Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/eba53d3d677cf4661f7860796cceccac1b0fd389.roa
File:                     eba53d3d677cf4661f7860796cceccac1b0fd389.roa (raw, json)
Hash identifier:          3H7jJRd9LsDDr+MmCqppTPx3inlkZsSrVm9d7Wpg8DA=
Subject key identifier:   BC:F1:C3:ED:93:2F:2E:89:25:2D:E0:B2:98:5C:9D:F8:CA:88:9F:C1
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       174080
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/eba53d3d677cf4661f7860796cceccac1b0fd389.roa
Signing time:             Mon 18 Jul 2022 19:42:22 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266668
IP address blocks:        45.228.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523840 (0x174080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=eba53d3d677cf4661f7860796cceccac1b0fd389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:5c:33:d1:77:32:a4:50:c4:bc:82:63:d4:
                    75:03:4f:b0:ac:36:05:3a:1a:28:03:79:6e:45:04:
                    56:0a:13:6c:1c:26:cd:e1:d6:46:7d:b4:75:fe:ea:
                    48:c1:59:09:9e:39:dd:d7:0a:dd:ac:51:da:d3:8f:
                    9d:af:b1:54:d1:bb:1a:36:f4:21:8a:3f:d9:3d:de:
                    bd:0a:6b:49:05:d8:11:68:0b:50:5a:55:69:0a:01:
                    5e:68:94:f3:12:f9:46:c6:5f:55:42:a0:55:2c:6c:
                    fc:e0:02:0d:13:e4:cb:33:21:db:e3:06:cd:95:71:
                    4d:71:d6:b9:46:25:93:24:d7:cd:f6:7a:3b:d1:d2:
                    b3:74:dc:32:16:1a:12:e0:0e:e2:ad:9a:94:fc:65:
                    4c:7d:4c:5f:71:65:64:7b:1c:93:5b:b8:4a:09:6e:
                    81:75:96:66:c5:dd:00:66:25:09:e6:72:aa:60:bd:
                    c7:81:25:03:e9:17:e3:6a:39:f0:fc:1e:5c:e8:ef:
                    33:1c:02:4a:d2:83:5b:9f:86:08:c5:f2:be:2c:df:
                    5a:45:2f:cb:ea:8e:86:dd:d0:e4:66:b4:33:6e:98:
                    66:85:98:41:2c:7f:2c:66:87:5e:24:97:0f:8b:f7:
                    b1:35:69:fd:24:a9:06:db:12:96:ee:5f:6f:30:50:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F1:C3:ED:93:2F:2E:89:25:2D:E0:B2:98:5C:9D:F8:CA:88:9F:C1
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/eba53d3d677cf4661f7860796cceccac1b0fd389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:df:29:56:57:a6:c7:51:21:b7:ad:12:e1:fb:67:d3:32:
         8c:f9:54:40:d9:d7:fd:81:14:8e:49:f8:85:a0:02:b4:72:88:
         66:d2:25:b0:ca:93:fe:8b:eb:d2:ba:b2:76:b6:ef:e5:3e:d0:
         04:65:07:21:d1:7e:2e:bf:0e:b9:f3:c3:6b:e0:8a:8c:6f:b2:
         7e:06:21:7b:6a:cc:f7:1f:aa:4a:84:69:d4:24:09:d4:f6:60:
         92:73:14:fd:fa:3b:0d:ba:00:6f:e3:a3:b8:6d:b9:3e:a5:a3:
         6b:bc:77:f4:d6:12:30:93:fa:d6:f5:0d:d7:96:8b:1a:97:84:
         cd:e0:79:ce:d4:7e:c5:c2:d9:ae:97:6b:50:86:e4:f1:98:b5:
         ea:3e:09:28:18:c2:f8:87:45:ca:f7:b7:e8:94:f0:f5:dc:89:
         2d:66:3b:80:3a:1d:af:c7:ef:c6:72:57:f4:16:2f:c8:77:af:
         ff:4b:5c:1d:72:e8:4a:cf:bd:c4:a0:fd:0f:83:8d:68:29:03:
         f3:31:ff:c8:b5:a9:52:e5:c9:b3:45:c3:d6:71:c8:a4:7f:b6:
         be:1d:62:f4:93:ff:77:f2:c0:27:cd:3d:e1:ac:d4:12:62:5f:
         80:9e:2c:75:3c:c5:1d:d2:75:c3:56:eb:63:cc:d3:bd:fb:3d:
         c5:75:a1:42
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF0CAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
ZTdkMmI4M2MzNGEwZGQ0MDNjOTI2ODlhZWRkNTdmMGExODJiNWQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlYmE1M2QzZDY3N2Nm
NDY2MWY3ODYwNzk2Y2NlY2NhYzFiMGZkMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvfRcM9F3MqRQxLyCY9R1A0+wrDYFOhooA3luRQRWChNsHCbN
4dZGfbR1/upIwVkJnjnd1wrdrFHa04+dr7FU0bsaNvQhij/ZPd69CmtJBdgRaAtQ
WlVpCgFeaJTzEvlGxl9VQqBVLGz84AINE+TLMyHb4wbNlXFNcda5RiWTJNfN9no7
0dKzdNwyFhoS4A7irZqU/GVMfUxfcWVkexyTW7hKCW6BdZZmxd0AZiUJ5nKqYL3H
gSUD6Rfjajnw/B5c6O8zHAJK0oNbn4YIxfK+LN9aRS/L6o6G3dDkZrQzbphmhZhB
LH8sZodeJJcPi/exNWn9JKkG2xKW7l9vMFA49wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLzxw+2TLy6JJS3gsphcnfjKiJ/BMB8GA1UdIwQYMBaAFIbTPyJiq9TZ5n0M
vDP7cvYdzc0tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JlN2Qy
YjgzYzM0YTBkZDQwM2M5MjY4OWFlZGQ1N2YwYTE4MmI1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjFkMWE4ZmQtNGZmZC00ODkxLWI5MTEtYjIzYzYz
NzRmOTFkL2ViYTUzZDNkNjc3Y2Y0NjYxZjc4NjA3OTZjY2VjY2FjMWIwZmQzODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMWQxYThmZC00ZmZkLTQ4OTEtYjkxMS1iMjNj
NjM3NGY5MWQvY2JlN2QyYjgzYzM0YTBkZDQwM2M5MjY4OWFlZGQ1N2YwYTE4MmI1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3kvDANBgkqhkiG9w0BAQsFAAOCAQEAPyvfKVZXpsdRIbet
EuH7Z9MyjPlUQNnX/YEUjkn4haACtHKIZtIlsMqT/ovr0rqydrbv5T7QBGUHIdF+
Lr8OufPDa+CKjG+yfgYhe2rM9x+qSoRp1CQJ1PZgknMU/fo7DboAb+OjuG25PqWj
a7x39NYSMJP61vUN15aLGpeEzeB5ztR+xcLZrpdrUIbk8Zi16j4JKBjC+IdFyve3
6JTw9dyJLWY7gDodr8fvxnJX9BYvyHev/0tcHXLoSs+9xKD9D4ONaCkD8zH/yLWp
UuXJs0XD1nHIpH+2vh1i9JP/d/LAJ8094azUEmJfgJ4sdTzFHdJ1w1brY8zTvfs9
xXWhQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org