Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8344491-c403-47ef-963c-c9bf0e20883e/e2aa76a06108c7301205a25c87a88818c3a48a5e.roa
File:                     e2aa76a06108c7301205a25c87a88818c3a48a5e.roa (raw, json)
Hash identifier:          HQeovtc/Sx4oPr+7ijLI55OxUujJo95Cv9+woYAsBmY=
Subject key identifier:   E4:BD:22:99:95:C4:E3:8B:9A:E4:24:23:EF:D4:09:98:96:79:56:F3
Certificate issuer:       /CN=b226555266b68a56e58b9d25fc5c3b5eb6a07ac1
Certificate serial:       25A77F
Authority key identifier: 40:9A:05:0B:D8:81:12:F2:24:0F:FC:A3:AE:6A:4A:ED:F8:44:59:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b226555266b68a56e58b9d25fc5c3b5eb6a07ac1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8344491-c403-47ef-963c-c9bf0e20883e/e2aa76a06108c7301205a25c87a88818c3a48a5e.roa
Signing time:             Mon 11 Mar 2024 13:46:33 +0000
ROA not before:           Mon 11 Mar 2024 13:46:33 +0000
ROA not after:            Wed 11 Mar 2026 13:46:33 +0000
asID:                     267827
IP address blocks:        45.173.181.0/24 maxlen: 24
                          45.173.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467711 (0x25a77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b226555266b68a56e58b9d25fc5c3b5eb6a07ac1
        Validity
            Not Before: Mar 11 13:46:33 2024 GMT
            Not After : Mar 11 13:46:33 2026 GMT
        Subject: CN=e2aa76a06108c7301205a25c87a88818c3a48a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:3a:6e:bd:5a:6c:6b:05:91:51:8f:f7:75:
                    93:55:88:b6:d2:98:cf:7b:16:3f:bd:75:dd:ae:50:
                    93:e2:08:53:af:92:30:43:5d:bc:3d:67:6c:57:51:
                    f3:8a:b7:01:75:a3:38:c8:db:f6:a2:07:cb:0f:a8:
                    2e:b5:6e:92:ac:b3:fc:13:e2:16:1b:2e:6e:ec:e6:
                    4d:39:02:2f:9d:ae:c2:f1:0d:cd:b7:9f:8e:aa:e8:
                    a3:89:cc:75:f5:81:fc:44:f8:94:11:e3:b1:4d:e9:
                    21:93:f6:99:5b:c0:6d:40:f1:c9:00:80:13:ab:4a:
                    02:dc:89:f7:ac:c6:02:66:70:1b:f8:59:11:85:a8:
                    be:82:52:f9:32:40:9c:33:74:88:b2:0c:51:08:2b:
                    ba:d2:87:ba:bc:c3:b6:88:91:a8:39:6d:96:c5:c1:
                    37:19:56:d0:46:93:33:88:2a:29:cd:bc:d4:c1:e0:
                    bf:1f:df:c8:2a:bf:65:37:63:d0:36:0a:eb:34:15:
                    c2:cd:45:c3:cd:4f:30:e0:e3:ef:0f:ae:7d:0c:b6:
                    19:25:f8:27:1e:82:c8:44:d4:33:fd:4d:c2:73:64:
                    99:7c:6f:c2:1f:2d:e4:a5:40:15:a6:85:88:a3:00:
                    49:ac:94:36:4c:ab:82:f7:b1:af:ec:88:af:df:c5:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BD:22:99:95:C4:E3:8B:9A:E4:24:23:EF:D4:09:98:96:79:56:F3
            X509v3 Authority Key Identifier:
                keyid:40:9A:05:0B:D8:81:12:F2:24:0F:FC:A3:AE:6A:4A:ED:F8:44:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b226555266b68a56e58b9d25fc5c3b5eb6a07ac1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8344491-c403-47ef-963c-c9bf0e20883e/e2aa76a06108c7301205a25c87a88818c3a48a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8344491-c403-47ef-963c-c9bf0e20883e/b226555266b68a56e58b9d25fc5c3b5eb6a07ac1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.181.0-45.173.183.255

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:f2:80:87:2c:6f:62:cc:46:f3:fa:82:33:5e:60:73:2e:
         db:9b:67:30:d0:a0:7d:2b:b7:90:10:68:e4:8e:15:f0:c0:33:
         09:da:fd:01:9a:d4:ac:cf:5e:14:aa:cf:f6:48:aa:9a:8d:83:
         50:05:a5:16:b4:a7:a1:0e:12:a3:69:a2:59:89:1d:d5:2e:0c:
         7f:0a:eb:ba:a7:cf:18:8e:73:72:ee:b7:a5:dd:aa:27:f4:d0:
         43:66:67:62:60:83:0a:c3:b0:9f:f5:17:d7:9e:f7:89:54:f8:
         c8:3f:c7:7e:f2:dc:d7:43:1f:90:8c:45:42:db:31:6d:f6:5d:
         95:cb:57:1f:02:16:90:50:b4:5e:16:a6:ee:f2:30:64:0d:c1:
         3a:81:f1:74:a6:94:98:ca:48:9f:a7:9b:c9:b0:68:cb:46:8a:
         bb:93:d9:30:1c:7f:da:8d:6a:11:e6:3c:10:65:2a:50:fd:be:
         40:55:d3:d3:41:9e:09:0f:2e:dc:f0:61:14:c5:db:d2:c2:df:
         83:bf:2f:c4:92:1d:56:7c:ab:3f:eb:41:56:2b:09:5f:9c:9c:
         35:3a:d0:1a:9e:b4:1d:23:0a:2b:00:7c:ac:de:52:48:df:64:
         11:3d:bf:4a:13:5f:d0:23:74:74:75:4b:ef:59:9a:6b:2e:79:
         ab:bb:0e:67
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJad/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
MjY1NTUyNjZiNjhhNTZlNThiOWQyNWZjNWMzYjVlYjZhMDdhYzEwHhcNMjQwMzEx
MTM0NjMzWhcNMjYwMzExMTM0NjMzWjAzMTEwLwYDVQQDEyhlMmFhNzZhMDYxMDhj
NzMwMTIwNWEyNWM4N2E4ODgxOGMzYTQ4YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsHA6br1abGsFkVGP93WTVYi20pjPexY/vXXdrlCT4ghTr5Iw
Q128PWdsV1HzircBdaM4yNv2ogfLD6gutW6SrLP8E+IWGy5u7OZNOQIvna7C8Q3N
t5+Oquijicx19YH8RPiUEeOxTekhk/aZW8BtQPHJAIATq0oC3In3rMYCZnAb+FkR
hai+glL5MkCcM3SIsgxRCCu60oe6vMO2iJGoOW2WxcE3GVbQRpMziCopzbzUweC/
H9/IKr9lN2PQNgrrNBXCzUXDzU8w4OPvD659DLYZJfgnHoLIRNQz/U3Cc2SZfG/C
Hy3kpUAVpoWIowBJrJQ2TKuC97Gv7Iiv38UnOwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFOS9IpmVxOOLmuQkI+/UCZiWeVbzMB8GA1UdIwQYMBaAFECaBQvYgRLyJA/8
o65qSu34RFkmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjIyNjU1
NTI2NmI2OGE1NmU1OGI5ZDI1ZmM1YzNiNWViNmEwN2FjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzgzNDQ0OTEtYzQwMy00N2VmLTk2M2MtYzliZjBl
MjA4ODNlL2UyYWE3NmEwNjEwOGM3MzAxMjA1YTI1Yzg3YTg4ODE4YzNhNDhhNWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jODM0NDQ5MS1jNDAzLTQ3ZWYtOTYzYy1jOWJm
MGUyMDg4M2UvYjIyNjU1NTI2NmI2OGE1NmU1OGI5ZDI1ZmM1YzNiNWViNmEwN2Fj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQALa21AwQDLa2wMA0GCSqGSIb3DQEBCwUAA4IBAQCo8/KA
hyxvYsxG8/qCM15gcy7bm2cw0KB9K7eQEGjkjhXwwDMJ2v0BmtSsz14Uqs/2SKqa
jYNQBaUWtKehDhKjaaJZiR3VLgx/Cuu6p88YjnNy7rel3aon9NBDZmdiYIMKw7Cf
9RfXnveJVPjIP8d+8tzXQx+QjEVC2zFt9l2Vy1cfAhaQULReFqbu8jBkDcE6gfF0
ppSYykifp5vJsGjLRoq7k9kwHH/ajWoR5jwQZSpQ/b5AVdPTQZ4JDy7c8GEUxdvS
wt+Dvy/Ekh1WfKs/60FWKwlfnJw1OtAanrQdIworAHys3lJI32QRPb9KE1/QI3R0
dUvvWZprLnmruw5n
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org