Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/68ce46f1cbb36e516e57dead36b8034b33d1f3c1.roa
File:                     68ce46f1cbb36e516e57dead36b8034b33d1f3c1.roa (raw, json)
Hash identifier:          fUVjC9wejeLUdbBJZInW5ySyY2KUo/QIaYcA+HQKhI8=
Subject key identifier:   57:B3:53:1D:D0:A4:50:9F:C6:E3:E2:6D:BB:B9:21:6B:D3:06:49:AA
Certificate issuer:       /CN=0f93bb3c007d18be5c8a08f924130cad8044105f
Certificate serial:       1D8760
Authority key identifier: 48:82:6B:AE:3A:84:9C:A3:B1:F6:DC:6A:A0:A1:C0:63:8F:08:ED:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f93bb3c007d18be5c8a08f924130cad8044105f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/68ce46f1cbb36e516e57dead36b8034b33d1f3c1.roa
Signing time:             Thu 19 Jan 2023 12:05:08 +0000
ROA not before:           Mon 22 Mar 2021 14:40:07 +0000
ROA not after:            Tue 24 Mar 2026 14:40:07 +0000
asID:                     264836
IP address blocks:        45.228.180.0/24 maxlen: 24
                          45.228.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935200 (0x1d8760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f93bb3c007d18be5c8a08f924130cad8044105f
        Validity
            Not Before: Mar 22 14:40:07 2021 GMT
            Not After : Mar 24 14:40:07 2026 GMT
        Subject: CN=68ce46f1cbb36e516e57dead36b8034b33d1f3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:e5:9d:58:0f:1d:64:5a:50:eb:4c:fa:60:
                    7d:2e:c3:ea:d2:5a:72:82:97:83:ee:b7:8d:cd:31:
                    a9:89:cd:2e:d9:c6:a8:0d:f1:7b:2c:c0:03:c0:07:
                    ca:fe:1f:54:f9:b0:a3:59:80:58:7b:27:f2:ee:52:
                    2d:1d:cc:1f:16:87:a2:cb:98:23:c0:d3:75:f7:51:
                    86:d9:a5:25:b1:01:36:fe:cd:d9:9f:e9:6c:fa:5d:
                    fa:7c:35:1d:f1:7b:39:11:b9:95:77:b7:c8:0f:21:
                    61:b7:f7:ac:44:81:53:2c:f0:dc:9b:c3:c4:fc:36:
                    b1:f2:3d:2d:b3:32:4c:cd:03:78:1b:72:f0:c9:94:
                    92:f1:d2:90:24:69:f4:56:73:9e:b4:fe:70:55:29:
                    87:28:aa:d5:b7:76:21:cf:0b:ce:3d:41:59:d2:78:
                    31:06:3e:0c:c6:0c:78:c6:52:96:df:af:5e:09:ba:
                    aa:6e:2d:d8:f4:88:73:d6:53:2a:3f:82:63:6c:14:
                    b4:c3:1f:39:fc:40:3b:ac:fc:e1:a7:96:d6:e7:d9:
                    9e:b5:ab:2b:b7:f4:1d:f3:e4:36:6f:26:f5:eb:89:
                    e9:c6:fe:32:d0:70:82:07:d1:c8:f6:93:7e:29:e8:
                    37:25:6b:ab:51:09:ea:30:5b:26:b3:2b:48:18:7f:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:53:1D:D0:A4:50:9F:C6:E3:E2:6D:BB:B9:21:6B:D3:06:49:AA
            X509v3 Authority Key Identifier:
                keyid:48:82:6B:AE:3A:84:9C:A3:B1:F6:DC:6A:A0:A1:C0:63:8F:08:ED:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f93bb3c007d18be5c8a08f924130cad8044105f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/68ce46f1cbb36e516e57dead36b8034b33d1f3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc7439fc-bb57-4ec2-99e3-b9d21c615697/0f93bb3c007d18be5c8a08f924130cad8044105f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:be:fa:90:d6:a8:d0:a9:f5:cc:0e:45:ba:26:ea:48:82:9f:
         cc:d7:39:14:3a:5a:01:cf:99:23:d0:40:8d:f2:d6:9d:85:24:
         9b:69:a4:6a:a5:ac:2a:c0:90:ae:67:e2:29:25:45:f0:72:d1:
         dd:e9:c4:9e:b0:3f:55:ff:d2:04:b4:b1:64:17:ea:ec:22:85:
         db:30:7a:11:6a:4d:c1:4a:5a:37:59:0b:ce:1b:f3:27:4d:f3:
         4e:84:10:35:a6:e9:39:54:82:bd:65:6f:7d:8c:2d:45:16:18:
         89:1d:94:17:da:69:87:7e:cf:33:ff:c8:6c:2f:d3:5d:fd:c4:
         dd:3f:9f:d4:06:74:3a:76:25:1c:9e:24:90:88:54:14:54:32:
         16:80:21:09:cd:2c:78:5e:53:89:52:44:63:5a:40:d8:d4:64:
         83:a0:42:86:4a:d5:d9:84:92:cc:d0:56:9b:a8:08:8d:af:f6:
         0e:f1:03:45:ac:60:79:ca:09:ac:8c:4d:64:de:ee:14:40:ec:
         22:8d:f6:ec:6a:75:f7:47:b5:0e:21:e4:76:6f:84:87:e2:db:
         49:dc:04:56:d7:65:4f:f0:77:15:91:b7:e2:35:70:a2:93:2f:
         84:23:4b:a6:5d:43:5f:af:0a:56:44:2d:0f:36:09:34:02:1b:
         be:be:4b:14
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHYdgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
OTNiYjNjMDA3ZDE4YmU1YzhhMDhmOTI0MTMwY2FkODA0NDEwNWYwHhcNMjEwMzIy
MTQ0MDA3WhcNMjYwMzI0MTQ0MDA3WjAzMTEwLwYDVQQDEyg2OGNlNDZmMWNiYjM2
ZTUxNmU1N2RlYWQzNmI4MDM0YjMzZDFmM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnIDlnVgPHWRaUOtM+mB9LsPq0lpygpeD7reNzTGpic0u2cao
DfF7LMADwAfK/h9U+bCjWYBYeyfy7lItHcwfFoeiy5gjwNN191GG2aUlsQE2/s3Z
n+ls+l36fDUd8Xs5EbmVd7fIDyFht/esRIFTLPDcm8PE/Dax8j0tszJMzQN4G3Lw
yZSS8dKQJGn0VnOetP5wVSmHKKrVt3YhzwvOPUFZ0ngxBj4Mxgx4xlKW369eCbqq
bi3Y9Ihz1lMqP4JjbBS0wx85/EA7rPzhp5bW59metasrt/Qd8+Q2byb164npxv4y
0HCCB9HI9pN+Keg3JWurUQnqMFsmsytIGH+QtQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFezUx3QpFCfxuPibbu5IWvTBkmqMB8GA1UdIwQYMBaAFEiCa646hJyjsfbc
aqChwGOPCO3iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGY5M2Ji
M2MwMDdkMThiZTVjOGEwOGY5MjQxMzBjYWQ4MDQ0MTA1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2M3NDM5ZmMtYmI1Ny00ZWMyLTk5ZTMtYjlkMjFj
NjE1Njk3LzY4Y2U0NmYxY2JiMzZlNTE2ZTU3ZGVhZDM2YjgwMzRiMzNkMWYzYzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzc0MzlmYy1iYjU3LTRlYzItOTllMy1iOWQy
MWM2MTU2OTcvMGY5M2JiM2MwMDdkMThiZTVjOGEwOGY5MjQxMzBjYWQ4MDQ0MTA1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS3ktDANBgkqhkiG9w0BAQsFAAOCAQEAd776kNao0Kn1zA5F
uibqSIKfzNc5FDpaAc+ZI9BAjfLWnYUkm2mkaqWsKsCQrmfiKSVF8HLR3enEnrA/
Vf/SBLSxZBfq7CKF2zB6EWpNwUpaN1kLzhvzJ03zToQQNabpOVSCvWVvfYwtRRYY
iR2UF9pph37PM//IbC/TXf3E3T+f1AZ0OnYlHJ4kkIhUFFQyFoAhCc0seF5TiVJE
Y1pA2NRkg6BChkrV2YSSzNBWm6gIja/2DvEDRaxgecoJrIxNZN7uFEDsIo327Gp1
90e1DiHkdm+Eh+LbSdwEVtdlT/B3FZG34jVwopMvhCNLpl1DX68KVkQtDzYJNAIb
vr5LFA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org