Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/f56fedf1ab911cbe28eecc4ced89942518f2601d.roa
File:                     f56fedf1ab911cbe28eecc4ced89942518f2601d.roa (raw, json)
Hash identifier:          C64Xx5tduvYEnH9PMj9OPlYi+nK87gbZFuOqqt7yPZA=
Subject key identifier:   23:0B:56:E2:8C:13:9F:5F:62:F2:B8:99:DD:65:4E:59:E2:5E:62:D3
Certificate issuer:       /CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
Certificate serial:       049965
Authority key identifier: 42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/f56fedf1ab911cbe28eecc4ced89942518f2601d.roa
Signing time:             Tue 19 Mar 2024 15:49:51 +0000
ROA not before:           Tue 19 Mar 2024 15:49:51 +0000
ROA not after:            Thu 19 Mar 2026 15:49:51 +0000
asID:                     264758
IP address blocks:        45.178.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301413 (0x49965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
        Validity
            Not Before: Mar 19 15:49:51 2024 GMT
            Not After : Mar 19 15:49:51 2026 GMT
        Subject: CN=f56fedf1ab911cbe28eecc4ced89942518f2601d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:4c:56:51:1a:4e:bb:e0:26:0d:05:6a:c4:
                    1c:41:3a:de:a1:f8:f4:d9:5c:36:de:f1:e5:0d:06:
                    1d:a2:6c:f0:a0:98:8c:45:b1:53:ba:2a:e6:42:98:
                    d4:b0:6e:d4:6b:08:d5:6f:4a:c0:fc:6b:e9:bd:d8:
                    61:d1:52:d9:82:08:c7:79:42:1d:49:25:a5:a3:68:
                    d0:22:b1:6d:93:61:97:4b:78:b7:71:68:49:e7:8e:
                    a4:52:f5:5d:27:b1:4e:02:68:8c:6e:4e:1a:8c:2d:
                    4d:17:1d:ae:8c:82:d8:f2:ea:f2:84:ce:d9:09:0b:
                    8c:d3:4a:9e:d9:8e:cc:47:0d:66:57:34:c2:e6:71:
                    54:b2:ea:10:e2:c3:2a:d4:5f:94:1d:a4:01:63:f9:
                    c9:bc:1d:bf:a9:35:72:9c:26:4a:dc:44:00:8c:2a:
                    e0:46:1d:00:9d:2b:5e:a3:75:79:00:69:cf:5e:03:
                    d6:a2:36:49:c6:38:a3:8b:53:78:f3:da:73:42:d3:
                    b8:a3:50:93:7c:a9:bf:cf:d6:55:de:7b:19:23:bd:
                    fc:75:cb:87:b2:c9:f6:9d:59:db:c4:e2:c4:87:80:
                    a9:83:fa:d4:c3:17:37:9f:02:79:a7:b7:24:5c:b2:
                    53:43:d1:a4:3b:c3:75:57:25:6f:59:f5:04:60:ff:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0B:56:E2:8C:13:9F:5F:62:F2:B8:99:DD:65:4E:59:E2:5E:62:D3
            X509v3 Authority Key Identifier:
                keyid:42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/f56fedf1ab911cbe28eecc4ced89942518f2601d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:4e:0d:7a:9a:93:8f:d9:f8:b8:e3:3d:6d:e0:3f:2b:21:
         7d:f3:cb:1d:a7:64:a5:a4:d6:a6:1c:5f:61:2c:e7:c5:3f:db:
         81:92:d9:cd:58:b2:d9:05:fb:d8:cb:88:05:34:a5:6e:ef:f2:
         d3:69:53:48:97:a3:08:7a:1b:85:a8:5b:86:3f:c0:b0:e5:a4:
         45:fe:bc:c9:84:38:d7:21:0c:6f:b7:82:e3:69:0f:e6:c4:3c:
         32:83:79:8a:e6:55:c0:fb:39:2d:ff:7d:7c:ee:61:35:1c:87:
         cc:ca:d4:bb:ea:98:cf:88:c0:6a:81:01:94:50:77:42:df:ac:
         5b:22:80:47:b4:8f:36:60:30:da:9c:45:9b:2c:c0:30:b3:ab:
         bb:e9:8e:76:35:b7:3c:59:01:56:9c:41:d1:d6:52:0b:d1:6a:
         66:34:4c:41:b6:c4:e5:ff:73:5a:8b:94:0f:9e:34:b0:f5:1d:
         1f:27:d9:90:26:bd:08:b3:72:d5:66:a0:0a:c3:19:c5:9d:b9:
         ff:12:f0:84:5a:2f:85:d3:5f:5f:a3:c9:15:57:d6:8b:3d:da:
         d3:4c:8e:fd:56:11:3e:02:ea:92:27:1b:c5:42:83:45:15:62:
         0f:d7:ba:f0:96:ef:7e:eb:60:2c:23:5a:79:4e:af:06:c4:b5:
         9b:ea:62:2a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBJllMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
ZjNjMTFiZjg3YjUxODkwZWJjMmE1ZDFhZjc4NmMyOGI3Yzc1MzUwHhcNMjQwMzE5
MTU0OTUxWhcNMjYwMzE5MTU0OTUxWjAzMTEwLwYDVQQDEyhmNTZmZWRmMWFiOTEx
Y2JlMjhlZWNjNGNlZDg5OTQyNTE4ZjI2MDFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuQ9MVlEaTrvgJg0FasQcQTreofj02Vw23vHlDQYdomzwoJiM
RbFTuirmQpjUsG7UawjVb0rA/Gvpvdhh0VLZggjHeUIdSSWlo2jQIrFtk2GXS3i3
cWhJ546kUvVdJ7FOAmiMbk4ajC1NFx2ujILY8uryhM7ZCQuM00qe2Y7MRw1mVzTC
5nFUsuoQ4sMq1F+UHaQBY/nJvB2/qTVynCZK3EQAjCrgRh0AnSteo3V5AGnPXgPW
ojZJxjiji1N489pzQtO4o1CTfKm/z9ZV3nsZI738dcuHssn2nVnbxOLEh4Cpg/rU
wxc3nwJ5p7ckXLJTQ9GkO8N1VyVvWfUEYP8xSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCMLVuKME59fYvK4md1lTlniXmLTMB8GA1UdIwQYMBaAFEJgPRb94cAgxVXX
B9UcqOS2G0vSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTBmM2Mx
MWJmODdiNTE4OTBlYmMyYTVkMWFmNzg2YzI4YjdjNzUzNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE0OTk5NjAtYjJiMy00OTVhLWI3N2EtNGQwY2Zh
MDc5YzBhL2Y1NmZlZGYxYWI5MTFjYmUyOGVlY2M0Y2VkODk5NDI1MThmMjYwMWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTQ5OTk2MC1iMmIzLTQ5NWEtYjc3YS00ZDBj
ZmEwNzljMGEvYTBmM2MxMWJmODdiNTE4OTBlYmMyYTVkMWFmNzg2YzI4YjdjNzUz
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2yRDANBgkqhkiG9w0BAQsFAAOCAQEAdytODXqak4/Z+Ljj
PW3gPyshffPLHadkpaTWphxfYSznxT/bgZLZzViy2QX72MuIBTSlbu/y02lTSJej
CHobhahbhj/AsOWkRf68yYQ41yEMb7eC42kP5sQ8MoN5iuZVwPs5Lf99fO5hNRyH
zMrUu+qYz4jAaoEBlFB3Qt+sWyKAR7SPNmAw2pxFmyzAMLOru+mOdjW3PFkBVpxB
0dZSC9FqZjRMQbbE5f9zWouUD540sPUdHyfZkCa9CLNy1WagCsMZxZ25/xLwhFov
hdNfX6PJFVfWiz3a00yO/VYRPgLqkicbxUKDRRViD9e68JbvfutgLCNaeU6vBsS1
m+piKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org