Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/204cfbf8b2e7abb1042960e0e85721889dcc4db6.roa
File:                     204cfbf8b2e7abb1042960e0e85721889dcc4db6.roa (raw, json)
Hash identifier:          4do8sukL+V8d4WTIwjvcW31weY1ZCfZsJbxKucZm8/A=
Subject key identifier:   19:80:2F:D7:26:89:90:A4:78:BB:71:9E:30:93:23:39:67:65:34:9C
Certificate issuer:       /CN=7e0d8eafbf8ec194359777eb36f8559eef794db7
Certificate serial:       0BC118
Authority key identifier: 6F:98:E4:34:24:84:84:53:81:01:74:55:E8:CB:0D:D2:73:19:A6:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e0d8eafbf8ec194359777eb36f8559eef794db7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/204cfbf8b2e7abb1042960e0e85721889dcc4db6.roa
Signing time:             Wed 24 Mar 2021 14:29:54 +0000
ROA not before:           Wed 24 Mar 2021 14:29:53 +0000
ROA not after:            Tue 24 Mar 2026 14:29:53 +0000
asID:                     267915
IP address blocks:        45.178.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770328 (0xbc118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0d8eafbf8ec194359777eb36f8559eef794db7
        Validity
            Not Before: Mar 24 14:29:53 2021 GMT
            Not After : Mar 24 14:29:53 2026 GMT
        Subject: CN=204cfbf8b2e7abb1042960e0e85721889dcc4db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:97:3c:3e:84:5d:8c:7b:f0:74:25:2f:42:
                    d2:77:2e:3e:a7:a3:ef:69:1a:bd:13:65:21:c7:e6:
                    c2:5e:c2:b4:13:57:79:29:54:0e:71:a8:cb:fc:93:
                    24:7d:62:a6:bb:2c:88:9f:d4:9f:27:d8:a2:a7:0f:
                    10:59:fd:17:db:03:97:46:fe:3a:db:e2:d1:e0:6c:
                    f4:b9:ea:7d:a4:dd:df:00:da:6b:b5:cc:aa:16:bb:
                    09:31:c7:9f:5f:e2:c7:dc:61:5e:77:81:c5:e1:02:
                    cf:1d:0c:f1:0e:c2:9c:35:a8:d1:9d:29:98:de:da:
                    08:c0:8d:2f:8d:eb:1e:20:dc:57:ac:e7:9d:91:b9:
                    5d:10:a9:b8:80:ea:d2:26:0f:b2:8d:a4:45:d5:17:
                    14:bf:e8:fe:0f:86:3d:2a:06:64:1c:c8:41:8e:0a:
                    88:b0:d6:10:6d:e1:77:82:20:40:93:7c:3a:87:2e:
                    43:57:d1:d7:ac:30:99:53:56:ec:6d:3b:96:ba:b8:
                    f0:91:bd:70:97:dd:29:81:d8:9b:39:3c:99:13:17:
                    9c:60:1d:3e:b1:cb:f1:85:cd:69:b1:c4:c1:53:9b:
                    2b:43:56:98:7f:aa:39:bf:87:ab:8a:c3:95:2e:8a:
                    8a:45:97:d2:d8:95:fb:ee:9f:0d:0a:e7:4c:e8:76:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:2F:D7:26:89:90:A4:78:BB:71:9E:30:93:23:39:67:65:34:9C
            X509v3 Authority Key Identifier:
                keyid:6F:98:E4:34:24:84:84:53:81:01:74:55:E8:CB:0D:D2:73:19:A6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e0d8eafbf8ec194359777eb36f8559eef794db7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/204cfbf8b2e7abb1042960e0e85721889dcc4db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/7e0d8eafbf8ec194359777eb36f8559eef794db7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:b1:9c:b7:a7:76:ec:a9:8d:41:42:e8:e3:2d:db:19:e2:
         63:2f:67:d3:29:f6:2c:40:d8:33:70:87:7c:63:11:bf:87:15:
         31:54:d6:e3:0b:c1:88:d2:8e:bc:2a:e7:c4:dd:c0:13:2e:aa:
         c3:57:36:0d:1f:52:65:d3:a4:3a:46:d1:d6:9c:d6:3e:2d:5c:
         6b:36:5f:fb:0d:bb:ee:80:a0:0a:ac:07:3f:65:db:12:30:f7:
         60:9d:b6:3c:52:46:43:d4:fa:48:ba:8e:e9:71:f1:48:17:08:
         5d:25:34:ff:47:b7:f4:80:67:7e:a9:0b:36:33:c0:20:6d:8d:
         5b:15:5a:1e:03:33:00:cb:50:a3:3b:42:b1:ff:e5:31:a2:9a:
         3c:a6:47:8e:11:09:30:d2:2a:3b:6c:ca:31:21:a9:bb:42:2b:
         a8:fa:ff:8d:5e:e1:6f:70:f5:c7:7b:69:07:25:04:9f:e1:a7:
         48:b7:d1:39:9c:fb:ee:fd:2a:af:f9:b1:94:83:03:c4:6c:91:
         ad:ba:4d:b7:3f:8f:83:a6:5c:4d:a9:77:b6:56:9a:87:56:cd:
         83:e6:80:89:3b:56:f7:76:f0:a8:4c:44:87:2d:1b:67:e6:00:
         8f:2c:0b:4b:25:b2:fe:82:e8:de:63:99:c5:3d:7b:72:cb:4f:
         f2:12:7e:a0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC8EYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdl
MGQ4ZWFmYmY4ZWMxOTQzNTk3NzdlYjM2Zjg1NTllZWY3OTRkYjcwHhcNMjEwMzI0
MTQyOTUzWhcNMjYwMzI0MTQyOTUzWjAzMTEwLwYDVQQDEygyMDRjZmJmOGIyZTdh
YmIxMDQyOTYwZTBlODU3MjE4ODlkY2M0ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk+yXPD6EXYx78HQlL0LSdy4+p6PvaRq9E2Uhx+bCXsK0E1d5
KVQOcajL/JMkfWKmuyyIn9SfJ9iipw8QWf0X2wOXRv462+LR4Gz0uep9pN3fANpr
tcyqFrsJMcefX+LH3GFed4HF4QLPHQzxDsKcNajRnSmY3toIwI0vjeseINxXrOed
kbldEKm4gOrSJg+yjaRF1RcUv+j+D4Y9KgZkHMhBjgqIsNYQbeF3giBAk3w6hy5D
V9HXrDCZU1bsbTuWurjwkb1wl90pgdibOTyZExecYB0+scvxhc1pscTBU5srQ1aY
f6o5v4erisOVLoqKRZfS2JX77p8NCudM6HZ1fwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBmAL9cmiZCkeLtxnjCTIzlnZTScMB8GA1UdIwQYMBaAFG+Y5DQkhIRTgQF0
VejLDdJzGaZ6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2UwZDhl
YWZiZjhlYzE5NDM1OTc3N2ViMzZmODU1OWVlZjc5NGRiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmYwZmEyNzctZmFjNy00ZDQ1LThhOWYtNDZlMjk5
YTU1ZTJiLzIwNGNmYmY4YjJlN2FiYjEwNDI5NjBlMGU4NTcyMTg4OWRjYzRkYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZjBmYTI3Ny1mYWM3LTRkNDUtOGE5Zi00NmUy
OTlhNTVlMmIvN2UwZDhlYWZiZjhlYzE5NDM1OTc3N2ViMzZmODU1OWVlZjc5NGRi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2y9DANBgkqhkiG9w0BAQsFAAOCAQEAFq6xnLenduypjUFC
6OMt2xniYy9n0yn2LEDYM3CHfGMRv4cVMVTW4wvBiNKOvCrnxN3AEy6qw1c2DR9S
ZdOkOkbR1pzWPi1cazZf+w277oCgCqwHP2XbEjD3YJ22PFJGQ9T6SLqO6XHxSBcI
XSU0/0e39IBnfqkLNjPAIG2NWxVaHgMzAMtQoztCsf/lMaKaPKZHjhEJMNIqO2zK
MSGpu0IrqPr/jV7hb3D1x3tpByUEn+GnSLfROZz77v0qr/mxlIMDxGyRrbpNtz+P
g6ZcTal3tlaah1bNg+aAiTtW93bwqExEhy0bZ+YAjywLSyWy/oLo3mOZxT17cstP
8hJ+oA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org