Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b52bdc23204eea9598b6b3c0aac066fe6df4d8f3.roa
File:                     b52bdc23204eea9598b6b3c0aac066fe6df4d8f3.roa (raw, json)
Hash identifier:          szO/AZg2a/XAN5JxyXJhMJjSn4nScvm6nQplvZMd0mY=
Subject key identifier:   8F:92:61:83:71:A1:5F:48:93:62:72:F8:5E:75:E1:7A:4F:DD:CF:B9
Certificate issuer:       /CN=b0e5e35584d82ee017f3248e331868334b2ae7b7
Certificate serial:       0BE39A
Authority key identifier: BF:A6:74:94:70:54:88:15:BD:46:A3:30:6E:85:E7:8A:83:49:1F:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e5e35584d82ee017f3248e331868334b2ae7b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b52bdc23204eea9598b6b3c0aac066fe6df4d8f3.roa
Signing time:             Wed 24 Mar 2021 14:34:46 +0000
ROA not before:           Wed 24 Mar 2021 14:34:46 +0000
ROA not after:            Tue 24 Mar 2026 14:34:46 +0000
asID:                     266860
IP address blocks:        45.238.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779162 (0xbe39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e5e35584d82ee017f3248e331868334b2ae7b7
        Validity
            Not Before: Mar 24 14:34:46 2021 GMT
            Not After : Mar 24 14:34:46 2026 GMT
        Subject: CN=b52bdc23204eea9598b6b3c0aac066fe6df4d8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:52:d6:c1:97:9a:eb:2c:fc:a4:94:02:cc:00:
                    6d:6e:0f:9d:1b:c1:0e:54:aa:a7:8c:9e:c4:70:91:
                    37:13:30:1d:06:56:56:9e:23:7b:09:d0:b0:74:08:
                    cc:06:fb:4c:37:1a:ce:81:64:77:1f:dc:d6:82:21:
                    f1:97:39:9f:f9:ca:28:1c:55:77:2d:f2:3f:46:34:
                    2a:70:e8:2c:ac:1b:7b:e0:ab:57:ca:85:04:a8:9e:
                    a7:f5:db:e1:72:68:d0:e8:cc:b1:47:ce:49:2a:73:
                    79:f9:49:44:30:91:44:9a:9f:b1:5f:e8:ef:8a:f8:
                    4e:01:d6:28:b4:b6:f4:26:88:9e:f5:bc:3b:e1:69:
                    4f:13:46:bf:d6:a2:9e:ca:4c:ae:78:02:98:d7:55:
                    a1:09:8b:22:65:26:a1:25:46:02:87:0c:99:7a:3d:
                    5c:69:18:04:17:68:30:a4:65:5c:6a:e7:15:4c:0c:
                    34:6f:2b:86:23:f1:39:6e:ad:b5:76:bc:6e:a6:ae:
                    6f:ed:34:6b:c6:58:1b:25:b0:eb:b6:0c:8a:89:ae:
                    83:ff:3f:b6:44:0e:e7:92:e2:1b:c0:9c:e0:64:3d:
                    bc:4a:5b:fe:00:f3:ed:16:fe:e8:54:e1:8f:4a:d3:
                    bc:0a:4a:f3:e1:41:bd:ec:dc:47:0e:c0:8b:f6:c7:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:61:83:71:A1:5F:48:93:62:72:F8:5E:75:E1:7A:4F:DD:CF:B9
            X509v3 Authority Key Identifier:
                keyid:BF:A6:74:94:70:54:88:15:BD:46:A3:30:6E:85:E7:8A:83:49:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e5e35584d82ee017f3248e331868334b2ae7b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b52bdc23204eea9598b6b3c0aac066fe6df4d8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dba681e0-98a3-49ba-a222-b243c9e0f681/b0e5e35584d82ee017f3248e331868334b2ae7b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:8d:6b:a0:06:92:99:41:83:43:7d:cc:ff:bd:28:49:74:
         89:72:e3:c6:ca:2f:b7:1b:aa:c5:4a:88:36:db:f5:89:f0:3e:
         47:e9:29:da:0f:b0:64:ea:b5:bd:82:71:28:d9:ed:07:e0:89:
         7d:c6:ee:36:4f:e4:79:b8:68:d3:ff:ad:f7:f9:cf:8b:e3:6d:
         92:00:43:44:aa:e3:98:16:58:16:3e:73:40:3e:54:4e:e6:99:
         83:86:69:c9:ff:12:a2:81:79:57:3c:9b:ee:ea:1f:8e:79:db:
         b7:98:b4:90:ee:d1:a2:1f:49:ca:ee:70:4e:4b:6a:ea:bf:fe:
         48:cc:4c:b6:bd:9e:e1:d9:55:c7:08:c4:5d:cf:40:d9:ca:16:
         30:67:3d:b9:f6:0e:84:d5:f4:5c:e9:8a:c6:74:5c:2a:40:0a:
         11:03:ae:90:05:3c:8f:10:85:b2:3f:cc:e9:ae:fa:5d:f7:e7:
         42:03:c1:2d:18:80:10:e5:99:61:3c:b8:d2:96:7a:c1:e8:fa:
         95:a5:21:cf:68:4b:f4:b0:96:53:bc:64:7f:10:4e:35:f9:42:
         91:bd:9b:63:17:f7:67:5a:2c:f7:6d:27:b6:7c:4b:15:4a:f5:
         84:36:31:f8:d2:ea:09:a1:89:21:1f:14:53:5b:2f:26:a2:4c:
         e3:6e:8f:9c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC+OaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTVlMzU1ODRkODJlZTAxN2YzMjQ4ZTMzMTg2ODMzNGIyYWU3YjcwHhcNMjEwMzI0
MTQzNDQ2WhcNMjYwMzI0MTQzNDQ2WjAzMTEwLwYDVQQDEyhiNTJiZGMyMzIwNGVl
YTk1OThiNmIzYzBhYWMwNjZmZTZkZjRkOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk1LWwZea6yz8pJQCzABtbg+dG8EOVKqnjJ7EcJE3EzAdBlZW
niN7CdCwdAjMBvtMNxrOgWR3H9zWgiHxlzmf+cooHFV3LfI/RjQqcOgsrBt74KtX
yoUEqJ6n9dvhcmjQ6MyxR85JKnN5+UlEMJFEmp+xX+jvivhOAdYotLb0Joie9bw7
4WlPE0a/1qKeykyueAKY11WhCYsiZSahJUYChwyZej1caRgEF2gwpGVcaucVTAw0
byuGI/E5bq21drxupq5v7TRrxlgbJbDrtgyKia6D/z+2RA7nkuIbwJzgZD28Slv+
APPtFv7oVOGPStO8Ckrz4UG97NxHDsCL9scd4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI+SYYNxoV9Ik2Jy+F514XpP3c+5MB8GA1UdIwQYMBaAFL+mdJRwVIgVvUaj
MG6F54qDSR+3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNWUz
NTU4NGQ4MmVlMDE3ZjMyNDhlMzMxODY4MzM0YjJhZTdiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGJhNjgxZTAtOThhMy00OWJhLWEyMjItYjI0M2M5
ZTBmNjgxL2I1MmJkYzIzMjA0ZWVhOTU5OGI2YjNjMGFhYzA2NmZlNmRmNGQ4ZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYmE2ODFlMC05OGEzLTQ5YmEtYTIyMi1iMjQz
YzllMGY2ODEvYjBlNWUzNTU4NGQ4MmVlMDE3ZjMyNDhlMzMxODY4MzM0YjJhZTdi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3utDANBgkqhkiG9w0BAQsFAAOCAQEAbn+Na6AGkplBg0N9
zP+9KEl0iXLjxsovtxuqxUqINtv1ifA+R+kp2g+wZOq1vYJxKNntB+CJfcbuNk/k
ebho0/+t9/nPi+NtkgBDRKrjmBZYFj5zQD5UTuaZg4Zpyf8SooF5Vzyb7uofjnnb
t5i0kO7Roh9Jyu5wTktq6r/+SMxMtr2e4dlVxwjEXc9A2coWMGc9ufYOhNX0XOmK
xnRcKkAKEQOukAU8jxCFsj/M6a76XffnQgPBLRiAEOWZYTy40pZ6wej6laUhz2hL
9LCWU7xkfxBONflCkb2bYxf3Z1os920ntnxLFUr1hDYx+NLqCaGJIR8UU1svJqJM
426PnA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org