Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/15f28e09e34fd56d996325236926283076da866a.roa
File:                     15f28e09e34fd56d996325236926283076da866a.roa (raw, json)
Hash identifier:          TNuBLL8cUr2saIIB8H5dym0VQkcjrhMvvMNJ0usdjPM=
Subject key identifier:   63:D0:99:79:D7:36:0B:ED:85:5E:84:A7:D2:98:D0:F4:BB:C5:D2:0D
Certificate issuer:       /CN=c08f25f3d9b765be7d5d7c635b90cf35d837805f
Certificate serial:       0C3C8E
Authority key identifier: F0:5D:78:25:DF:35:90:2C:01:80:6A:92:F2:F2:3C:1C:59:C7:08:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c08f25f3d9b765be7d5d7c635b90cf35d837805f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/15f28e09e34fd56d996325236926283076da866a.roa
Signing time:             Wed 24 Mar 2021 14:34:26 +0000
ROA not before:           Wed 24 Mar 2021 14:34:26 +0000
ROA not after:            Tue 24 Mar 2026 14:34:26 +0000
asID:                     262256
IP address blocks:        45.236.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801934 (0xc3c8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08f25f3d9b765be7d5d7c635b90cf35d837805f
        Validity
            Not Before: Mar 24 14:34:26 2021 GMT
            Not After : Mar 24 14:34:26 2026 GMT
        Subject: CN=15f28e09e34fd56d996325236926283076da866a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:49:35:ac:9a:7b:6f:78:f8:f3:f9:8f:9c:
                    a3:e4:bd:38:6c:2f:99:3f:3d:ac:ff:21:48:17:0a:
                    57:18:55:28:6f:bc:3c:07:59:dc:b7:a9:7d:e2:7c:
                    62:7f:06:c3:75:e0:fb:c5:6c:2c:fe:0e:00:b0:e2:
                    e9:c4:b5:2f:be:2c:7c:49:68:93:9e:e9:86:7c:d2:
                    fa:e5:24:63:81:17:80:dc:60:4e:63:0d:f4:18:45:
                    2a:c3:1b:46:a3:9e:d6:e8:b0:51:b2:0b:87:b1:ff:
                    73:ea:91:72:ad:65:f6:40:4b:e9:13:f0:77:71:22:
                    19:20:e0:a3:57:b6:16:47:c5:36:79:11:e4:c9:3c:
                    af:f8:40:10:65:bc:f3:32:6b:10:8e:83:d1:fc:ab:
                    75:e0:75:d0:66:91:a0:f4:c8:fb:be:fc:b1:e4:45:
                    4a:0c:8a:c4:75:95:4f:13:46:06:f0:fc:ab:2b:7e:
                    f5:4b:7c:f5:74:8e:06:c0:dc:89:63:44:34:33:bc:
                    2b:02:f4:22:53:6a:58:b1:44:23:34:e9:56:01:11:
                    bd:1f:31:07:c3:2d:aa:b2:87:28:22:e3:91:23:3d:
                    83:57:0c:0b:c7:5f:f1:b1:90:5f:f8:ce:61:47:28:
                    ea:82:0e:29:23:18:d7:e7:e8:f5:73:42:b4:5c:10:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:99:79:D7:36:0B:ED:85:5E:84:A7:D2:98:D0:F4:BB:C5:D2:0D
            X509v3 Authority Key Identifier:
                keyid:F0:5D:78:25:DF:35:90:2C:01:80:6A:92:F2:F2:3C:1C:59:C7:08:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c08f25f3d9b765be7d5d7c635b90cf35d837805f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/15f28e09e34fd56d996325236926283076da866a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/c08f25f3d9b765be7d5d7c635b90cf35d837805f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:30:49:6f:4e:cf:96:ff:d6:34:90:12:83:79:e1:8b:5c:
         71:61:88:64:ac:29:02:d0:0a:c8:b6:56:cc:6f:ab:4a:c5:a1:
         55:15:b4:c0:c5:5e:91:f7:7d:31:83:a8:f2:48:bf:32:7a:b4:
         4a:aa:8f:f7:6c:5b:5e:43:73:cc:6b:09:d0:94:e9:06:a7:ad:
         30:ac:ba:43:ec:88:1d:5b:65:e3:c9:dc:39:db:d3:ca:57:9f:
         a5:27:35:49:97:ce:84:56:c5:d7:85:02:76:f9:e9:0a:a9:66:
         c4:50:2e:0d:b3:31:3d:6e:8e:56:d5:a7:3a:d1:4e:4b:37:d4:
         0a:e2:b5:59:aa:42:a5:4d:a2:29:61:a6:fd:84:f0:5a:e5:fb:
         bf:10:57:04:52:7a:d9:48:38:fc:bb:ea:bd:8f:55:4d:9a:85:
         9e:8c:ef:31:25:ef:f1:26:c0:64:a9:b7:46:61:f7:52:96:34:
         e2:0e:69:25:fc:ee:49:68:57:e0:cf:88:d8:1e:76:86:ac:70:
         42:42:0d:d5:57:fc:96:af:9d:cf:90:f1:9f:b7:84:a8:03:4b:
         e0:24:33:6b:dd:ad:0c:c6:10:9b:5b:28:4c:89:f6:4a:5f:37:
         e5:a3:d4:10:43:85:8e:8d:ab:82:50:37:74:ed:3e:40:e1:c6:
         e1:e7:16:91
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDyOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
OGYyNWYzZDliNzY1YmU3ZDVkN2M2MzViOTBjZjM1ZDgzNzgwNWYwHhcNMjEwMzI0
MTQzNDI2WhcNMjYwMzI0MTQzNDI2WjAzMTEwLwYDVQQDEygxNWYyOGUwOWUzNGZk
NTZkOTk2MzI1MjM2OTI2MjgzMDc2ZGE4NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxf5JNayae294+PP5j5yj5L04bC+ZPz2s/yFIFwpXGFUob7w8
B1nct6l94nxifwbDdeD7xWws/g4AsOLpxLUvvix8SWiTnumGfNL65SRjgReA3GBO
Yw30GEUqwxtGo57W6LBRsguHsf9z6pFyrWX2QEvpE/B3cSIZIOCjV7YWR8U2eRHk
yTyv+EAQZbzzMmsQjoPR/Kt14HXQZpGg9Mj7vvyx5EVKDIrEdZVPE0YG8PyrK371
S3z1dI4GwNyJY0Q0M7wrAvQiU2pYsUQjNOlWARG9HzEHwy2qsocoIuORIz2DVwwL
x1/xsZBf+M5hRyjqgg4pIxjX5+j1c0K0XBAMiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGPQmXnXNgvthV6Ep9KY0PS7xdINMB8GA1UdIwQYMBaAFPBdeCXfNZAsAYBq
kvLyPBxZxwgYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzA4ZjI1
ZjNkOWI3NjViZTdkNWQ3YzYzNWI5MGNmMzVkODM3ODA1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzA3OWI2ZjktZDE4My00MDhmLWFkMWMtMGE1OTg3
NTBmMzM1LzE1ZjI4ZTA5ZTM0ZmQ1NmQ5OTYzMjUyMzY5MjYyODMwNzZkYTg2NmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMDc5YjZmOS1kMTgzLTQwOGYtYWQxYy0wYTU5
ODc1MGYzMzUvYzA4ZjI1ZjNkOWI3NjViZTdkNWQ3YzYzNWI5MGNmMzVkODM3ODA1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3spDANBgkqhkiG9w0BAQsFAAOCAQEAcU0wSW9Oz5b/1jSQ
EoN54YtccWGIZKwpAtAKyLZWzG+rSsWhVRW0wMVekfd9MYOo8ki/Mnq0SqqP92xb
XkNzzGsJ0JTpBqetMKy6Q+yIHVtl48ncOdvTylefpSc1SZfOhFbF14UCdvnpCqlm
xFAuDbMxPW6OVtWnOtFOSzfUCuK1WapCpU2iKWGm/YTwWuX7vxBXBFJ62Ug4/Lvq
vY9VTZqFnozvMSXv8SbAZKm3RmH3UpY04g5pJfzuSWhX4M+I2B52hqxwQkIN1Vf8
lq+dz5Dxn7eEqANL4CQza92tDMYQm1soTIn2Sl835aPUEEOFjo2rglA3dO0+QOHG
4ecWkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org