Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/8da596b5c4cc6d81b624540196ad38fb8e296747.roa
File:                     8da596b5c4cc6d81b624540196ad38fb8e296747.roa (raw, json)
Hash identifier:          6ftkkr2fpkGw3qu5rVc8+SNEx9UHUL5HHMLJwY9iK8w=
Subject key identifier:   1A:70:1A:6B:C3:E2:73:CB:F0:36:DB:33:1B:37:90:8C:DE:58:E5:C7
Certificate issuer:       /CN=18c4c5ff1bf88327e033846d831a9d027fdae755
Certificate serial:       22CF6A
Authority key identifier: 3B:6E:2A:5C:A1:CB:46:F4:04:85:E1:5C:F9:A0:F9:7D:7D:6F:F6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18c4c5ff1bf88327e033846d831a9d027fdae755.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/8da596b5c4cc6d81b624540196ad38fb8e296747.roa
Signing time:             Sat 16 Sep 2023 23:57:11 +0000
ROA not before:           Fri 15 Sep 2023 23:57:11 +0000
ROA not after:            Tue 16 Sep 2025 23:57:11 +0000
asID:                     265686
IP address blocks:        45.6.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281322 (0x22cf6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c4c5ff1bf88327e033846d831a9d027fdae755
        Validity
            Not Before: Sep 15 23:57:11 2023 GMT
            Not After : Sep 16 23:57:11 2025 GMT
        Subject: CN=8da596b5c4cc6d81b624540196ad38fb8e296747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:81:ef:37:d2:89:26:71:f9:89:3b:5a:ea:
                    f5:70:ef:c6:de:be:1b:ac:6a:fd:ce:0d:55:bb:1c:
                    c4:35:98:49:c4:f3:68:e2:7b:3d:0c:5d:e4:f4:0e:
                    c3:d2:fb:51:75:ac:a0:5c:c9:4c:fd:da:65:da:d1:
                    16:62:12:13:c4:06:94:e2:b8:53:ba:e2:11:80:24:
                    80:53:02:54:d5:69:78:84:00:79:eb:d3:99:a9:fc:
                    d6:3d:44:9b:e3:93:83:ed:55:29:1a:10:13:0d:b5:
                    03:2c:f7:7a:1d:ca:ce:8f:54:86:f2:ed:71:da:f8:
                    4e:b0:83:b6:58:42:44:92:90:d6:34:74:30:c2:c3:
                    e5:fb:f1:53:c7:f9:ec:e7:5c:3c:26:ea:27:98:5c:
                    46:fe:82:e3:91:cb:06:bc:c1:bf:db:0c:34:2e:c8:
                    bc:f1:67:fd:71:34:f3:02:48:d7:6c:e4:c7:67:66:
                    2c:ff:72:58:d1:44:e5:f3:9e:3c:ec:27:2e:5c:c0:
                    f5:67:fd:bd:f1:ec:72:9e:4a:9f:67:d5:fb:c3:ac:
                    90:cd:1c:de:59:0a:86:c2:3d:81:c3:2f:4f:62:91:
                    b3:0f:aa:81:40:6a:46:98:19:90:92:1b:cb:17:d1:
                    38:24:b3:73:bf:c9:2d:8c:67:30:9e:63:15:5c:e7:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:70:1A:6B:C3:E2:73:CB:F0:36:DB:33:1B:37:90:8C:DE:58:E5:C7
            X509v3 Authority Key Identifier:
                keyid:3B:6E:2A:5C:A1:CB:46:F4:04:85:E1:5C:F9:A0:F9:7D:7D:6F:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18c4c5ff1bf88327e033846d831a9d027fdae755.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/8da596b5c4cc6d81b624540196ad38fb8e296747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22cc60a-df2e-4327-af1c-7856b5443a5e/18c4c5ff1bf88327e033846d831a9d027fdae755.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:e7:1f:5b:12:ac:2a:12:2f:4a:7f:b7:45:b1:b0:24:9d:c6:
         4e:ac:3d:1e:eb:a8:5e:7a:d6:a1:3d:9e:7e:52:a7:60:3f:0c:
         cf:df:75:c7:8f:33:19:8e:5a:58:6f:89:e2:94:45:18:41:f3:
         13:27:ab:33:43:a9:bc:94:37:ba:12:13:a5:32:63:0b:b5:48:
         ab:08:a5:0d:52:6a:4e:df:5f:57:00:56:fb:e6:0a:14:fb:f0:
         f5:62:fd:ef:7a:cb:99:5f:d7:46:a8:d2:39:f5:85:66:e2:17:
         96:70:ed:23:d4:f0:7b:aa:ae:62:c0:db:c5:82:ef:35:3a:45:
         b2:62:63:da:25:71:2d:d3:51:0f:8f:cb:d2:78:92:cc:3b:ad:
         7a:06:2d:98:c5:b0:f6:54:ea:a2:e9:2c:f4:7e:c4:35:85:04:
         3a:9a:5e:04:57:b8:b7:06:08:04:1c:48:22:7b:e5:f2:fb:54:
         e5:11:a2:3a:c9:1b:57:a1:0a:65:45:91:4f:99:8d:b4:a2:8b:
         8d:4f:81:94:72:b8:59:b0:e8:e5:17:24:28:6c:f7:9e:86:90:
         b0:c6:cc:45:fb:78:28:a5:2d:c8:cd:61:d0:9c:16:02:17:cd:
         6e:e1:1f:12:c5:2a:78:47:5a:7d:68:92:f5:08:d4:3a:a9:83:
         d6:f1:3a:77
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIs9qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
YzRjNWZmMWJmODgzMjdlMDMzODQ2ZDgzMWE5ZDAyN2ZkYWU3NTUwHhcNMjMwOTE1
MjM1NzExWhcNMjUwOTE2MjM1NzExWjAzMTEwLwYDVQQDEyg4ZGE1OTZiNWM0Y2M2
ZDgxYjYyNDU0MDE5NmFkMzhmYjhlMjk2NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgOaB7zfSiSZx+Yk7Wur1cO/G3r4brGr9zg1VuxzENZhJxPNo
4ns9DF3k9A7D0vtRdaygXMlM/dpl2tEWYhITxAaU4rhTuuIRgCSAUwJU1Wl4hAB5
69OZqfzWPUSb45OD7VUpGhATDbUDLPd6HcrOj1SG8u1x2vhOsIO2WEJEkpDWNHQw
wsPl+/FTx/ns51w8JuonmFxG/oLjkcsGvMG/2ww0Lsi88Wf9cTTzAkjXbOTHZ2Ys
/3JY0UTl85487CcuXMD1Z/298exynkqfZ9X7w6yQzRzeWQqGwj2Bwy9PYpGzD6qB
QGpGmBmQkhvLF9E4JLNzv8ktjGcwnmMVXOfE9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBpwGmvD4nPL8DbbMxs3kIzeWOXHMB8GA1UdIwQYMBaAFDtuKlyhy0b0BIXh
XPmg+X19b/akMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMThjNGM1
ZmYxYmY4ODMyN2UwMzM4NDZkODMxYTlkMDI3ZmRhZTc1NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTIyY2M2MGEtZGYyZS00MzI3LWFmMWMtNzg1NmI1
NDQzYTVlLzhkYTU5NmI1YzRjYzZkODFiNjI0NTQwMTk2YWQzOGZiOGUyOTY3NDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMjJjYzYwYS1kZjJlLTQzMjctYWYxYy03ODU2
YjU0NDNhNWUvMThjNGM1ZmYxYmY4ODMyN2UwMzM4NDZkODMxYTlkMDI3ZmRhZTc1
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0GBDANBgkqhkiG9w0BAQsFAAOCAQEAcucfWxKsKhIvSn+3
RbGwJJ3GTqw9HuuoXnrWoT2eflKnYD8Mz991x48zGY5aWG+J4pRFGEHzEyerM0Op
vJQ3uhITpTJjC7VIqwilDVJqTt9fVwBW++YKFPvw9WL973rLmV/XRqjSOfWFZuIX
lnDtI9Twe6quYsDbxYLvNTpFsmJj2iVxLdNRD4/L0niSzDutegYtmMWw9lTqouks
9H7ENYUEOppeBFe4twYIBBxIInvl8vtU5RGiOskbV6EKZUWRT5mNtKKLjU+BlHK4
WbDo5RckKGz3noaQsMbMRft4KKUtyM1h0JwWAhfNbuEfEsUqeEdafWiS9QjUOqmD
1vE6dw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org