Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/31e4c99da3650c06953d66811ace691b7be7e09b.roa
File:                     31e4c99da3650c06953d66811ace691b7be7e09b.roa (raw, json)
Hash identifier:          vYxNdS5fB+N78aKv92B69MiFB8HEfbPACHFUpJS7WNk=
Subject key identifier:   2A:4F:54:D7:F2:68:A4:98:A8:96:D7:B3:7B:DE:78:DB:4D:36:4B:D6
Certificate issuer:       /CN=7e0d8eafbf8ec194359777eb36f8559eef794db7
Certificate serial:       0BBFC2
Authority key identifier: 6F:98:E4:34:24:84:84:53:81:01:74:55:E8:CB:0D:D2:73:19:A6:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e0d8eafbf8ec194359777eb36f8559eef794db7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/31e4c99da3650c06953d66811ace691b7be7e09b.roa
Signing time:             Wed 24 Mar 2021 14:29:53 +0000
ROA not before:           Wed 24 Mar 2021 14:29:53 +0000
ROA not after:            Tue 24 Mar 2026 14:29:53 +0000
asID:                     267915
IP address blocks:        45.178.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769986 (0xbbfc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0d8eafbf8ec194359777eb36f8559eef794db7
        Validity
            Not Before: Mar 24 14:29:53 2021 GMT
            Not After : Mar 24 14:29:53 2026 GMT
        Subject: CN=31e4c99da3650c06953d66811ace691b7be7e09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:9f:58:09:1b:0a:a5:13:c8:5e:e8:ef:02:
                    ac:84:c9:cb:8b:7a:bc:12:8f:1f:f0:c7:ed:4f:0d:
                    ea:c1:76:dc:33:45:7d:a1:5d:55:ba:0a:1e:40:cf:
                    0f:d0:e9:25:63:ff:82:c9:7d:39:5b:53:95:2a:f7:
                    d4:67:63:12:5e:3c:b2:75:52:b2:cc:a3:53:cd:b5:
                    67:ac:62:5a:cd:22:2c:c6:e4:69:de:a7:79:51:1d:
                    ff:85:6b:7b:1d:a6:0f:34:c6:f3:3b:1b:76:e0:d2:
                    90:91:cf:89:55:a2:29:d7:e9:2e:f8:25:65:a8:7a:
                    7c:76:36:ce:aa:16:ec:ec:2c:c5:20:0b:65:50:1a:
                    a8:ec:b4:4f:86:a4:b9:16:ec:a4:a1:a5:72:52:45:
                    00:19:ec:fe:c8:8d:ca:47:d1:1e:cd:f4:74:2b:07:
                    38:96:c4:a8:73:2b:86:b0:4b:e3:00:96:68:26:7d:
                    6b:64:ab:99:ca:52:38:01:6f:89:48:21:bb:44:6c:
                    35:1d:63:57:f8:32:a0:ab:21:ab:64:fd:47:f3:be:
                    4c:d2:4e:a5:27:d4:80:f9:2e:f7:95:5e:d6:f2:dc:
                    ef:8f:9a:a5:47:4f:02:ee:45:5a:a8:fd:5f:ec:12:
                    ba:e5:63:dc:59:b0:8a:1d:4e:2a:70:13:ef:be:b7:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4F:54:D7:F2:68:A4:98:A8:96:D7:B3:7B:DE:78:DB:4D:36:4B:D6
            X509v3 Authority Key Identifier:
                keyid:6F:98:E4:34:24:84:84:53:81:01:74:55:E8:CB:0D:D2:73:19:A6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e0d8eafbf8ec194359777eb36f8559eef794db7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/31e4c99da3650c06953d66811ace691b7be7e09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/7e0d8eafbf8ec194359777eb36f8559eef794db7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:88:72:0c:2f:83:62:bb:c9:38:e4:6a:cf:22:7a:0a:c8:4c:
         08:96:28:ec:08:42:57:64:a6:86:70:fb:86:6b:59:b8:d0:08:
         5f:6f:63:04:d5:9e:49:e8:8e:3a:fc:cf:d8:34:57:28:98:fb:
         29:7a:d4:22:09:1e:01:f5:91:a3:e9:1a:76:0f:ee:e5:a2:ee:
         ea:37:86:25:83:2d:13:d8:2e:dc:32:99:8d:19:8e:82:94:59:
         74:ee:b4:19:12:32:c8:20:d6:cf:1e:a0:af:81:0d:22:bd:a6:
         69:49:3e:e9:a4:da:c7:5c:17:6c:92:22:01:82:bf:d5:54:9f:
         1e:60:41:50:1c:1f:dd:23:5f:ee:cd:62:41:c8:5c:b4:76:48:
         18:fd:4d:64:df:5d:dd:02:5a:0a:2a:14:89:7a:b5:0f:80:3c:
         8e:93:0c:74:0b:b0:d3:2b:76:83:25:db:a9:c4:6c:29:ed:0f:
         30:b4:ec:79:94:7c:6a:ca:a2:40:27:d8:76:89:40:8a:81:b0:
         91:f2:60:5e:63:53:af:8d:88:26:03:e7:93:66:c5:d5:fe:a4:
         c0:b8:1d:2a:c0:16:8b:e2:a2:66:7f:c0:01:d7:cd:fe:bc:b3:
         31:64:9d:23:3e:b7:c2:3b:1b:02:c2:52:1c:a1:1e:e8:bb:a4:
         4c:ef:8b:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC7/CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdl
MGQ4ZWFmYmY4ZWMxOTQzNTk3NzdlYjM2Zjg1NTllZWY3OTRkYjcwHhcNMjEwMzI0
MTQyOTUzWhcNMjYwMzI0MTQyOTUzWjAzMTEwLwYDVQQDEygzMWU0Yzk5ZGEzNjUw
YzA2OTUzZDY2ODExYWNlNjkxYjdiZTdlMDliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjemfWAkbCqUTyF7o7wKshMnLi3q8Eo8f8MftTw3qwXbcM0V9
oV1VugoeQM8P0OklY/+CyX05W1OVKvfUZ2MSXjyydVKyzKNTzbVnrGJazSIsxuRp
3qd5UR3/hWt7HaYPNMbzOxt24NKQkc+JVaIp1+ku+CVlqHp8djbOqhbs7CzFIAtl
UBqo7LRPhqS5FuykoaVyUkUAGez+yI3KR9EezfR0Kwc4lsSocyuGsEvjAJZoJn1r
ZKuZylI4AW+JSCG7RGw1HWNX+DKgqyGrZP1H875M0k6lJ9SA+S73lV7W8tzvj5ql
R08C7kVaqP1f7BK65WPcWbCKHU4qcBPvvrdejQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCpPVNfyaKSYqJbXs3veeNtNNkvWMB8GA1UdIwQYMBaAFG+Y5DQkhIRTgQF0
VejLDdJzGaZ6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2UwZDhl
YWZiZjhlYzE5NDM1OTc3N2ViMzZmODU1OWVlZjc5NGRiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmYwZmEyNzctZmFjNy00ZDQ1LThhOWYtNDZlMjk5
YTU1ZTJiLzMxZTRjOTlkYTM2NTBjMDY5NTNkNjY4MTFhY2U2OTFiN2JlN2UwOWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZjBmYTI3Ny1mYWM3LTRkNDUtOGE5Zi00NmUy
OTlhNTVlMmIvN2UwZDhlYWZiZjhlYzE5NDM1OTc3N2ViMzZmODU1OWVlZjc5NGRi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2y9DANBgkqhkiG9w0BAQsFAAOCAQEAKYhyDC+DYrvJOORq
zyJ6CshMCJYo7AhCV2SmhnD7hmtZuNAIX29jBNWeSeiOOvzP2DRXKJj7KXrUIgke
AfWRo+kadg/u5aLu6jeGJYMtE9gu3DKZjRmOgpRZdO60GRIyyCDWzx6gr4ENIr2m
aUk+6aTax1wXbJIiAYK/1VSfHmBBUBwf3SNf7s1iQchctHZIGP1NZN9d3QJaCioU
iXq1D4A8jpMMdAuw0yt2gyXbqcRsKe0PMLTseZR8asqiQCfYdolAioGwkfJgXmNT
r42IJgPnk2bF1f6kwLgdKsAWi+KiZn/AAdfN/ryzMWSdIz63wjsbAsJSHKEe6Luk
TO+L3g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org