Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/38d9616d75d4e99d9fe2e8e9cf0b587248217381.roa
File:                     38d9616d75d4e99d9fe2e8e9cf0b587248217381.roa (raw, json)
Hash identifier:          mjoyhCU3X+we+adoDVS8OkFp4N+RQGHTWpR5d1ty06I=
Subject key identifier:   2E:AC:99:18:01:B1:9D:58:6C:EC:EB:15:8B:49:EB:17:8A:B5:79:3B
Certificate issuer:       /CN=39605400f52ffbae019f2c7f2d49fab6ba3e9a71
Certificate serial:       0709E5
Authority key identifier: 4A:E3:00:06:7C:D2:4E:28:A1:26:7E:B1:AD:C7:40:08:82:22:20:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/38d9616d75d4e99d9fe2e8e9cf0b587248217381.roa
Signing time:             Sat 12 Aug 2023 01:05:08 +0000
ROA not before:           Fri 11 Aug 2023 01:05:08 +0000
ROA not after:            Tue 12 Aug 2025 01:05:08 +0000
asID:                     262186
IP address blocks:        45.71.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461285 (0x709e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39605400f52ffbae019f2c7f2d49fab6ba3e9a71
        Validity
            Not Before: Aug 11 01:05:08 2023 GMT
            Not After : Aug 12 01:05:08 2025 GMT
        Subject: CN=38d9616d75d4e99d9fe2e8e9cf0b587248217381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:84:1d:b5:4b:c0:91:81:22:a0:e0:05:8e:
                    b1:2b:b9:32:8f:74:4d:87:82:16:d3:a3:62:18:68:
                    09:0b:f6:f9:86:06:03:30:a1:81:01:7e:f2:92:6b:
                    6f:21:d7:53:23:b7:5e:77:9f:ea:9d:a6:22:79:f0:
                    a6:29:f6:34:80:eb:96:96:a7:75:ff:c3:f3:8c:c9:
                    13:bc:e0:82:2a:49:54:e8:f6:72:40:22:e2:58:15:
                    b2:cf:34:ff:6e:cd:11:1a:1f:31:a3:1a:28:cf:bb:
                    a5:76:86:7e:b4:3d:8a:f6:31:1b:d1:1b:92:7c:4b:
                    38:83:a5:8c:49:91:ee:22:b8:9a:81:ff:66:56:b9:
                    f5:2f:7d:fe:cc:cb:a2:87:27:01:a8:26:5d:bc:e6:
                    6f:96:79:37:2d:e0:a2:29:9a:bf:d8:fb:1c:65:c8:
                    36:f2:68:45:2b:90:86:af:e0:8a:30:e5:2b:13:14:
                    e9:57:7c:31:f4:e3:b6:47:72:41:85:27:11:f3:72:
                    83:6f:e2:5f:26:7b:5c:24:15:8e:00:17:23:3a:8b:
                    a8:24:4f:d4:b4:cc:87:9a:79:a2:95:a5:b1:69:89:
                    a1:37:3f:00:71:20:0a:f3:06:05:80:1d:a4:f2:3c:
                    62:8e:14:52:c5:30:8c:5a:ab:2e:ec:44:be:fd:b1:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:99:18:01:B1:9D:58:6C:EC:EB:15:8B:49:EB:17:8A:B5:79:3B
            X509v3 Authority Key Identifier:
                keyid:4A:E3:00:06:7C:D2:4E:28:A1:26:7E:B1:AD:C7:40:08:82:22:20:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/38d9616d75d4e99d9fe2e8e9cf0b587248217381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:1c:97:01:77:b3:7c:2b:d5:2f:eb:66:05:52:b7:83:8d:
         b8:be:b1:28:56:8c:53:59:a3:bd:e5:2a:52:39:89:7d:1c:12:
         79:c1:70:15:0e:d5:f8:58:d8:b4:06:11:df:da:19:37:97:82:
         72:1d:0d:e5:39:d5:f5:e8:db:bb:22:04:65:75:13:69:22:e9:
         d8:64:97:51:e9:76:a5:40:3c:97:46:b9:15:d5:4d:b3:fe:68:
         ae:97:4a:d5:e4:2a:1d:8b:5e:f0:91:7e:ae:19:75:4a:30:34:
         ee:1a:6d:ef:d8:60:0b:2d:4a:73:ee:b6:cf:3c:95:e6:63:d8:
         57:a1:f1:66:5e:68:6f:91:78:ea:59:e5:7e:c7:ed:91:6b:4a:
         e7:ed:e5:61:c2:18:ca:f2:b9:51:df:fb:29:be:cf:c0:1a:e5:
         05:c3:52:3f:30:75:3f:98:0e:d4:aa:83:3f:fc:83:cb:1f:00:
         1e:ce:36:44:8a:f3:86:d5:5a:b9:66:f0:d8:d6:78:03:bb:9f:
         8b:31:73:00:7f:f5:64:49:d3:40:75:b5:e6:fc:6d:9c:b6:66:
         41:31:0c:8a:dc:7a:72:f2:cb:5c:8b:da:2c:43:e6:26:19:19:
         bb:1f:93:18:51:d2:c0:bb:9d:0b:ad:18:e1:e1:0d:30:8a:f7:
         fc:b8:42:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBwnlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
NjA1NDAwZjUyZmZiYWUwMTlmMmM3ZjJkNDlmYWI2YmEzZTlhNzEwHhcNMjMwODEx
MDEwNTA4WhcNMjUwODEyMDEwNTA4WjAzMTEwLwYDVQQDEygzOGQ5NjE2ZDc1ZDRl
OTlkOWZlMmU4ZTljZjBiNTg3MjQ4MjE3MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgvuEHbVLwJGBIqDgBY6xK7kyj3RNh4IW06NiGGgJC/b5hgYD
MKGBAX7ykmtvIddTI7ded5/qnaYiefCmKfY0gOuWlqd1/8PzjMkTvOCCKklU6PZy
QCLiWBWyzzT/bs0RGh8xoxooz7uldoZ+tD2K9jEb0RuSfEs4g6WMSZHuIriagf9m
Vrn1L33+zMuihycBqCZdvOZvlnk3LeCiKZq/2PscZcg28mhFK5CGr+CKMOUrExTp
V3wx9OO2R3JBhScR83KDb+JfJntcJBWOABcjOouoJE/UtMyHmnmilaWxaYmhNz8A
cSAK8wYFgB2k8jxijhRSxTCMWqsu7ES+/bE3lQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC6smRgBsZ1YbOzrFYtJ6xeKtXk7MB8GA1UdIwQYMBaAFErjAAZ80k4ooSZ+
sa3HQAiCIiDNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzk2MDU0
MDBmNTJmZmJhZTAxOWYyYzdmMmQ0OWZhYjZiYTNlOWE3MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTBhZGJhYmItNDA5ZS00ZWI0LTk2ZmItOGUyN2Fm
YTg0NDgwLzM4ZDk2MTZkNzVkNGU5OWQ5ZmUyZThlOWNmMGI1ODcyNDgyMTczODEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMGFkYmFiYi00MDllLTRlYjQtOTZmYi04ZTI3
YWZhODQ0ODAvMzk2MDU0MDBmNTJmZmJhZTAxOWYyYzdmMmQ0OWZhYjZiYTNlOWE3
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1HtTANBgkqhkiG9w0BAQsFAAOCAQEAceoclwF3s3wr1S/r
ZgVSt4ONuL6xKFaMU1mjveUqUjmJfRwSecFwFQ7V+FjYtAYR39oZN5eCch0N5TnV
9ejbuyIEZXUTaSLp2GSXUel2pUA8l0a5FdVNs/5orpdK1eQqHYte8JF+rhl1SjA0
7hpt79hgCy1Kc+62zzyV5mPYV6HxZl5ob5F46lnlfsftkWtK5+3lYcIYyvK5Ud/7
Kb7PwBrlBcNSPzB1P5gO1KqDP/yDyx8AHs42RIrzhtVauWbw2NZ4A7ufizFzAH/1
ZEnTQHW15vxtnLZmQTEMitx6cvLLXIvaLEPmJhkZux+TGFHSwLudC60Y4eENMIr3
/LhC0w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org