Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/22e8ff1ca6b1f11d7346c4fe1686cb154332ce14.roa
File:                     22e8ff1ca6b1f11d7346c4fe1686cb154332ce14.roa (raw, json)
Hash identifier:          Vz2SNoiDndDffFZ2TSMpCzasc2WVkk0R+2FR44IHw0I=
Subject key identifier:   67:CB:31:E7:CA:04:42:7D:5C:72:AF:B3:FD:32:DA:AC:6B:81:34:C3
Certificate issuer:       /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial:       23D85B
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/22e8ff1ca6b1f11d7346c4fe1686cb154332ce14.roa
Signing time:             Fri 06 Oct 2023 06:26:13 +0000
ROA not before:           Thu 05 Oct 2023 06:26:13 +0000
ROA not after:            Mon 06 Oct 2025 06:26:13 +0000
asID:                     262262
IP address blocks:        45.166.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349147 (0x23d85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Validity
            Not Before: Oct  5 06:26:13 2023 GMT
            Not After : Oct  6 06:26:13 2025 GMT
        Subject: CN=22e8ff1ca6b1f11d7346c4fe1686cb154332ce14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:f1:71:b1:ba:29:d1:3d:1d:60:ba:6a:b2:
                    ff:03:c4:a9:b3:17:41:05:68:2f:db:46:e2:90:a0:
                    86:18:f9:af:97:a4:51:cd:83:25:ee:00:04:c5:21:
                    fd:38:6d:88:d0:9d:8d:1b:31:85:80:0c:be:bf:7f:
                    90:3b:50:b7:09:e3:ba:95:49:02:c5:c2:3f:4b:1c:
                    8b:28:d8:55:95:03:d9:10:f8:75:eb:64:12:c8:73:
                    47:7b:d0:cf:88:14:67:ad:0f:ba:1e:4c:57:cf:06:
                    98:ff:a1:99:5d:32:25:83:87:59:ff:e4:d3:4d:7a:
                    d7:14:57:3e:cd:e1:d7:03:b7:57:40:16:73:30:f2:
                    d8:5b:cc:f6:47:84:13:0d:a4:5e:8a:aa:bf:f1:88:
                    76:ca:8e:c8:77:e4:d5:e2:32:7e:b0:d5:f0:1e:1e:
                    a2:e7:40:59:6e:fe:6e:5c:19:4d:e6:f2:4e:f9:21:
                    57:fb:f2:12:46:79:3f:c5:25:46:56:c3:ac:5e:87:
                    f5:8c:e0:fc:52:ad:7b:66:9e:72:37:ba:1f:9c:f1:
                    5b:fe:d2:4c:c7:d3:9a:92:89:6a:2f:b0:7a:9a:fa:
                    a6:30:05:2f:b4:de:a9:ad:98:3c:6b:6e:ce:13:71:
                    b3:cb:1a:40:8b:aa:46:9f:e6:6f:e6:ef:bc:27:0b:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CB:31:E7:CA:04:42:7D:5C:72:AF:B3:FD:32:DA:AC:6B:81:34:C3
            X509v3 Authority Key Identifier:
                keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/22e8ff1ca6b1f11d7346c4fe1686cb154332ce14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:24:11:bf:e4:49:8b:a8:b0:12:ec:70:ca:75:ba:0d:a7:3f:
         d9:f6:c3:c9:24:d8:39:ad:50:dd:c1:70:0f:0c:7e:47:ed:23:
         e1:1a:dd:ff:7a:b1:ef:ed:41:57:cf:2d:2e:28:a0:89:ea:42:
         72:54:03:9f:c4:91:e3:21:96:5d:db:1f:98:4c:f6:8f:d4:30:
         9e:f6:99:3d:24:5c:3b:8d:d8:84:1a:f3:e1:78:93:d8:f0:1b:
         55:35:28:f5:01:d3:14:27:94:fe:35:e6:5a:d8:64:9b:48:8d:
         5b:f9:69:f7:71:46:be:74:79:71:eb:c7:81:15:d3:c3:8a:79:
         c6:bf:80:5c:75:7f:36:ce:ec:4c:1c:d3:43:85:cc:9a:b2:17:
         e1:e3:93:e9:47:6e:4d:ef:ec:f2:d4:0c:1e:ca:b5:28:d5:59:
         9d:81:97:f3:1c:b5:48:2f:4b:f7:9c:51:3c:de:69:0a:f0:5b:
         8e:ab:dd:98:8a:a5:0f:f6:2d:8c:f9:53:26:67:8a:bb:ac:36:
         24:a5:09:77:f6:b8:4b:18:82:41:1d:63:3d:bf:f4:aa:30:17:
         36:dd:ef:83:5a:57:33:83:45:56:a2:c4:11:f1:17:09:e3:d6:
         c5:8a:8e:c7:54:55:d5:c8:b5:67:97:d2:d5:55:a9:4e:61:84:
         c2:84:21:99
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI9hbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEy
ZjVhYmY1OGM5NTdhMmJmY2Y1MWIzMDIyN2MyYzgxNGRjZTkzZTAwHhcNMjMxMDA1
MDYyNjEzWhcNMjUxMDA2MDYyNjEzWjAzMTEwLwYDVQQDEygyMmU4ZmYxY2E2YjFm
MTFkNzM0NmM0ZmUxNjg2Y2IxNTQzMzJjZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAudrxcbG6KdE9HWC6arL/A8SpsxdBBWgv20bikKCGGPmvl6RR
zYMl7gAExSH9OG2I0J2NGzGFgAy+v3+QO1C3CeO6lUkCxcI/SxyLKNhVlQPZEPh1
62QSyHNHe9DPiBRnrQ+6HkxXzwaY/6GZXTIlg4dZ/+TTTXrXFFc+zeHXA7dXQBZz
MPLYW8z2R4QTDaReiqq/8Yh2yo7Id+TV4jJ+sNXwHh6i50BZbv5uXBlN5vJO+SFX
+/ISRnk/xSVGVsOsXof1jOD8Uq17Zp5yN7ofnPFb/tJMx9OakolqL7B6mvqmMAUv
tN6prZg8a27OE3GzyxpAi6pGn+Zv5u+8Jwt2zQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGfLMefKBEJ9XHKvs/0y2qxrgTTDMB8GA1UdIwQYMBaAFLUw48eIm7OeLsNV
bKA2EAF646VWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTJmNWFi
ZjU4Yzk1N2EyYmZjZjUxYjMwMjI3YzJjODE0ZGNlOTNlMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDgwZDg0N2EtOTc0My00MzEwLTkyZGUtODk2ZWVj
NGVkMThiLzIyZThmZjFjYTZiMWYxMWQ3MzQ2YzRmZTE2ODZjYjE1NDMzMmNlMTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kODBkODQ3YS05NzQzLTQzMTAtOTJkZS04OTZl
ZWM0ZWQxOGIvYTJmNWFiZjU4Yzk1N2EyYmZjZjUxYjMwMjI3YzJjODE0ZGNlOTNl
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2mXjANBgkqhkiG9w0BAQsFAAOCAQEAFCQRv+RJi6iwEuxw
ynW6Dac/2fbDySTYOa1Q3cFwDwx+R+0j4Rrd/3qx7+1BV88tLiigiepCclQDn8SR
4yGWXdsfmEz2j9QwnvaZPSRcO43YhBrz4XiT2PAbVTUo9QHTFCeU/jXmWthkm0iN
W/lp93FGvnR5cevHgRXTw4p5xr+AXHV/Ns7sTBzTQ4XMmrIX4eOT6UduTe/s8tQM
Hsq1KNVZnYGX8xy1SC9L95xRPN5pCvBbjqvdmIqlD/YtjPlTJmeKu6w2JKUJd/a4
SxiCQR1jPb/0qjAXNt3vg1pXM4NFVqLEEfEXCePWxYqOx1RV1ci1Z5fS1VWpTmGE
woQhmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org