Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/92ee217bc5eada59a0bbc6152ca87e4641d478e3.roa
File:                     92ee217bc5eada59a0bbc6152ca87e4641d478e3.roa (raw, json)
Hash identifier:          Z2IjgGhpIN4Vxxf6Ht3ShLGT3bYTjpyeFyZog2484qw=
Subject key identifier:   3D:1F:EE:B3:92:78:73:E0:D1:26:43:77:AC:25:FE:07:37:90:BE:42
Certificate issuer:       /CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
Certificate serial:       287882
Authority key identifier: 42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/92ee217bc5eada59a0bbc6152ca87e4641d478e3.roa
Signing time:             Mon 18 Mar 2024 19:03:11 +0000
ROA not before:           Mon 18 Mar 2024 19:03:10 +0000
ROA not after:            Wed 18 Mar 2026 19:03:10 +0000
asID:                     265722
IP address blocks:        45.7.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652290 (0x287882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
        Validity
            Not Before: Mar 18 19:03:10 2024 GMT
            Not After : Mar 18 19:03:10 2026 GMT
        Subject: CN=92ee217bc5eada59a0bbc6152ca87e4641d478e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:c5:3d:e7:fd:c7:3d:a2:be:38:35:d8:f7:
                    7f:09:bd:6c:e4:34:d3:65:e6:99:11:53:08:79:7a:
                    6f:93:36:4b:d9:03:da:03:7a:91:75:60:f5:1b:96:
                    38:0f:eb:f9:39:f9:5a:61:bb:6d:fc:90:21:ad:08:
                    41:67:5d:88:fc:c2:37:6f:f0:c8:02:4f:88:e3:99:
                    ad:c7:48:6d:f7:bd:3d:a1:22:6d:6f:7a:e6:28:2f:
                    79:6d:3e:2b:5e:fd:be:86:d7:d6:0e:6a:3f:be:45:
                    f6:ba:b0:73:e0:8a:a9:23:6b:72:2d:69:9a:54:b6:
                    11:fa:2e:99:2d:6c:ff:74:0b:32:79:3a:c2:34:e7:
                    c1:ad:95:8f:3f:d8:0a:41:36:be:30:b6:db:fb:c4:
                    3b:f3:27:58:01:37:95:28:88:39:23:c1:0c:70:84:
                    2e:cf:01:ef:57:d8:f8:bb:17:0e:fb:ad:51:a6:dd:
                    5a:06:dc:ba:38:1a:0e:a9:15:9a:3d:3c:ca:70:ad:
                    ef:c2:ab:2e:f9:86:04:f3:1c:ff:a1:e6:6b:d3:ad:
                    18:2f:58:7a:64:9d:b5:9a:09:d7:a7:8f:7d:73:0e:
                    05:ce:01:bd:d6:5c:6f:b9:bf:83:0a:71:76:5f:6f:
                    23:8e:05:dc:ff:4d:f7:c4:41:37:9e:45:d2:0d:ad:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:EE:B3:92:78:73:E0:D1:26:43:77:AC:25:FE:07:37:90:BE:42
            X509v3 Authority Key Identifier:
                keyid:42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/92ee217bc5eada59a0bbc6152ca87e4641d478e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:37:ce:40:5d:5e:8c:1d:e2:60:88:0d:6f:43:96:63:b4:
         3a:74:44:b0:4e:21:05:44:21:36:86:2b:95:f9:03:a4:61:15:
         e8:4b:9f:f2:08:83:4e:d9:64:cb:6c:9e:8b:f5:df:da:60:d3:
         b8:d1:8a:b5:10:b1:69:3b:04:d3:e9:d8:92:58:65:83:3a:b7:
         3f:a4:52:49:d3:1a:09:fe:e2:47:3b:48:4f:01:f5:11:77:13:
         e5:d8:3d:0d:5d:1b:de:28:43:39:1e:b8:10:16:fd:14:a5:9b:
         e4:c2:51:2a:0d:9a:17:18:b9:ab:28:e1:c3:39:a9:03:75:e2:
         80:4b:cf:a1:75:92:7a:90:2f:db:59:6d:81:98:f9:70:6d:28:
         99:f7:ac:ea:5d:fe:fc:ae:41:61:5b:86:79:d5:72:59:74:ad:
         e1:3d:a5:ea:f7:24:42:cf:b1:ee:27:38:0c:a5:39:aa:9b:c3:
         56:9c:c8:67:d7:04:4d:e0:39:3f:c6:9f:da:de:0e:17:72:54:
         bb:bd:63:fc:d3:38:64:45:7b:41:96:2f:35:b5:16:50:14:c9:
         c4:3b:17:97:3e:37:ea:9e:48:f4:27:5e:6a:5d:34:eb:26:62:
         5b:54:5f:ba:cb:1e:5f:b5:f7:66:a3:7c:38:05:e7:27:bd:3f:
         b1:1a:56:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKHiCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
MmZjMzBlNGFlNzJkMGJmOWZmMGY4MDFiZjQ3MThjZTE4NjczNTYwHhcNMjQwMzE4
MTkwMzEwWhcNMjYwMzE4MTkwMzEwWjAzMTEwLwYDVQQDEyg5MmVlMjE3YmM1ZWFk
YTU5YTBiYmM2MTUyY2E4N2U0NjQxZDQ3OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApEnFPef9xz2ivjg12Pd/Cb1s5DTTZeaZEVMIeXpvkzZL2QPa
A3qRdWD1G5Y4D+v5OflaYbtt/JAhrQhBZ12I/MI3b/DIAk+I45mtx0ht9709oSJt
b3rmKC95bT4rXv2+htfWDmo/vkX2urBz4IqpI2tyLWmaVLYR+i6ZLWz/dAsyeTrC
NOfBrZWPP9gKQTa+MLbb+8Q78ydYATeVKIg5I8EMcIQuzwHvV9j4uxcO+61Rpt1a
Bty6OBoOqRWaPTzKcK3vwqsu+YYE8xz/oeZr060YL1h6ZJ21mgnXp499cw4FzgG9
1lxvub+DCnF2X28jjgXc/033xEE3nkXSDa1uXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD0f7rOSeHPg0SZDd6wl/gc3kL5CMB8GA1UdIwQYMBaAFEL+cDb5TNJvPXdp
2/UN78BR3A5NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTkyZmMz
MGU0YWU3MmQwYmY5ZmYwZjgwMWJmNDcxOGNlMTg2NzM1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTNmOTc2MDQtM2NkYi00OGFiLWE1MTEtMTc3YWIy
ODE5NDRhLzkyZWUyMTdiYzVlYWRhNTlhMGJiYzYxNTJjYTg3ZTQ2NDFkNDc4ZTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lM2Y5NzYwNC0zY2RiLTQ4YWItYTUxMS0xNzdh
YjI4MTk0NGEvOTkyZmMzMGU0YWU3MmQwYmY5ZmYwZjgwMWJmNDcxOGNlMTg2NzM1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0HVDANBgkqhkiG9w0BAQsFAAOCAQEAVbg3zkBdXowd4mCI
DW9DlmO0OnREsE4hBUQhNoYrlfkDpGEV6Euf8giDTtlky2yei/Xf2mDTuNGKtRCx
aTsE0+nYklhlgzq3P6RSSdMaCf7iRztITwH1EXcT5dg9DV0b3ihDOR64EBb9FKWb
5MJRKg2aFxi5qyjhwzmpA3XigEvPoXWSepAv21ltgZj5cG0omfes6l3+/K5BYVuG
edVyWXSt4T2l6vckQs+x7ic4DKU5qpvDVpzIZ9cETeA5P8af2t4OF3JUu71j/NM4
ZEV7QZYvNbUWUBTJxDsXlz436p5I9Cdeal006yZiW1RfusseX7X3ZqN8OAXnJ70/
sRpW/g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org