Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa
File:                     8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa (raw, json)
Hash identifier:          zFPEwzzGY1yqmwJC+nGfH5+jzHHP2mDJXu7xdt5qlMk=
Subject key identifier:   3B:81:B7:4A:28:AE:B1:FD:0A:C3:23:53:0E:7D:A6:00:1F:C2:5D:21
Certificate issuer:       /CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
Certificate serial:       266BFA
Authority key identifier: 9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa
Signing time:             Thu 07 Mar 2024 04:50:43 +0000
ROA not before:           Thu 07 Mar 2024 04:50:43 +0000
ROA not after:            Sat 07 Mar 2026 04:50:43 +0000
asID:                     14754
IP address blocks:        45.186.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518010 (0x266bfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
        Validity
            Not Before: Mar  7 04:50:43 2024 GMT
            Not After : Mar  7 04:50:43 2026 GMT
        Subject: CN=8b610e23f35c3063cdd9940fcef35b55235e0f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:7c:e8:e9:bd:51:bf:95:db:4e:86:55:b9:
                    53:a2:77:0b:13:64:43:fc:1c:16:99:86:7b:f7:e9:
                    38:34:ed:34:dd:6c:37:c4:70:ec:95:8b:15:24:de:
                    36:f6:18:3e:3f:7a:3c:03:fb:f2:b8:db:1e:09:95:
                    1b:44:fe:c3:ab:3a:04:69:8b:b9:55:5b:06:83:ec:
                    aa:b6:ae:14:98:92:8e:02:7b:ab:51:12:ef:e3:96:
                    4b:d3:ec:70:ef:84:57:22:e8:5c:3e:09:bf:86:e3:
                    db:c6:49:2c:7e:15:93:48:5e:91:da:89:83:3e:67:
                    48:a3:5e:06:15:e9:84:aa:9e:bb:ba:a1:11:4e:5f:
                    0b:d9:ca:bb:b2:4b:56:56:c8:f9:50:1c:7c:a9:ea:
                    38:ae:a3:4c:43:c1:11:74:34:36:3a:d7:ea:66:2e:
                    14:f0:7e:3e:47:a5:39:0c:42:51:83:ed:c9:1d:67:
                    70:ea:a1:9d:c6:e0:6a:4c:b2:d7:0e:70:7f:13:56:
                    7f:3d:ca:56:59:76:3a:0f:42:3e:27:aa:bb:72:be:
                    15:b8:f7:64:7e:94:a0:e0:f5:d9:ea:40:9f:d7:98:
                    7a:61:74:67:52:58:fe:cd:6c:94:7d:3a:6d:02:a2:
                    47:66:fd:5c:86:52:25:cc:06:99:67:ab:55:b2:20:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:B7:4A:28:AE:B1:FD:0A:C3:23:53:0E:7D:A6:00:1F:C2:5D:21
            X509v3 Authority Key Identifier:
                keyid:9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:60:e3:46:9a:46:da:4d:46:35:ce:7d:d3:60:81:dc:84:
         52:6c:78:49:c0:46:54:a4:7b:48:d3:0c:29:09:34:5a:fe:b6:
         7a:e2:4b:f3:41:d0:bf:1a:e2:47:35:b7:e5:55:be:72:26:7b:
         a9:a2:b3:b9:f7:a2:fb:3c:db:6d:f0:7a:75:85:39:a3:23:11:
         07:82:0f:bf:d4:f2:8c:b8:e0:8d:b4:1f:e6:e8:23:dd:ef:7d:
         2c:65:3f:9f:84:98:20:69:07:c6:d7:1d:b2:51:55:0a:13:ad:
         66:b8:20:c7:1f:a3:13:83:f6:03:05:33:73:bf:50:fb:15:80:
         6b:a7:15:3f:d1:b5:59:47:f2:67:94:46:a3:5a:ee:e7:cf:5d:
         a7:ae:77:18:66:58:c5:e6:b1:e6:2d:78:3b:33:0b:37:da:07:
         ca:f2:b1:6f:0e:ce:c1:77:04:f2:74:28:d3:28:eb:43:52:d8:
         d3:10:92:db:26:39:31:40:67:fd:2d:75:a2:73:2d:df:f1:2f:
         d3:59:29:b9:65:16:f7:be:34:2d:a1:56:e9:bc:85:c0:d6:fd:
         5f:71:36:2a:9e:be:33:a7:d8:0d:a0:db:c4:66:7e:79:04:14:
         3b:7a:58:f1:b6:76:8c:d7:92:f3:c6:dc:6d:f1:b6:74:8c:31:
         0d:1e:71:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJmv6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
ZTNmZDJjOGFjODA5ZmFlY2NkMTQxOGZmOGJkNTYyNjA4YjMyYmEwHhcNMjQwMzA3
MDQ1MDQzWhcNMjYwMzA3MDQ1MDQzWjAzMTEwLwYDVQQDEyg4YjYxMGUyM2YzNWMz
MDYzY2RkOTk0MGZjZWYzNWI1NTIzNWUwZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm1586Om9Ub+V206GVblToncLE2RD/BwWmYZ79+k4NO003Ww3
xHDslYsVJN429hg+P3o8A/vyuNseCZUbRP7DqzoEaYu5VVsGg+yqtq4UmJKOAnur
URLv45ZL0+xw74RXIuhcPgm/huPbxkksfhWTSF6R2omDPmdIo14GFemEqp67uqER
Tl8L2cq7sktWVsj5UBx8qeo4rqNMQ8ERdDQ2OtfqZi4U8H4+R6U5DEJRg+3JHWdw
6qGdxuBqTLLXDnB/E1Z/PcpWWXY6D0I+J6q7cr4VuPdkfpSg4PXZ6kCf15h6YXRn
Ulj+zWyUfTptAqJHZv1chlIlzAaZZ6tVsiCBSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDuBt0oorrH9CsMjUw59pgAfwl0hMB8GA1UdIwQYMBaAFJ70jBzyFjrBHI0g
a2R1mMW4xgz1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmZlM2Zk
MmM4YWM4MDlmYWVjY2QxNDE4ZmY4YmQ1NjI2MDhiMzJiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWUyZGY2NjAtZjFmMC00ZjhkLTljZjctNGMyYzUz
ODBkNjZiLzhiNjEwZTIzZjM1YzMwNjNjZGQ5OTQwZmNlZjM1YjU1MjM1ZTBmMmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZTJkZjY2MC1mMWYwLTRmOGQtOWNmNy00YzJj
NTM4MGQ2NmIvZmZlM2ZkMmM4YWM4MDlmYWVjY2QxNDE4ZmY4YmQ1NjI2MDhiMzJi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi26bDANBgkqhkiG9w0BAQsFAAOCAQEAHVVg40aaRtpNRjXO
fdNggdyEUmx4ScBGVKR7SNMMKQk0Wv62euJL80HQvxriRzW35VW+ciZ7qaKzufei
+zzbbfB6dYU5oyMRB4IPv9TyjLjgjbQf5ugj3e99LGU/n4SYIGkHxtcdslFVChOt
Zrggxx+jE4P2AwUzc79Q+xWAa6cVP9G1WUfyZ5RGo1ru589dp653GGZYxeax5i14
OzMLN9oHyvKxbw7OwXcE8nQo0yjrQ1LY0xCS2yY5MUBn/S11onMt3/Ev01kpuWUW
9740LaFW6byFwNb9X3E2Kp6+M6fYDaDbxGZ+eQQUO3pY8bZ2jNeS88bcbfG2dIwx
DR5x1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org