Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/a853ef90921cd2739c5f51bb6ddd57ceda14c2c8.roa
File:                     a853ef90921cd2739c5f51bb6ddd57ceda14c2c8.roa (raw, json)
Hash identifier:          AiO7njfp9SmgCJ+pthLiLmqBECeMERa6YG2pWHDkIlU=
Subject key identifier:   40:A0:38:1F:2B:5A:A5:0B:5C:F1:83:D4:90:76:7B:68:57:81:2E:80
Certificate issuer:       /CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
Certificate serial:       23B782
Authority key identifier: FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/a853ef90921cd2739c5f51bb6ddd57ceda14c2c8.roa
Signing time:             Fri 20 Oct 2023 16:05:01 +0000
ROA not before:           Fri 20 Oct 2023 16:05:01 +0000
ROA not after:            Mon 20 Oct 2025 16:05:01 +0000
asID:                     269838
IP address blocks:        45.229.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340738 (0x23b782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
        Validity
            Not Before: Oct 20 16:05:01 2023 GMT
            Not After : Oct 20 16:05:01 2025 GMT
        Subject: CN=a853ef90921cd2739c5f51bb6ddd57ceda14c2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:cc:9e:76:c8:99:4b:b6:00:9e:89:66:32:
                    6c:6f:85:27:49:f1:68:8a:65:40:74:0e:9e:54:df:
                    af:79:f5:b6:9e:bd:5e:77:3a:0c:fa:fe:47:2c:2f:
                    65:e1:71:cf:e9:04:6e:00:0b:6b:71:b9:3e:17:22:
                    81:a3:06:ed:b6:8d:ce:c4:90:24:a7:54:0c:89:5e:
                    34:a8:bc:a1:3c:47:58:9f:64:b4:65:29:15:96:55:
                    85:05:ed:d0:02:a6:73:48:fd:45:d6:76:51:82:b4:
                    2c:cd:62:46:eb:83:59:3b:d5:8f:97:3d:79:e2:96:
                    39:31:88:f3:d0:ba:fa:ac:81:82:39:77:9f:0e:c7:
                    9e:43:1c:23:31:39:6e:0d:0e:4c:7b:fd:73:02:f1:
                    4b:64:7a:3f:f5:ca:2d:7e:8b:db:82:46:17:c9:dd:
                    8e:71:7d:3e:dd:ce:b6:13:1e:56:fd:87:91:df:6d:
                    65:08:43:01:6d:c0:8c:69:17:f9:a7:d2:fe:15:ab:
                    61:ad:0a:bf:19:61:d7:0c:96:8b:7f:23:e1:18:5a:
                    a3:a0:fe:ee:08:72:b7:f3:52:04:09:23:f3:9d:98:
                    66:ca:d5:5e:01:cc:bb:c4:1a:c3:f0:30:48:cf:7d:
                    58:c3:c0:41:55:db:5f:4b:d1:e9:85:c5:4e:85:0a:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A0:38:1F:2B:5A:A5:0B:5C:F1:83:D4:90:76:7B:68:57:81:2E:80
            X509v3 Authority Key Identifier:
                keyid:FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/a853ef90921cd2739c5f51bb6ddd57ceda14c2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:18:77:ab:ff:3b:9e:73:f0:7f:c4:7e:46:e2:9e:ba:86:3e:
         2c:d1:d9:65:4e:a6:52:8e:89:96:e6:82:dc:5f:0a:c7:8e:4e:
         1c:f1:90:57:35:ab:cf:c3:7f:f4:72:28:9f:f0:36:0f:b9:6e:
         8e:40:a1:46:93:b8:9d:ed:82:a6:68:74:30:a8:e9:0c:ac:c7:
         99:dd:79:0d:4f:b0:e3:84:f4:fd:ce:7c:6f:1c:f8:6d:1c:bf:
         b2:dd:04:a1:5e:66:7b:e0:53:7f:39:18:67:39:36:8c:0a:96:
         47:69:84:cb:7b:e4:be:aa:88:63:0c:fc:c2:46:34:2b:10:47:
         8a:f6:8b:69:79:51:2a:da:5e:27:cf:3b:f5:17:1a:46:fe:7e:
         c0:a6:d7:bb:8e:69:5d:7b:95:0e:1a:7f:20:a3:c4:37:92:32:
         14:67:50:f1:2e:34:0e:d2:d6:43:94:b5:00:5b:04:f4:ba:f9:
         58:d7:cc:45:fb:b5:ae:2f:6f:fa:b0:30:6a:7a:0f:83:d4:77:
         33:75:14:53:e6:e1:97:51:93:de:0d:ab:b9:39:fe:20:30:fe:
         cd:3f:54:d8:de:0a:88:79:2a:18:0f:ed:51:1b:70:08:83:a1:
         d4:5a:7e:19:de:ca:cf:33:f2:06:6c:81:6b:0b:67:f6:4d:96:
         93:c8:7e:44
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI7eCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
NTllNjhlYzQ2ZjNmODQwYWEwMGU2YTJhN2IwMGY0OWYyNTNmZTcwHhcNMjMxMDIw
MTYwNTAxWhcNMjUxMDIwMTYwNTAxWjAzMTEwLwYDVQQDEyhhODUzZWY5MDkyMWNk
MjczOWM1ZjUxYmI2ZGRkNTdjZWRhMTRjMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhhHMnnbImUu2AJ6JZjJsb4UnSfFoimVAdA6eVN+vefW2nr1e
dzoM+v5HLC9l4XHP6QRuAAtrcbk+FyKBowbtto3OxJAkp1QMiV40qLyhPEdYn2S0
ZSkVllWFBe3QAqZzSP1F1nZRgrQszWJG64NZO9WPlz154pY5MYjz0Lr6rIGCOXef
DseeQxwjMTluDQ5Me/1zAvFLZHo/9cotfovbgkYXyd2OcX0+3c62Ex5W/YeR321l
CEMBbcCMaRf5p9L+FathrQq/GWHXDJaLfyPhGFqjoP7uCHK381IECSPznZhmytVe
Acy7xBrD8DBIz31Yw8BBVdtfS9HphcVOhQozpwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFECgOB8rWqULXPGD1JB2e2hXgS6AMB8GA1UdIwQYMBaAFP2Iwayl3QJ7XKBy
EiZuPTxZaEVlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTk1OWU2
OGVjNDZmM2Y4NDBhYTAwZTZhMmE3YjAwZjQ5ZjI1M2ZlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2RiYjlmZjktMDMyYy00ZTYwLWJiYmMtZjdkNjAy
OTg0M2FhL2E4NTNlZjkwOTIxY2QyNzM5YzVmNTFiYjZkZGQ1N2NlZGExNGMyYzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZGJiOWZmOS0wMzJjLTRlNjAtYmJiYy1mN2Q2
MDI5ODQzYWEvNTk1OWU2OGVjNDZmM2Y4NDBhYTAwZTZhMmE3YjAwZjQ5ZjI1M2Zl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3lBDANBgkqhkiG9w0BAQsFAAOCAQEAOhh3q/87nnPwf8R+
RuKeuoY+LNHZZU6mUo6JluaC3F8Kx45OHPGQVzWrz8N/9HIon/A2D7lujkChRpO4
ne2Cpmh0MKjpDKzHmd15DU+w44T0/c58bxz4bRy/st0EoV5me+BTfzkYZzk2jAqW
R2mEy3vkvqqIYwz8wkY0KxBHivaLaXlRKtpeJ8879RcaRv5+wKbXu45pXXuVDhp/
IKPEN5IyFGdQ8S40DtLWQ5S1AFsE9Lr5WNfMRfu1ri9v+rAwanoPg9R3M3UUU+bh
l1GT3g2ruTn+IDD+zT9U2N4KiHkqGA/tURtwCIOh1Fp+Gd7KzzPyBmyBawtn9k2W
k8h+RA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org