Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/c318247378ce99ad48faa65f3189fc01710a16b1.roa
File:                     c318247378ce99ad48faa65f3189fc01710a16b1.roa (raw, json)
Hash identifier:          jWLIjYRhCz26/E6enUu3N4P9IxSQgO+wXA069xSJ0Tc=
Subject key identifier:   5A:31:D5:7A:DD:AA:7E:C0:4D:9C:94:68:9A:CF:8E:A5:02:65:9E:37
Certificate issuer:       /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial:       24D568
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/c318247378ce99ad48faa65f3189fc01710a16b1.roa
Signing time:             Tue 17 Oct 2023 23:43:03 +0000
ROA not before:           Mon 16 Oct 2023 23:43:02 +0000
ROA not after:            Fri 17 Oct 2025 23:43:02 +0000
asID:                     52468
IP address blocks:        45.71.202.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413928 (0x24d568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
        Validity
            Not Before: Oct 16 23:43:02 2023 GMT
            Not After : Oct 17 23:43:02 2025 GMT
        Subject: CN=c318247378ce99ad48faa65f3189fc01710a16b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:90:33:85:77:51:d5:5e:dc:13:f6:74:82:
                    fb:8d:be:18:78:3e:53:17:cd:55:20:9f:94:97:16:
                    71:48:66:9e:3b:ac:ad:d1:50:43:76:53:04:91:ac:
                    0e:44:12:a1:d3:2c:c8:1a:75:59:43:55:8e:f5:1c:
                    fa:b8:3b:30:a2:fc:5b:92:4a:e5:a2:6d:20:a2:e5:
                    c8:24:62:4c:fb:4f:aa:31:74:a5:7d:78:0e:f5:67:
                    01:ec:dc:55:2f:f5:c4:6d:93:15:a1:3a:bd:ae:17:
                    df:0f:06:19:fd:81:08:35:34:0c:8f:da:35:13:b9:
                    0a:bd:f9:75:0d:8a:14:48:19:c4:e1:45:98:6b:ac:
                    1a:a8:56:7e:cb:b7:64:52:06:6b:e2:83:8c:2f:a0:
                    b4:04:52:fa:63:a3:e0:f6:73:3a:ca:d9:88:4a:9b:
                    4c:75:0f:6e:ad:39:ca:85:54:07:d8:de:47:0a:c2:
                    04:15:e0:1d:60:32:27:60:d1:db:66:0f:da:2d:aa:
                    13:09:67:df:4f:65:b7:6c:a5:a9:46:d6:de:50:e2:
                    ce:77:2d:03:13:96:95:9d:21:b6:8f:af:6e:d1:93:
                    e6:5c:3b:4a:87:4c:1d:85:57:ed:99:86:c4:43:68:
                    ee:01:a0:cd:ad:f4:e3:59:ae:79:54:3a:42:e1:e9:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:31:D5:7A:DD:AA:7E:C0:4D:9C:94:68:9A:CF:8E:A5:02:65:9E:37
            X509v3 Authority Key Identifier:
                keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/c318247378ce99ad48faa65f3189fc01710a16b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:3c:91:81:6e:4d:a6:4a:64:80:3a:3d:2f:f4:59:c3:a1:
         90:9f:5c:da:e5:58:b8:f7:67:93:c7:bd:c4:0d:91:6d:c3:df:
         ff:05:f7:62:cb:89:34:f5:bd:38:95:cb:cc:3e:15:84:5d:ef:
         92:52:5d:ab:df:5f:bd:0c:1f:a8:b3:bc:3d:1c:6f:e1:09:af:
         55:e3:5c:e1:84:dc:4b:c0:f2:a5:77:3b:80:5b:36:2c:ba:49:
         c7:5c:7c:3d:08:9b:98:41:eb:d8:a6:0d:bb:29:03:48:42:72:
         20:ea:a8:81:4c:a2:9d:5a:a4:ab:e5:ef:25:07:07:86:9d:f2:
         1f:e6:9b:10:1d:c0:1a:3c:fb:a3:79:bb:20:1d:e3:17:36:fe:
         d4:86:fc:4f:28:51:e9:e0:ef:8c:83:3e:ee:20:fd:30:07:6c:
         65:f4:31:31:af:61:40:19:00:9b:90:2f:b9:57:c7:58:2a:7f:
         1f:ad:24:03:54:e4:55:0a:b4:77:0a:94:3a:82:32:bb:fd:75:
         f4:58:f3:f3:6d:d4:1b:09:93:b7:22:f0:e3:be:d9:e6:33:22:
         cc:93:f3:2e:bf:9c:ce:59:34:64:d2:be:02:04:4a:e7:86:44:
         60:63:77:78:48:fd:c9:6b:35:f0:8c:47:c3:84:9b:78:e7:aa:
         b2:a2:e7:14
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJNVoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU4
MWUwYzlkMDhlY2IyMTc2MjNiNTI5MGVlODUxMjQyMjIxY2RjODUwHhcNMjMxMDE2
MjM0MzAyWhcNMjUxMDE3MjM0MzAyWjAzMTEwLwYDVQQDEyhjMzE4MjQ3Mzc4Y2U5
OWFkNDhmYWE2NWYzMTg5ZmMwMTcxMGExNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgHyQM4V3UdVe3BP2dIL7jb4YeD5TF81VIJ+UlxZxSGaeO6yt
0VBDdlMEkawORBKh0yzIGnVZQ1WO9Rz6uDswovxbkkrlom0gouXIJGJM+0+qMXSl
fXgO9WcB7NxVL/XEbZMVoTq9rhffDwYZ/YEINTQMj9o1E7kKvfl1DYoUSBnE4UWY
a6waqFZ+y7dkUgZr4oOML6C0BFL6Y6Pg9nM6ytmISptMdQ9urTnKhVQH2N5HCsIE
FeAdYDInYNHbZg/aLaoTCWffT2W3bKWpRtbeUOLOdy0DE5aVnSG2j69u0ZPmXDtK
h0wdhVftmYbEQ2juAaDNrfTjWa55VDpC4en1HQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFox1Xrdqn7ATZyUaJrPjqUCZZ43MB8GA1UdIwQYMBaAFIAE6gr7asAmtv6s
gEj9EWXoY/maMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTgxZTBj
OWQwOGVjYjIxNzYyM2I1MjkwZWU4NTEyNDIyMjFjZGM4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU3MWIxNzQtY2M5MC00ZGJjLTg1MTktMzU1Yjg0
MWQ3NGRiL2MzMTgyNDczNzhjZTk5YWQ0OGZhYTY1ZjMxODlmYzAxNzEwYTE2YjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTcxYjE3NC1jYzkwLTRkYmMtODUxOS0zNTVi
ODQxZDc0ZGIvNTgxZTBjOWQwOGVjYjIxNzYyM2I1MjkwZWU4NTEyNDIyMjFjZGM4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS1HyjANBgkqhkiG9w0BAQsFAAOCAQEAifE8kYFuTaZKZIA6
PS/0WcOhkJ9c2uVYuPdnk8e9xA2RbcPf/wX3YsuJNPW9OJXLzD4VhF3vklJdq99f
vQwfqLO8PRxv4QmvVeNc4YTcS8DypXc7gFs2LLpJx1x8PQibmEHr2KYNuykDSEJy
IOqogUyinVqkq+XvJQcHhp3yH+abEB3AGjz7o3m7IB3jFzb+1Ib8TyhR6eDvjIM+
7iD9MAdsZfQxMa9hQBkAm5AvuVfHWCp/H60kA1TkVQq0dwqUOoIyu/119Fjz823U
GwmTtyLw477Z5jMizJPzLr+czlk0ZNK+AgRK54ZEYGN3eEj9yWs18IxHw4SbeOeq
sqLnFA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org