Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/8e24bada622bcc95a96206349c70b010d10082dd.roa
File:                     8e24bada622bcc95a96206349c70b010d10082dd.roa (raw, json)
Hash identifier:          DRu1IpP9EAHc58cs+NLsrRLIPUxLwgygMn0DpDEAfDI=
Subject key identifier:   9F:FE:03:93:0A:BB:C6:43:EC:6F:3E:5D:59:76:55:75:60:F2:8D:03
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0D09BB
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/8e24bada622bcc95a96206349c70b010d10082dd.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.62.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854459 (0xd09bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=8e24bada622bcc95a96206349c70b010d10082dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:ff:58:14:de:2c:cd:3b:57:21:31:c0:32:
                    c9:05:71:0e:34:d2:72:75:85:9d:c5:ab:54:95:be:
                    1f:5d:79:b0:e4:b9:fe:a2:78:9c:4e:22:87:e5:20:
                    90:d4:62:95:20:0a:25:b9:43:e8:c4:8e:53:f0:9c:
                    24:6b:12:80:76:28:89:a1:ce:35:11:73:b0:80:03:
                    76:13:8b:1a:c5:b7:28:93:7c:9d:7f:a3:c1:8d:91:
                    a9:cf:39:d2:0a:03:fd:56:3f:ad:13:60:1a:01:38:
                    a1:5b:f0:4a:a1:e3:23:35:cb:dc:59:61:d4:ee:e4:
                    93:e5:81:44:3d:40:8c:1c:62:c2:56:4c:aa:74:fc:
                    f6:5f:b3:76:21:6a:7f:e8:64:af:f0:82:ac:f6:e3:
                    d2:19:7f:23:b4:a9:9d:64:90:bc:6f:84:23:94:56:
                    4d:f0:13:9e:ac:29:14:4f:07:00:35:1a:d8:08:58:
                    32:6c:fa:ad:60:0d:51:c5:51:9f:01:8f:4b:65:fc:
                    4f:d4:ea:4f:46:c0:43:75:b0:63:4a:96:c4:d8:b3:
                    15:e9:79:64:13:bf:d6:ec:c8:0b:91:3f:a8:7c:e9:
                    28:3c:11:59:56:e7:a4:20:8c:73:4c:bd:57:93:23:
                    9e:11:00:26:d1:01:5f:70:fd:b0:53:1d:82:c3:8c:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:03:93:0A:BB:C6:43:EC:6F:3E:5D:59:76:55:75:60:F2:8D:03
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/8e24bada622bcc95a96206349c70b010d10082dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:01:3f:ed:fb:ad:ef:ea:1f:a9:aa:e1:77:1e:de:3b:48:e8:
         df:61:85:1e:6f:4c:d8:a9:e7:ba:ac:2b:27:5f:18:7f:44:43:
         a0:60:1b:fa:31:97:33:b7:c4:22:e8:bb:d7:88:bd:73:c7:1b:
         1b:22:32:75:a2:9b:4d:74:32:cf:5e:18:9e:9e:cb:60:0b:21:
         7c:c2:57:8e:01:3c:97:7c:53:c4:ff:f2:e7:d1:29:02:84:76:
         ad:9c:14:bc:a1:03:8d:07:e0:d9:53:e1:81:f1:78:7e:b2:42:
         1e:56:db:3f:5a:85:11:4a:e8:ab:b6:a0:12:d8:af:07:a5:3b:
         02:b4:11:e6:75:9d:b9:2d:12:c9:4a:46:24:bd:cc:97:45:09:
         8f:18:01:13:43:0c:bc:0b:b5:d9:e3:ae:4b:09:f8:74:0e:14:
         ef:79:88:0a:db:48:aa:8f:13:08:fa:80:9f:05:be:c3:54:df:
         31:3e:c5:15:9f:68:db:80:b9:b1:79:6e:84:f0:8d:57:0e:13:
         48:39:20:49:75:59:30:1d:e5:7e:09:bb:ad:9e:14:e0:55:c4:
         d0:5f:91:7b:83:9c:67:87:34:78:8d:8d:2a:d4:54:05:ea:f6:
         8f:91:f1:a6:c7:99:9b:17:62:54:48:d9:0a:04:e6:1e:39:86:
         4e:69:d2:63
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDQm7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRj
M2NkNWY5Zjk5NDQ5YTlkNWM0MTViYjk3NmJmMzY4ZDg3Nzc2ZDkwHhcNMjEwMzI0
MTQzMTUxWhcNMjYwMzI0MTQzMTUxWjAzMTEwLwYDVQQDEyg4ZTI0YmFkYTYyMmJj
Yzk1YTk2MjA2MzQ5YzcwYjAxMGQxMDA4MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArUb/WBTeLM07VyExwDLJBXEONNJydYWdxatUlb4fXXmw5Ln+
onicTiKH5SCQ1GKVIAoluUPoxI5T8JwkaxKAdiiJoc41EXOwgAN2E4saxbcok3yd
f6PBjZGpzznSCgP9Vj+tE2AaATihW/BKoeMjNcvcWWHU7uST5YFEPUCMHGLCVkyq
dPz2X7N2IWp/6GSv8IKs9uPSGX8jtKmdZJC8b4QjlFZN8BOerCkUTwcANRrYCFgy
bPqtYA1RxVGfAY9LZfxP1OpPRsBDdbBjSpbE2LMV6XlkE7/W7MgLkT+ofOkoPBFZ
VuekIIxzTL1XkyOeEQAm0QFfcP2wUx2Cw4xwhwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ/+A5MKu8ZD7G8+XVl2VXVg8o0DMB8GA1UdIwQYMBaAFCO2d8PZ3qvpcEcx
MtoTmn4o/zVNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGMzY2Q1
ZjlmOTk0NDlhOWQ1YzQxNWJiOTc2YmYzNjhkODc3NzZkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzFiNWNkMGMtY2ZjZC00ZDU0LThkZjYtNGQ4Zjdh
YWI0ODZmLzhlMjRiYWRhNjIyYmNjOTVhOTYyMDYzNDljNzBiMDEwZDEwMDgyZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMWI1Y2QwYy1jZmNkLTRkNTQtOGRmNi00ZDhm
N2FhYjQ4NmYvNGMzY2Q1ZjlmOTk0NDlhOWQ1YzQxNWJiOTc2YmYzNjhkODc3NzZk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2iPjANBgkqhkiG9w0BAQsFAAOCAQEAdAE/7fut7+ofqarh
dx7eO0jo32GFHm9M2KnnuqwrJ18Yf0RDoGAb+jGXM7fEIui714i9c8cbGyIydaKb
TXQyz14Ynp7LYAshfMJXjgE8l3xTxP/y59EpAoR2rZwUvKEDjQfg2VPhgfF4frJC
HlbbP1qFEUroq7agEtivB6U7ArQR5nWduS0SyUpGJL3Ml0UJjxgBE0MMvAu12eOu
Swn4dA4U73mICttIqo8TCPqAnwW+w1TfMT7FFZ9o24C5sXluhPCNVw4TSDkgSXVZ
MB3lfgm7rZ4U4FXE0F+Re4OcZ4c0eI2NKtRUBer2j5HxpseZmxdiVEjZCgTmHjmG
TmnSYw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org