Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/4f25826710a80e2b98dec2d83bcbdc0d5b6587f3.roa
File:                     4f25826710a80e2b98dec2d83bcbdc0d5b6587f3.roa (raw, json)
Hash identifier:          IvFpzzMmOh3Au7VaFIX/L/iEpvissvV/SJ5f/1lZBdY=
Subject key identifier:   88:70:FE:50:BA:8B:2C:FA:41:4F:43:D0:5F:84:2B:4D:86:05:E3:D9
Certificate issuer:       /CN=64daa546b0663d582c6137e0c391bcdba2b81350
Certificate serial:       139B
Authority key identifier: 24:12:29:DE:8F:2E:8F:FB:61:F9:0E:08:B4:D2:1F:7B:10:9A:AC:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64daa546b0663d582c6137e0c391bcdba2b81350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/4f25826710a80e2b98dec2d83bcbdc0d5b6587f3.roa
Signing time:             Mon 05 Jun 2023 00:39:03 +0000
ROA not before:           Sun 04 Jun 2023 00:39:03 +0000
ROA not after:            Thu 05 Jun 2025 00:39:03 +0000
asID:                     265816
IP address blocks:        45.239.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5019 (0x139b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64daa546b0663d582c6137e0c391bcdba2b81350
        Validity
            Not Before: Jun  4 00:39:03 2023 GMT
            Not After : Jun  5 00:39:03 2025 GMT
        Subject: CN=4f25826710a80e2b98dec2d83bcbdc0d5b6587f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:68:a5:4b:a7:bd:52:cc:6a:32:f7:85:82:
                    71:b2:c6:18:d0:6f:a8:32:12:7e:11:db:d5:0c:db:
                    19:a8:31:d2:0e:a4:2e:3d:3b:04:06:e8:f5:a5:9a:
                    f5:8e:5b:eb:c2:93:25:7e:47:dd:25:9f:a8:0f:c1:
                    e8:69:1d:0d:9f:97:90:78:e6:8c:e2:f5:71:13:31:
                    42:30:d1:92:43:a5:37:24:ca:3a:12:d9:f5:46:99:
                    a6:bf:73:a0:7e:24:23:e5:d6:ff:84:c1:99:93:b8:
                    6d:eb:bc:c8:33:8c:26:28:d0:e1:f8:39:98:3c:89:
                    fa:b9:eb:22:f9:c0:92:ec:32:94:7a:2e:1f:e1:df:
                    91:9b:6c:44:ae:d0:93:8d:45:f4:be:8b:89:3b:f8:
                    41:9e:31:85:62:db:db:d9:c9:db:b0:3a:c5:bf:db:
                    e4:a8:de:f0:6a:54:f1:e2:43:8d:a3:a0:56:3b:d8:
                    12:ac:f1:2c:6b:ef:76:e2:47:1f:a4:c7:83:99:17:
                    4c:8c:7b:04:2b:10:21:c6:39:fe:7a:40:bc:81:0e:
                    71:48:c8:ba:73:4d:c5:98:62:e9:54:1b:86:1b:f3:
                    bd:d0:e2:5c:74:92:e5:91:d6:b0:c5:b4:29:93:fe:
                    be:96:ce:71:0d:78:09:80:5d:ee:e3:00:8c:06:9c:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:FE:50:BA:8B:2C:FA:41:4F:43:D0:5F:84:2B:4D:86:05:E3:D9
            X509v3 Authority Key Identifier:
                keyid:24:12:29:DE:8F:2E:8F:FB:61:F9:0E:08:B4:D2:1F:7B:10:9A:AC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64daa546b0663d582c6137e0c391bcdba2b81350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/4f25826710a80e2b98dec2d83bcbdc0d5b6587f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/64daa546b0663d582c6137e0c391bcdba2b81350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:6b:ff:f1:06:22:0d:5d:20:d2:77:ec:f4:1b:85:d9:74:
         78:fc:74:39:7d:4a:c9:8d:a7:2f:95:00:16:f3:13:99:c4:88:
         8c:3a:3a:42:2d:fe:14:c7:c8:23:c5:ab:89:b0:36:98:c5:84:
         e3:68:d9:24:42:75:43:9c:41:0f:12:6c:23:ff:88:6a:20:9f:
         f7:9e:ee:17:20:17:4a:cf:84:db:cc:b2:59:30:f8:37:c3:16:
         1c:da:a6:aa:1a:2d:ae:61:6e:5b:cb:21:4d:d9:34:bb:12:1b:
         31:85:1d:ef:08:ce:e3:42:19:fc:df:ea:01:a2:17:e7:4a:d3:
         a5:5f:f9:e5:66:9a:ae:e9:6f:0b:0d:93:17:02:be:7d:6a:87:
         6d:c7:4c:61:33:17:94:c3:24:1e:3a:2e:67:99:df:ac:64:7b:
         dc:e8:09:1d:d5:5f:a9:72:6e:69:29:de:cd:89:3a:0d:5b:4f:
         30:94:57:c3:40:2c:48:10:c0:0a:a0:77:7a:95:7a:e3:c8:ac:
         76:c0:81:94:26:ec:66:70:09:a2:1c:ec:24:42:17:84:3c:61:
         f4:7a:29:80:80:e8:8d:00:9c:4c:8e:59:97:64:9c:54:ba:ec:
         7e:cd:be:88:05:d9:2a:52:65:d4:3c:12:41:17:41:46:e0:20:
         c1:e2:65:f0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICE5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRk
YWE1NDZiMDY2M2Q1ODJjNjEzN2UwYzM5MWJjZGJhMmI4MTM1MDAeFw0yMzA2MDQw
MDM5MDNaFw0yNTA2MDUwMDM5MDNaMDMxMTAvBgNVBAMTKDRmMjU4MjY3MTBhODBl
MmI5OGRlYzJkODNiY2JkYzBkNWI2NTg3ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAC2ilS6e9UsxqMveFgnGyxhjQb6gyEn4R29UM2xmoMdIOpC49
OwQG6PWlmvWOW+vCkyV+R90ln6gPwehpHQ2fl5B45ozi9XETMUIw0ZJDpTckyjoS
2fVGmaa/c6B+JCPl1v+EwZmTuG3rvMgzjCYo0OH4OZg8ifq56yL5wJLsMpR6Lh/h
35GbbESu0JONRfS+i4k7+EGeMYVi29vZyduwOsW/2+So3vBqVPHiQ42joFY72BKs
8Sxr73biRx+kx4OZF0yMewQrECHGOf56QLyBDnFIyLpzTcWYYulUG4Yb873Q4lx0
kuWR1rDFtCmT/r6WznENeAmAXe7jAIwGnMkFAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUiHD+ULqLLPpBT0PQX4QrTYYF49kwHwYDVR0jBBgwFoAUJBIp3o8uj/th+Q4I
tNIfexCarIkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82NGRhYTU0
NmIwNjYzZDU4MmM2MTM3ZTBjMzkxYmNkYmEyYjgxMzUwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9jOThjYjgwYy0yY2ZlLTQ0NDgtYmY0Ni01ZmE2M2Q5
NjczMDEvNGYyNTgyNjcxMGE4MGUyYjk4ZGVjMmQ4M2JjYmRjMGQ1YjY1ODdmMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2M5OGNiODBjLTJjZmUtNDQ0OC1iZjQ2LTVmYTYz
ZDk2NzMwMS82NGRhYTU0NmIwNjYzZDU4MmM2MTM3ZTBjMzkxYmNkYmEyYjgxMzUw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLe8kMA0GCSqGSIb3DQEBCwUAA4IBAQAXPGv/8QYiDV0g0nfs
9BuF2XR4/HQ5fUrJjacvlQAW8xOZxIiMOjpCLf4Ux8gjxauJsDaYxYTjaNkkQnVD
nEEPEmwj/4hqIJ/3nu4XIBdKz4TbzLJZMPg3wxYc2qaqGi2uYW5byyFN2TS7Ehsx
hR3vCM7jQhn83+oBohfnStOlX/nlZpqu6W8LDZMXAr59aodtx0xhMxeUwyQeOi5n
md+sZHvc6Akd1V+pcm5pKd7NiToNW08wlFfDQCxIEMAKoHd6lXrjyKx2wIGUJuxm
cAmiHOwkQheEPGH0eimAgOiNAJxMjlmXZJxUuux+zb6IBdkqUmXUPBJBF0FG4CDB
4mXw
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org