Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/5fb16ab6e6034ead150cc857ed5d05af79cfdb7b.roa
File:                     5fb16ab6e6034ead150cc857ed5d05af79cfdb7b.roa (raw, json)
Hash identifier:          zRXoFg2myE7KnS8XvDOi4KLcBzkFu4X03uXEZjmJI8E=
Subject key identifier:   E3:99:59:15:D1:57:F5:5C:C3:22:17:76:A0:33:58:07:DE:CB:0C:BC
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       18009D
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/5fb16ab6e6034ead150cc857ed5d05af79cfdb7b.roa
Signing time:             Fri 01 Jul 2022 01:08:01 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     266742
IP address blocks:        45.230.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573021 (0x18009d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=5fb16ab6e6034ead150cc857ed5d05af79cfdb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:5e:39:90:2d:c5:ce:f4:2a:97:e8:1e:82:
                    ae:21:8c:36:4c:28:3e:e1:0b:b0:2f:08:4d:47:75:
                    de:48:31:c1:63:03:07:2d:f4:3d:15:c8:f4:74:ae:
                    80:08:ce:05:19:d8:40:37:98:a1:33:9f:5f:b0:a1:
                    d0:87:c1:e3:ee:e2:46:4b:91:52:c7:72:b8:14:fc:
                    1b:3a:40:9e:04:3f:5b:46:09:d6:d6:02:a4:bb:36:
                    5b:aa:89:1d:ef:b0:fc:06:66:67:07:47:dd:23:e3:
                    80:8b:8e:0c:3e:99:a3:15:04:8a:5b:3d:ba:bb:d3:
                    96:01:ad:3d:ad:ce:b8:37:39:11:8f:33:cb:57:a9:
                    3b:5e:a0:48:1a:63:ed:8e:6c:08:b4:38:98:fd:d7:
                    73:a4:85:5e:d6:59:26:36:ca:20:ff:50:83:b3:a3:
                    fb:86:b7:04:81:2a:2b:9d:a1:a0:b5:7b:94:f8:53:
                    9d:98:4b:2d:e1:20:6b:fb:50:95:e3:11:5b:cd:21:
                    10:3d:2c:9a:10:aa:31:1b:c7:b6:1d:2b:78:15:86:
                    43:37:a8:41:e4:a9:9b:c0:30:f9:b0:fc:25:ea:f3:
                    cc:55:34:21:e0:3d:17:a9:90:6f:c2:7c:1a:3d:97:
                    df:d3:a6:9b:f6:2a:88:4f:e4:77:c5:fb:bc:10:96:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:99:59:15:D1:57:F5:5C:C3:22:17:76:A0:33:58:07:DE:CB:0C:BC
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/5fb16ab6e6034ead150cc857ed5d05af79cfdb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:59:5b:b5:53:88:0d:04:b8:47:27:fb:77:ee:64:53:c2:f8:
         04:5b:c8:6a:27:1d:17:54:fd:0d:7c:fe:77:c3:74:3f:c1:62:
         22:55:8a:11:a8:52:b9:75:0f:65:8b:11:76:27:e0:5e:ef:47:
         57:46:a2:9a:41:a2:cb:60:c4:ea:23:8a:c6:62:67:96:51:ec:
         7e:b4:72:ba:39:5d:c4:a4:bf:7b:09:0e:d1:2b:32:a5:6f:8e:
         d7:c1:65:16:1e:4d:81:c5:01:a9:13:02:30:36:86:8c:33:79:
         5a:7c:69:f2:74:c3:94:7e:d6:08:28:e5:ce:c9:b1:a5:f1:76:
         f2:72:4a:b5:f0:90:d0:0f:7e:94:47:e6:1c:17:7e:06:93:d7:
         a6:7a:af:a3:c1:c6:c7:4d:99:f0:fe:47:24:23:0f:40:68:14:
         81:4f:75:66:b8:bc:20:68:0b:37:28:4f:dd:7e:ce:2c:d2:42:
         c1:d1:bb:f7:77:cb:29:1c:bf:a4:cd:02:b4:1b:89:f5:cc:6e:
         84:9a:d4:eb:ac:de:c7:04:e2:e9:b1:09:3f:72:8e:18:a0:25:
         11:7f:57:74:a9:ed:16:cb:42:02:b2:03:ca:e5:6b:a3:8a:c9:
         ea:cb:57:e5:35:c6:1b:1a:d2:c5:71:55:ea:af:14:e2:9a:12:
         8e:2b:35:95
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGACdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
MGYxMzgyMGI5Nzc5MTRkYzk2MjUwODA3ZmQ2NmY2NzA3ZGI5ZWMwHhcNMjIwNjMw
MDMwMDAwWhcNMjQwNjMwMDMwMDAwWjAzMTEwLwYDVQQDEyg1ZmIxNmFiNmU2MDM0
ZWFkMTUwY2M4NTdlZDVkMDVhZjc5Y2ZkYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgPZeOZAtxc70KpfoHoKuIYw2TCg+4QuwLwhNR3XeSDHBYwMH
LfQ9Fcj0dK6ACM4FGdhAN5ihM59fsKHQh8Hj7uJGS5FSx3K4FPwbOkCeBD9bRgnW
1gKkuzZbqokd77D8BmZnB0fdI+OAi44MPpmjFQSKWz26u9OWAa09rc64NzkRjzPL
V6k7XqBIGmPtjmwItDiY/ddzpIVe1lkmNsog/1CDs6P7hrcEgSornaGgtXuU+FOd
mEst4SBr+1CV4xFbzSEQPSyaEKoxG8e2HSt4FYZDN6hB5KmbwDD5sPwl6vPMVTQh
4D0XqZBvwnwaPZff06ab9iqIT+R3xfu8EJYzgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOOZWRXRV/VcwyIXdqAzWAfeywy8MB8GA1UdIwQYMBaAFGKwycpWrslTjdOr
+Pxk9t81Tm60MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTAwZjEz
ODIwYjk3NzkxNGRjOTYyNTA4MDdmZDY2ZjY3MDdkYjllYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjk3Yzg5N2MtNDBiNy00NjAxLThmYzMtZDgxMWYz
YzM4MTY3LzVmYjE2YWI2ZTYwMzRlYWQxNTBjYzg1N2VkNWQwNWFmNzljZmRiN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOTdjODk3Yy00MGI3LTQ2MDEtOGZjMy1kODEx
ZjNjMzgxNjcvYTAwZjEzODIwYjk3NzkxNGRjOTYyNTA4MDdmZDY2ZjY3MDdkYjll
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3mqDANBgkqhkiG9w0BAQsFAAOCAQEACFlbtVOIDQS4Ryf7
d+5kU8L4BFvIaicdF1T9DXz+d8N0P8FiIlWKEahSuXUPZYsRdifgXu9HV0aimkGi
y2DE6iOKxmJnllHsfrRyujldxKS/ewkO0SsypW+O18FlFh5NgcUBqRMCMDaGjDN5
Wnxp8nTDlH7WCCjlzsmxpfF28nJKtfCQ0A9+lEfmHBd+BpPXpnqvo8HGx02Z8P5H
JCMPQGgUgU91Zri8IGgLNyhP3X7OLNJCwdG793fLKRy/pM0CtBuJ9cxuhJrU66ze
xwTi6bEJP3KOGKAlEX9XdKntFstCArIDyuVro4rJ6stX5TXGGxrSxXFV6q8U4poS
jis1lQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org