Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/a831eadce5f34dd49c052be63e462b287264734e.roa
File:                     a831eadce5f34dd49c052be63e462b287264734e.roa (raw, json)
Hash identifier:          BXYelsOEb4Ufx4uBhQaDMeT/CXHX/1sxhE+KTTfguCE=
Subject key identifier:   CB:AA:0D:18:64:4F:73:BA:75:9D:7E:EC:90:C9:50:84:F2:21:A1:29
Certificate issuer:       /CN=5aaa493ee6730d1d0651bc5daec8b738e5737278
Certificate serial:       08DA
Authority key identifier: EC:63:92:BE:BF:A3:56:38:66:04:40:E2:71:62:91:99:A4:56:2E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5aaa493ee6730d1d0651bc5daec8b738e5737278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/a831eadce5f34dd49c052be63e462b287264734e.roa
Signing time:             Sun 08 Oct 2023 00:20:47 +0000
ROA not before:           Sat 07 Oct 2023 00:20:46 +0000
ROA not after:            Wed 08 Oct 2025 00:20:46 +0000
asID:                     265596
IP address blocks:        45.181.40.0/24 maxlen: 24
                          45.181.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aaa493ee6730d1d0651bc5daec8b738e5737278
        Validity
            Not Before: Oct  7 00:20:46 2023 GMT
            Not After : Oct  8 00:20:46 2025 GMT
        Subject: CN=a831eadce5f34dd49c052be63e462b287264734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:a2:e9:96:e3:96:35:a6:76:35:6d:3b:86:
                    86:f4:c6:38:83:86:ff:a0:38:3e:4e:af:ee:80:99:
                    b8:dc:34:9e:65:ea:81:9b:61:0b:00:1a:be:be:09:
                    52:30:76:93:c4:2f:60:d1:27:7c:8e:2a:99:cc:6c:
                    d1:c9:cf:cc:8c:c3:d2:68:1b:70:81:b8:b5:dc:89:
                    7a:50:db:6c:32:23:15:82:b4:af:43:1c:56:06:68:
                    ae:45:9d:99:07:dd:fb:0a:1b:b3:99:49:d6:34:05:
                    94:74:6c:2c:8c:76:29:05:20:f5:82:db:17:9e:03:
                    4b:d5:f6:70:d9:7a:f1:5e:02:eb:ac:c7:04:52:6f:
                    64:32:02:a2:a4:6f:5a:c8:86:53:2a:1c:51:6c:b9:
                    96:34:f3:cb:4b:fe:ec:a8:0f:1b:73:8d:67:5f:f8:
                    d2:1e:cb:72:0c:8a:b3:f6:15:2b:57:5d:a1:3b:ce:
                    d8:9c:ad:8e:b4:4e:2c:00:29:38:49:3d:76:fc:9d:
                    6f:c1:ee:f8:5a:b4:8f:b1:8a:b9:c3:8f:c7:c9:fd:
                    5e:a6:c2:4f:f3:12:88:4c:61:1e:ad:09:45:b9:ed:
                    74:65:20:8a:0a:56:6b:bc:e2:b7:51:5a:09:09:d6:
                    45:6c:c3:16:44:ed:5d:40:f8:c9:5f:04:94:79:07:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AA:0D:18:64:4F:73:BA:75:9D:7E:EC:90:C9:50:84:F2:21:A1:29
            X509v3 Authority Key Identifier:
                keyid:EC:63:92:BE:BF:A3:56:38:66:04:40:E2:71:62:91:99:A4:56:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5aaa493ee6730d1d0651bc5daec8b738e5737278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/a831eadce5f34dd49c052be63e462b287264734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/5aaa493ee6730d1d0651bc5daec8b738e5737278.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:5e:4d:c2:e3:1b:a2:c9:c1:b7:a3:71:85:ba:6c:10:de:
         ed:76:cf:66:8d:31:0e:87:44:3d:81:38:0d:d1:d6:32:60:86:
         3e:36:44:c6:c3:41:cd:e0:fc:43:3b:c4:2f:1a:2b:2b:47:11:
         8b:a0:37:fa:e1:bb:b6:9e:fd:e3:03:eb:e9:b8:50:0c:22:dc:
         fa:3c:08:46:16:28:65:eb:7d:67:30:a0:d7:2c:4c:c7:3e:81:
         68:e2:f4:6d:50:87:4e:a4:06:8d:be:0b:bf:1d:3b:23:97:b1:
         54:5f:89:13:08:8a:0e:f8:f1:17:9f:12:52:87:58:d4:01:eb:
         4f:f2:3b:67:9c:34:d0:49:fd:b2:a3:94:08:e4:21:6d:1b:45:
         09:c3:d4:e2:80:75:2b:62:a1:db:95:c7:17:a8:95:af:8e:f2:
         ba:79:eb:6e:43:83:af:d6:4e:ad:10:9d:81:05:31:d3:bd:39:
         04:c0:1a:0f:67:ac:a9:e6:ba:4d:e2:0f:f7:1b:e0:00:f0:27:
         5d:fa:fe:0f:ca:ac:77:6c:0b:23:7d:cc:68:e4:54:42:66:9d:
         56:f1:87:f1:ec:8a:db:39:67:e9:39:cf:82:22:97:22:7b:6a:
         8a:c5:c3:d3:28:8b:fa:98:a6:7f:fb:b6:f2:6a:af:46:98:e4:
         e0:49:02:1d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWFh
YTQ5M2VlNjczMGQxZDA2NTFiYzVkYWVjOGI3MzhlNTczNzI3ODAeFw0yMzEwMDcw
MDIwNDZaFw0yNTEwMDgwMDIwNDZaMDMxMTAvBgNVBAMTKGE4MzFlYWRjZTVmMzRk
ZDQ5YzA1MmJlNjNlNDYyYjI4NzI2NDczNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCQd6LpluOWNaZ2NW07hob0xjiDhv+gOD5Or+6AmbjcNJ5l6oGb
YQsAGr6+CVIwdpPEL2DRJ3yOKpnMbNHJz8yMw9JoG3CBuLXciXpQ22wyIxWCtK9D
HFYGaK5FnZkH3fsKG7OZSdY0BZR0bCyMdikFIPWC2xeeA0vV9nDZevFeAuusxwRS
b2QyAqKkb1rIhlMqHFFsuZY088tL/uyoDxtzjWdf+NIey3IMirP2FStXXaE7ztic
rY60TiwAKThJPXb8nW/B7vhatI+xirnDj8fJ/V6mwk/zEohMYR6tCUW57XRlIIoK
Vmu84rdRWgkJ1kVswxZE7V1A+MlfBJR5By6jAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUy6oNGGRPc7p1nX7skMlQhPIhoSkwHwYDVR0jBBgwFoAU7GOSvr+jVjhmBEDi
cWKRmaRWLm4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81YWFhNDkz
ZWU2NzMwZDFkMDY1MWJjNWRhZWM4YjczOGU1NzM3Mjc4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lNTE0YTQ3YS05ZDhlLTQ0MzMtOTdmZC1mYjgwZGZh
ZjRlY2YvYTgzMWVhZGNlNWYzNGRkNDljMDUyYmU2M2U0NjJiMjg3MjY0NzM0ZS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2U1MTRhNDdhLTlkOGUtNDQzMy05N2ZkLWZiODBk
ZmFmNGVjZi81YWFhNDkzZWU2NzMwZDFkMDY1MWJjNWRhZWM4YjczOGU1NzM3Mjc4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBLbUoMA0GCSqGSIb3DQEBCwUAA4IBAQB4+l5NwuMbosnBt6Nx
hbpsEN7tds9mjTEOh0Q9gTgN0dYyYIY+NkTGw0HN4PxDO8QvGisrRxGLoDf64bu2
nv3jA+vpuFAMItz6PAhGFihl631nMKDXLEzHPoFo4vRtUIdOpAaNvgu/HTsjl7FU
X4kTCIoO+PEXnxJSh1jUAetP8jtnnDTQSf2yo5QI5CFtG0UJw9TigHUrYqHblccX
qJWvjvK6eetuQ4Ov1k6tEJ2BBTHTvTkEwBoPZ6yp5rpN4g/3G+AA8Cdd+v4Pyqx3
bAsjfcxo5FRCZp1W8Yfx7IrbOWfpOc+CIpcie2qKxcPTKIv6mKZ/+7byaq9GmOTg
SQId
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org