Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/66a80c92c9e48ce52213e5c5d62dd45be94c1794.roa
File:                     66a80c92c9e48ce52213e5c5d62dd45be94c1794.roa (raw, json)
Hash identifier:          rfWncELbJpgaeHok72C7TsWYxWaGfjPG8IkvOVtsKZE=
Subject key identifier:   01:73:22:CB:A2:62:1C:6F:6E:3E:D3:90:C3:2B:D8:54:B7:15:BB:08
Certificate issuer:       /CN=64daa546b0663d582c6137e0c391bcdba2b81350
Certificate serial:       0C77
Authority key identifier: 24:12:29:DE:8F:2E:8F:FB:61:F9:0E:08:B4:D2:1F:7B:10:9A:AC:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64daa546b0663d582c6137e0c391bcdba2b81350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/66a80c92c9e48ce52213e5c5d62dd45be94c1794.roa
Signing time:             Mon 05 Jun 2023 00:38:07 +0000
ROA not before:           Sun 04 Jun 2023 00:38:07 +0000
ROA not after:            Thu 05 Jun 2025 00:38:07 +0000
asID:                     266871
IP address blocks:        45.239.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64daa546b0663d582c6137e0c391bcdba2b81350
        Validity
            Not Before: Jun  4 00:38:07 2023 GMT
            Not After : Jun  5 00:38:07 2025 GMT
        Subject: CN=66a80c92c9e48ce52213e5c5d62dd45be94c1794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:3d:6a:b5:02:12:fa:42:ee:4f:1d:82:9b:
                    37:dd:0c:ad:c1:2d:86:b2:8e:68:99:19:2d:9d:03:
                    81:d8:c5:13:29:6d:bc:a2:15:38:03:8a:09:50:c3:
                    20:46:f1:3f:d2:50:9a:a5:08:5b:8f:a0:eb:c3:d1:
                    12:ec:e4:cc:20:c6:b0:d6:02:25:81:3b:56:70:cd:
                    00:88:2a:e5:d8:84:c3:c8:55:a4:2f:f7:09:dc:4f:
                    37:92:23:fd:97:bd:91:92:3e:9b:6a:b1:b6:9c:37:
                    8e:a4:24:cd:c5:a0:58:cc:ab:ed:b6:2b:0f:10:97:
                    6f:1d:f7:e9:bc:1d:6d:be:f3:00:f0:6a:e8:d3:f5:
                    9e:fb:46:af:66:69:8f:9a:e8:c3:08:65:17:24:ff:
                    39:43:dc:de:9f:ee:c3:e3:78:cf:e4:19:4c:0d:59:
                    a0:b4:66:15:f5:15:4e:eb:b7:34:2a:a3:06:ba:c4:
                    a8:54:6c:d0:98:af:24:83:73:4e:d0:b5:51:76:17:
                    a7:1b:e0:ca:b0:fe:db:34:9f:55:d9:97:25:27:d1:
                    9d:b8:f0:a0:af:0f:95:f3:cc:a0:11:47:a9:2b:cb:
                    97:ec:7b:9f:e0:92:79:fd:b0:e6:bc:9a:0f:55:b7:
                    fa:b9:f8:25:4b:81:57:be:50:ba:52:9b:d3:cf:06:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:73:22:CB:A2:62:1C:6F:6E:3E:D3:90:C3:2B:D8:54:B7:15:BB:08
            X509v3 Authority Key Identifier:
                keyid:24:12:29:DE:8F:2E:8F:FB:61:F9:0E:08:B4:D2:1F:7B:10:9A:AC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64daa546b0663d582c6137e0c391bcdba2b81350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/66a80c92c9e48ce52213e5c5d62dd45be94c1794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c98cb80c-2cfe-4448-bf46-5fa63d967301/64daa546b0663d582c6137e0c391bcdba2b81350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:45:27:a0:e4:52:13:36:2f:09:14:c1:39:65:aa:64:99:
         0e:fe:9a:83:45:63:3b:93:5b:34:e3:c1:09:1d:92:5c:2b:c7:
         c0:aa:ba:24:d0:de:28:54:1a:ca:be:40:0f:89:bf:33:2e:9b:
         cb:7c:52:0c:c8:07:61:ab:2c:09:37:25:f2:22:90:ff:68:c6:
         51:65:35:ef:9a:44:99:e9:dd:5b:ed:2a:20:7e:3b:44:a5:24:
         8f:55:79:fd:67:c5:ec:2e:27:52:44:e5:1f:1b:6f:7d:00:b6:
         c3:6b:86:56:b4:36:8a:08:65:73:e0:5b:70:6a:0e:21:ce:5f:
         c6:52:72:d4:44:50:d8:07:75:44:34:67:63:5a:f7:a5:ee:e5:
         62:c7:91:a3:08:a3:9f:a3:23:10:75:08:0e:cb:be:48:70:f6:
         ec:a0:ee:e7:4f:bc:e0:fa:75:1e:5b:8f:4b:59:c5:bc:ed:b2:
         c1:fa:f4:c8:32:21:c6:b9:7d:f8:64:8d:54:2c:37:30:ee:9b:
         aa:77:3f:6a:2b:29:8f:08:5f:c6:ea:b5:e2:8c:18:c1:9c:10:
         2f:d5:ee:d0:43:ec:e1:d4:c0:98:f4:38:9d:43:86:94:0e:7d:
         9b:71:3c:2e:a1:58:bb:ae:f4:57:9b:cd:11:cc:b7:fd:7d:05:
         ba:aa:aa:53
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRk
YWE1NDZiMDY2M2Q1ODJjNjEzN2UwYzM5MWJjZGJhMmI4MTM1MDAeFw0yMzA2MDQw
MDM4MDdaFw0yNTA2MDUwMDM4MDdaMDMxMTAvBgNVBAMTKDY2YTgwYzkyYzllNDhj
ZTUyMjEzZTVjNWQ2MmRkNDViZTk0YzE3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUbz1qtQIS+kLuTx2CmzfdDK3BLYayjmiZGS2dA4HYxRMpbbyi
FTgDiglQwyBG8T/SUJqlCFuPoOvD0RLs5MwgxrDWAiWBO1ZwzQCIKuXYhMPIVaQv
9wncTzeSI/2XvZGSPptqsbacN46kJM3FoFjMq+22Kw8Ql28d9+m8HW2+8wDwaujT
9Z77Rq9maY+a6MMIZRck/zlD3N6f7sPjeM/kGUwNWaC0ZhX1FU7rtzQqowa6xKhU
bNCYrySDc07QtVF2F6cb4Mqw/ts0n1XZlyUn0Z248KCvD5XzzKARR6kry5fse5/g
knn9sOa8mg9Vt/q5+CVLgVe+ULpSm9PPBthnAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUAXMiy6JiHG9uPtOQwyvYVLcVuwgwHwYDVR0jBBgwFoAUJBIp3o8uj/th+Q4I
tNIfexCarIkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82NGRhYTU0
NmIwNjYzZDU4MmM2MTM3ZTBjMzkxYmNkYmEyYjgxMzUwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9jOThjYjgwYy0yY2ZlLTQ0NDgtYmY0Ni01ZmE2M2Q5
NjczMDEvNjZhODBjOTJjOWU0OGNlNTIyMTNlNWM1ZDYyZGQ0NWJlOTRjMTc5NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2M5OGNiODBjLTJjZmUtNDQ0OC1iZjQ2LTVmYTYz
ZDk2NzMwMS82NGRhYTU0NmIwNjYzZDU4MmM2MTM3ZTBjMzkxYmNkYmEyYjgxMzUw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBLe8kMA0GCSqGSIb3DQEBCwUAA4IBAQBhf0UnoORSEzYvCRTB
OWWqZJkO/pqDRWM7k1s048EJHZJcK8fAqrok0N4oVBrKvkAPib8zLpvLfFIMyAdh
qywJNyXyIpD/aMZRZTXvmkSZ6d1b7SogfjtEpSSPVXn9Z8XsLidSROUfG299ALbD
a4ZWtDaKCGVz4Ftwag4hzl/GUnLURFDYB3VENGdjWvel7uVix5GjCKOfoyMQdQgO
y75IcPbsoO7nT7zg+nUeW49LWcW87bLB+vTIMiHGuX34ZI1ULDcw7puqdz9qKymP
CF/G6rXijBjBnBAv1e7QQ+zh1MCY9DidQ4aUDn2bcTwuoVi7rvRXm80RzLf9fQW6
qqpT
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org