsy7DQB8wHbXSLwF1R/bzJyHTTUrh
Fjd9sMe/yUWj46pxB99Lfs3As0smY6K98MikN/SUDPgWaUpdHHhmy70dqpOjU3Ob
EQ09PwsB43gnCfHOOGrcQQtFu8JksuAtyaaeEYH7RpMbWG+eodp7xqRK6oJ+yVIv
tUN0saaID2yGrOzWuH+pqu8Io7M2OGRtYxDNLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGdCr890gZAF2dPFnlkB40isHli0MB8GA1UdIwQYMBaAFLA0JUjb/aLKVUvu
tClWgnUPSQu9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGEyODcx
NjIwYzkxMTFjZGJlOTVkNjAwZjMzNWRhMWYyNDM3NmMzOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWM2MWE5MmUtOTkzMy00MjdjLWIwODEtYzU3YzI0
OGRhNTcxLzM4NTMzNjNkMzc5MTQ2OGU0NzllNDkyOWQwODQzZjc5ZDFmMWRkMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYzYxYTkyZS05OTMzLTQyN2MtYjA4MS1jNTdj
MjQ4ZGE1NzEvNGEyODcxNjIwYzkxMTFjZGJlOTVkNjAwZjMzNWRhMWYyNDM3NmMz
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2wwDANBgkqhkiG9w0BAQsFAAOCAQEABav9yK+RugNDsVvj
NAyo/XFYPG+Em9nL6Rp6un+RBeRBExm+MecS+sVXsV8PhzCXGVKHFXGXvG4Ep6Vs
x+LD36Tf5mMpmPr3Xhy+eHJxGSIY7qSz0Gpr7TOC4AYGUFs6ozJzQ4Ma4wShOpn3
NVyT9/JNklyA4VAEArGuRXWYz9rBWKqYo9ppdJb6Nhmdtd0RvYnKptd6ceRoUKnL
oxgAA/TY6Rpajw0XFRkYx/PBWgb1uKl/yIJkPeiacsRWZ+pYJPAexnKngOXYgyJY
0T+1tmiaR33owOsvm3cf74wJIT7QnU8dgrJvFB4b+xmfcQU3mq2swDKxxxSdoa6N
eWa56A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org