Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/fb4257acdccb6e28446b075b1256fd48cdf3661d.roa
File:                     fb4257acdccb6e28446b075b1256fd48cdf3661d.roa (raw, json)
Hash identifier:          wCZy+8J0h+fdxfxwokHtesjm1fkpaF9awfEtfp7A150=
Subject key identifier:   07:48:C6:F6:EA:1A:6D:94:EB:94:3B:A5:78:60:D4:D9:E6:5A:3C:31
Certificate issuer:       /CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
Certificate serial:       266E43
Authority key identifier: 9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/fb4257acdccb6e28446b075b1256fd48cdf3661d.roa
Signing time:             Thu 07 Mar 2024 05:31:20 +0000
ROA not before:           Thu 07 Mar 2024 05:31:20 +0000
ROA not after:            Sat 07 Mar 2026 05:31:20 +0000
asID:                     14754
IP address blocks:        45.186.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518595 (0x266e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
        Validity
            Not Before: Mar  7 05:31:20 2024 GMT
            Not After : Mar  7 05:31:20 2026 GMT
        Subject: CN=fb4257acdccb6e28446b075b1256fd48cdf3661d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:ae:7c:34:70:04:28:1b:40:c5:53:74:13:
                    e5:85:a4:bd:f4:ed:e1:a5:cc:08:6b:a7:f6:e9:7a:
                    c1:6f:f1:e4:c6:0f:0b:56:12:26:c6:ec:d9:5d:ee:
                    01:2d:e8:10:56:59:d0:25:c2:7a:a7:37:dd:6e:bd:
                    78:ee:78:d7:5d:8a:1a:a6:de:9d:d2:34:b8:be:32:
                    f8:e7:81:ef:f5:37:7b:2b:0d:53:61:0d:cd:23:07:
                    0a:ac:8c:85:6a:34:e6:ff:23:91:77:fe:05:90:2b:
                    4e:99:57:f0:15:87:07:e9:66:c5:e0:bc:97:61:c6:
                    fb:13:70:f1:84:49:17:d8:5f:23:61:ff:f3:8b:1d:
                    91:59:48:0a:df:3a:db:07:ca:3d:89:1a:87:15:5e:
                    3b:90:b9:32:da:ff:76:64:80:ef:e4:4f:e5:72:76:
                    dd:a8:36:75:9e:92:f4:c9:a8:be:ff:86:bd:3c:c8:
                    80:cf:bd:91:62:79:c4:51:f9:d1:2a:f5:0b:f5:55:
                    b9:dc:1d:c2:41:69:50:c8:5d:53:54:e1:a7:09:97:
                    ce:bc:32:ef:ee:0e:eb:44:66:52:94:8c:7c:4e:8a:
                    af:84:19:c4:57:91:17:d8:4d:39:48:e4:04:57:36:
                    50:da:60:a2:e7:c4:d3:bd:66:27:76:66:f1:1b:66:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:48:C6:F6:EA:1A:6D:94:EB:94:3B:A5:78:60:D4:D9:E6:5A:3C:31
            X509v3 Authority Key Identifier:
                keyid:9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/fb4257acdccb6e28446b075b1256fd48cdf3661d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:38:1e:85:b4:13:fa:11:7a:65:8b:84:0f:1c:23:40:30:
         15:99:b3:b1:b3:b7:95:d6:9d:f0:a1:af:3c:0e:22:b7:d7:1a:
         32:f4:55:2c:9e:35:b0:f9:23:57:50:2b:c4:4d:a9:ce:12:dd:
         44:58:34:3b:d6:8a:33:63:7b:74:9e:97:d4:e8:d7:59:19:9d:
         b3:ea:5a:56:b4:e3:e4:27:de:d4:b1:3c:84:d7:8b:89:2b:38:
         7c:08:6b:c4:5a:96:45:c9:96:0a:1e:b9:45:b7:29:e8:9b:8b:
         c3:ed:2b:39:31:b4:0a:5e:93:9d:14:dd:a4:b7:bf:e2:db:1a:
         49:24:7e:4d:54:b0:20:e8:c8:03:8e:ba:d9:98:dc:da:09:18:
         d1:9c:20:13:45:50:8e:8c:03:60:d1:9b:52:d0:3b:fe:da:06:
         de:b5:ae:83:3d:e6:10:fd:66:0e:3a:25:f2:66:d5:13:42:2a:
         cf:c0:09:88:64:3d:b9:ed:c8:ee:08:10:a3:0f:4d:f3:15:31:
         4c:f3:19:99:d0:9c:86:ce:52:8d:8a:06:67:67:47:70:6e:fe:
         72:ad:d2:35:b1:ad:bf:0b:1d:65:17:95:d5:71:c1:a5:98:38:
         de:54:77:6d:1f:48:f1:8f:a9:f4:1f:ee:32:b4:f4:e7:00:7a:
         eb:fb:94:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJm5DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
ZTNmZDJjOGFjODA5ZmFlY2NkMTQxOGZmOGJkNTYyNjA4YjMyYmEwHhcNMjQwMzA3
MDUzMTIwWhcNMjYwMzA3MDUzMTIwWjAzMTEwLwYDVQQDEyhmYjQyNTdhY2RjY2I2
ZTI4NDQ2YjA3NWIxMjU2ZmQ0OGNkZjM2NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtoOufDRwBCgbQMVTdBPlhaS99O3hpcwIa6f26XrBb/Hkxg8L
VhImxuzZXe4BLegQVlnQJcJ6pzfdbr147njXXYoapt6d0jS4vjL454Hv9Td7Kw1T
YQ3NIwcKrIyFajTm/yORd/4FkCtOmVfwFYcH6WbF4LyXYcb7E3DxhEkX2F8jYf/z
ix2RWUgK3zrbB8o9iRqHFV47kLky2v92ZIDv5E/lcnbdqDZ1npL0yai+/4a9PMiA
z72RYnnEUfnRKvUL9VW53B3CQWlQyF1TVOGnCZfOvDLv7g7rRGZSlIx8ToqvhBnE
V5EX2E05SOQEVzZQ2mCi58TTvWYndmbxG2ZJXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAdIxvbqGm2U65Q7pXhg1NnmWjwxMB8GA1UdIwQYMBaAFJ70jBzyFjrBHI0g
a2R1mMW4xgz1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmZlM2Zk
MmM4YWM4MDlmYWVjY2QxNDE4ZmY4YmQ1NjI2MDhiMzJiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWUyZGY2NjAtZjFmMC00ZjhkLTljZjctNGMyYzUz
ODBkNjZiL2ZiNDI1N2FjZGNjYjZlMjg0NDZiMDc1YjEyNTZmZDQ4Y2RmMzY2MWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZTJkZjY2MC1mMWYwLTRmOGQtOWNmNy00YzJj
NTM4MGQ2NmIvZmZlM2ZkMmM4YWM4MDlmYWVjY2QxNDE4ZmY4YmQ1NjI2MDhiMzJi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi26bDANBgkqhkiG9w0BAQsFAAOCAQEAiLE4HoW0E/oRemWL
hA8cI0AwFZmzsbO3ldad8KGvPA4it9caMvRVLJ41sPkjV1ArxE2pzhLdRFg0O9aK
M2N7dJ6X1OjXWRmds+paVrTj5Cfe1LE8hNeLiSs4fAhrxFqWRcmWCh65Rbcp6JuL
w+0rOTG0Cl6TnRTdpLe/4tsaSSR+TVSwIOjIA4662Zjc2gkY0ZwgE0VQjowDYNGb
UtA7/toG3rWugz3mEP1mDjol8mbVE0Iqz8AJiGQ9ue3I7ggQow9N8xUxTPMZmdCc
hs5SjYoGZ2dHcG7+cq3SNbGtvwsdZReV1XHBpZg43lR3bR9I8Y+p9B/uMrT05wB6
6/uUYg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org