Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/456aed5de2fa13306ccca56632f7c92e94e41a49.roa
File:                     456aed5de2fa13306ccca56632f7c92e94e41a49.roa (raw, json)
Hash identifier:          DxhRuewi0E9x6NrDNz9p3au3uVye9ZkL63iWDResukw=
Subject key identifier:   75:77:95:F7:47:B9:D7:C7:D4:0B:14:14:AE:07:99:EB:17:3B:AA:B8
Certificate issuer:       /CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
Certificate serial:       0EE819
Authority key identifier: 0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/456aed5de2fa13306ccca56632f7c92e94e41a49.roa
Signing time:             Tue 12 Mar 2024 16:01:15 +0000
ROA not before:           Tue 12 Mar 2024 16:01:14 +0000
ROA not after:            Thu 12 Mar 2026 16:01:14 +0000
asID:                     271861
IP address blocks:        45.171.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976921 (0xee819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
        Validity
            Not Before: Mar 12 16:01:14 2024 GMT
            Not After : Mar 12 16:01:14 2026 GMT
        Subject: CN=456aed5de2fa13306ccca56632f7c92e94e41a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:b8:8f:b5:3f:9f:db:6c:aa:e1:d7:71:98:
                    81:94:f2:92:d8:08:f2:42:6c:66:55:8b:f8:2b:8f:
                    f6:20:b0:54:eb:ea:65:e1:d6:18:92:37:fa:39:07:
                    a8:0f:26:f4:b8:59:04:38:d5:09:c5:5a:9b:a2:a7:
                    af:e0:3e:51:b8:6c:35:12:9d:02:76:37:66:00:33:
                    2b:c8:57:9f:32:28:43:f6:0e:81:11:97:69:2a:e6:
                    e6:9d:8e:3a:76:8d:a1:ef:96:1e:89:48:49:9a:25:
                    76:08:07:98:ce:04:99:cd:1d:ae:cc:9b:58:1b:2b:
                    b1:ed:d0:7d:d8:9f:a2:a5:3a:41:d0:c4:61:bf:ab:
                    e1:7e:97:c8:3f:ca:bb:91:4c:b9:6e:36:ab:fe:c4:
                    73:69:e6:52:59:eb:d3:92:ca:fa:56:56:e4:a5:f6:
                    b8:15:41:90:d2:b9:3d:a1:4b:5e:4f:16:91:f7:26:
                    3c:bc:f2:88:50:08:91:af:2b:a0:1f:d9:5c:58:ce:
                    84:a2:c2:6a:ec:5c:68:da:95:13:26:64:43:ad:c7:
                    97:30:b4:82:f2:ba:e5:a4:3c:29:6a:ae:53:73:1b:
                    d4:85:4b:3f:ed:1e:25:a3:6e:db:4e:23:50:98:c8:
                    4a:9c:71:bc:6d:7d:0f:c1:ff:6a:85:fb:3c:bc:fc:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:95:F7:47:B9:D7:C7:D4:0B:14:14:AE:07:99:EB:17:3B:AA:B8
            X509v3 Authority Key Identifier:
                keyid:0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/456aed5de2fa13306ccca56632f7c92e94e41a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/6adbd36382f8fdc7486124fdd6ad414b2241421a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:92:93:c6:6e:6f:90:3d:27:e7:07:86:5b:fb:07:99:ed:
         79:b1:f3:d2:0b:f3:c0:d0:ef:c7:0b:9a:76:e4:ff:04:a6:f2:
         da:3d:eb:2b:e2:f9:8c:a6:70:48:91:20:fa:be:d4:a5:bf:75:
         42:3d:16:7f:00:35:51:b9:f9:5f:f6:9e:9a:cc:b3:c5:00:05:
         38:00:1e:b6:85:0a:ea:ed:df:cf:32:9e:ed:01:2e:ca:27:26:
         03:a2:f9:00:36:ba:13:36:a9:10:4c:4c:3d:70:77:7e:f9:14:
         90:9c:7f:0d:a1:3d:27:e9:db:26:ac:9b:6a:a7:e1:20:cd:6d:
         aa:1b:a0:7c:77:dc:6b:a8:b4:fe:92:3e:7b:b1:3a:51:f8:7c:
         b7:44:10:72:92:91:cf:40:10:eb:96:0c:7d:0e:9a:1f:34:2f:
         ec:73:c2:e2:80:63:ba:d5:c9:81:f5:11:93:e8:28:3f:af:83:
         52:02:14:c8:50:b8:2a:79:75:9c:a0:ac:e9:25:65:1b:93:a4:
         74:1f:28:2f:9c:a3:ad:df:f1:3e:ac:2a:5a:72:30:89:bc:bd:
         a9:d4:e9:81:df:fd:9a:c7:38:00:8f:ee:11:9c:32:49:9f:87:
         06:ca:02:e5:f8:00:1c:b4:dd:69:13:60:47:bc:24:2a:98:4e:
         24:d9:ce:a2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDugZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ZGJkMzYzODJmOGZkYzc0ODYxMjRmZGQ2YWQ0MTRiMjI0MTQyMWEwHhcNMjQwMzEy
MTYwMTE0WhcNMjYwMzEyMTYwMTE0WjAzMTEwLwYDVQQDEyg0NTZhZWQ1ZGUyZmEx
MzMwNmNjY2E1NjYzMmY3YzkyZTk0ZTQxYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhyK4j7U/n9tsquHXcZiBlPKS2AjyQmxmVYv4K4/2ILBU6+pl
4dYYkjf6OQeoDyb0uFkEONUJxVqboqev4D5RuGw1Ep0CdjdmADMryFefMihD9g6B
EZdpKubmnY46do2h75YeiUhJmiV2CAeYzgSZzR2uzJtYGyux7dB92J+ipTpB0MRh
v6vhfpfIP8q7kUy5bjar/sRzaeZSWevTksr6Vlbkpfa4FUGQ0rk9oUteTxaR9yY8
vPKIUAiRryugH9lcWM6EosJq7Fxo2pUTJmRDrceXMLSC8rrlpDwpaq5TcxvUhUs/
7R4lo27bTiNQmMhKnHG8bX0Pwf9qhfs8vPyhuwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHV3lfdHudfH1AsUFK4HmesXO6q4MB8GA1UdIwQYMBaAFAzvk+hZcSyuLBq8
gSoRNR//UQwKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmFkYmQz
NjM4MmY4ZmRjNzQ4NjEyNGZkZDZhZDQxNGIyMjQxNDIxYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTBlZDQxZmQtNDVhYy00MDIwLWJiZGYtODVkNGUw
MDY0OTk5LzQ1NmFlZDVkZTJmYTEzMzA2Y2NjYTU2NjMyZjdjOTJlOTRlNDFhNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMGVkNDFmZC00NWFjLTQwMjAtYmJkZi04NWQ0
ZTAwNjQ5OTkvNmFkYmQzNjM4MmY4ZmRjNzQ4NjEyNGZkZDZhZDQxNGIyMjQxNDIx
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2rpTANBgkqhkiG9w0BAQsFAAOCAQEAFq6Sk8Zub5A9J+cH
hlv7B5ntebHz0gvzwNDvxwuaduT/BKby2j3rK+L5jKZwSJEg+r7Upb91Qj0WfwA1
Ubn5X/aemsyzxQAFOAAetoUK6u3fzzKe7QEuyicmA6L5ADa6EzapEExMPXB3fvkU
kJx/DaE9J+nbJqybaqfhIM1tqhugfHfca6i0/pI+e7E6Ufh8t0QQcpKRz0AQ65YM
fQ6aHzQv7HPC4oBjutXJgfURk+goP6+DUgIUyFC4Knl1nKCs6SVlG5OkdB8oL5yj
rd/xPqwqWnIwiby9qdTpgd/9msc4AI/uEZwySZ+HBsoC5fgAHLTdaRNgR7wkKphO
JNnOog==
-----END CERTIFICATE-----
Generated at Sun Mar 31 16:36:42 2024 by rpki-client on console-ams.rpki-client.org