Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/62b2d17959e8087afeb2d9430ce99e26b13e16e8.roa
File:                     62b2d17959e8087afeb2d9430ce99e26b13e16e8.roa (raw, json)
Hash identifier:          krLarHVTb87jI5lbR0NWaAOgolIoRGLGsYd2mQpn/nc=
Subject key identifier:   AE:41:38:13:AE:C6:BC:2F:98:76:BF:F5:B0:7D:D3:D0:22:F2:7A:54
Certificate issuer:       /CN=714626731563edac445f2a542b02422c8a96607b
Certificate serial:       19D63A
Authority key identifier: DC:B1:B7:DD:94:FF:19:C0:69:E0:BA:43:F1:8E:AA:1D:60:04:3F:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/714626731563edac445f2a542b02422c8a96607b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/62b2d17959e8087afeb2d9430ce99e26b13e16e8.roa
Signing time:             Sat 25 Jun 2022 16:22:04 +0000
ROA not before:           Sat 25 Jun 2022 03:00:00 +0000
ROA not after:            Tue 25 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693242 (0x19d63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714626731563edac445f2a542b02422c8a96607b
        Validity
            Not Before: Jun 25 03:00:00 2022 GMT
            Not After : Jun 25 03:00:00 2024 GMT
        Subject: CN=62b2d17959e8087afeb2d9430ce99e26b13e16e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:2d:61:c2:02:d0:c9:d1:23:6c:5f:b7:f2:
                    36:8e:92:a0:ed:90:24:5d:1d:44:ca:8a:2f:1b:6b:
                    81:12:78:3a:5d:65:a3:0a:83:96:be:c3:b7:4f:1b:
                    ad:43:e4:f9:36:f1:52:9d:2d:5b:1b:af:84:9a:cd:
                    9e:9d:1c:1c:a7:b3:32:e2:8b:2d:af:23:ce:07:4e:
                    bb:0d:dd:62:12:d2:49:6e:1b:a2:86:5f:04:c4:38:
                    a0:ca:ea:b7:2e:98:d1:ab:16:7c:fe:ec:ad:56:da:
                    27:b0:29:ed:80:b0:34:6a:e2:b7:fd:d0:4c:22:47:
                    21:3d:8d:99:65:08:59:c2:18:d7:aa:48:31:9f:c7:
                    cf:65:01:8e:32:1c:ea:f4:3e:61:4e:7c:28:5e:49:
                    c8:61:22:02:aa:64:f9:62:3c:bd:75:5a:9d:47:86:
                    f8:44:51:f2:59:b8:fe:02:5a:0f:6b:34:6b:cd:dd:
                    3c:c9:d8:b5:5c:e4:55:2d:3d:3a:81:10:60:75:e0:
                    1f:fa:e3:a7:5b:10:cb:09:93:ca:46:38:44:56:06:
                    4c:25:0a:23:b9:90:d2:61:4f:f3:83:f7:12:a1:5c:
                    69:53:63:2b:30:01:dd:22:e5:f7:38:96:e5:d0:a1:
                    41:1c:61:a6:1b:83:73:ac:a1:9b:59:2f:bb:b9:fc:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:41:38:13:AE:C6:BC:2F:98:76:BF:F5:B0:7D:D3:D0:22:F2:7A:54
            X509v3 Authority Key Identifier:
                keyid:DC:B1:B7:DD:94:FF:19:C0:69:E0:BA:43:F1:8E:AA:1D:60:04:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/714626731563edac445f2a542b02422c8a96607b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/62b2d17959e8087afeb2d9430ce99e26b13e16e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/714626731563edac445f2a542b02422c8a96607b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2a:9e:b8:45:6f:33:b1:d7:fe:2c:4b:45:b8:b6:c7:eb:80:
         d5:0e:42:5b:4c:a5:aa:5f:15:d3:46:48:a3:dc:73:fa:21:d9:
         3f:ff:5b:44:79:e1:a3:79:79:82:0d:f1:30:c4:0f:6b:7d:e0:
         2a:5a:cf:03:b7:51:5e:ab:5d:20:46:fd:cb:05:70:ae:0d:8b:
         c9:fd:70:58:53:fc:f1:f3:97:1e:c0:76:78:22:dd:29:6e:85:
         85:df:c0:95:e4:a2:2c:fb:4a:1b:fb:84:14:6b:7e:92:06:b9:
         4a:03:a7:83:f1:00:3d:90:b6:ea:23:fd:25:f9:ba:90:76:61:
         9e:66:9b:de:bb:62:77:7b:08:1b:0f:4d:4c:3f:f4:f9:d6:04:
         ed:b9:ca:5d:4f:a3:08:b9:7c:dc:d8:0c:23:49:ef:b8:c0:32:
         a7:ff:e3:2a:a6:12:95:ef:34:9f:1c:a0:24:16:be:cf:34:e4:
         32:34:cd:06:61:80:25:38:ed:1a:8d:b1:94:61:3b:ff:9f:21:
         6b:05:80:a1:a1:a9:5b:fd:1f:97:9b:a0:03:82:44:e3:8a:37:
         af:7c:4f:a3:af:10:a5:85:54:c6:61:5c:27:cb:23:43:8f:7d:
         5f:f0:a3:61:29:72:d3:32:57:43:27:dc:c3:ef:13:03:64:51:
         92:80:7a:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGdY6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
NDYyNjczMTU2M2VkYWM0NDVmMmE1NDJiMDI0MjJjOGE5NjYwN2IwHhcNMjIwNjI1
MDMwMDAwWhcNMjQwNjI1MDMwMDAwWjAzMTEwLwYDVQQDEyg2MmIyZDE3OTU5ZTgw
ODdhZmViMmQ5NDMwY2U5OWUyNmIxM2UxNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm7ItYcIC0MnRI2xft/I2jpKg7ZAkXR1EyoovG2uBEng6XWWj
CoOWvsO3TxutQ+T5NvFSnS1bG6+Ems2enRwcp7My4ostryPOB067Dd1iEtJJbhui
hl8ExDigyuq3LpjRqxZ8/uytVtonsCntgLA0auK3/dBMIkchPY2ZZQhZwhjXqkgx
n8fPZQGOMhzq9D5hTnwoXknIYSICqmT5Yjy9dVqdR4b4RFHyWbj+AloPazRrzd08
ydi1XORVLT06gRBgdeAf+uOnWxDLCZPKRjhEVgZMJQojuZDSYU/zg/cSoVxpU2Mr
MAHdIuX3OJbl0KFBHGGmG4NzrKGbWS+7ufx3dQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK5BOBOuxrwvmHa/9bB909Ai8npUMB8GA1UdIwQYMBaAFNyxt92U/xnAaeC6
Q/GOqh1gBD87MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzE0NjI2
NzMxNTYzZWRhYzQ0NWYyYTU0MmIwMjQyMmM4YTk2NjA3Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTYwYTJkMDgtOTdiMS00OTY2LTllNzYtZjgxZDYz
OWNmMGI4LzYyYjJkMTc5NTllODA4N2FmZWIyZDk0MzBjZTk5ZTI2YjEzZTE2ZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNjBhMmQwOC05N2IxLTQ5NjYtOWU3Ni1mODFk
NjM5Y2YwYjgvNzE0NjI2NzMxNTYzZWRhYzQ0NWYyYTU0MmIwMjQyMmM4YTk2NjA3
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC1GdTANBgkqhkiG9w0BAQsFAAOCAQEAmCqeuEVvM7HX/ixL
Rbi2x+uA1Q5CW0ylql8V00ZIo9xz+iHZP/9bRHnho3l5gg3xMMQPa33gKlrPA7dR
XqtdIEb9ywVwrg2Lyf1wWFP88fOXHsB2eCLdKW6Fhd/AleSiLPtKG/uEFGt+kga5
SgOng/EAPZC26iP9Jfm6kHZhnmab3rtid3sIGw9NTD/0+dYE7bnKXU+jCLl83NgM
I0nvuMAyp//jKqYSle80nxygJBa+zzTkMjTNBmGAJTjtGo2xlGE7/58hawWAoaGp
W/0fl5ugA4JE44o3r3xPo68QpYVUxmFcJ8sjQ499X/CjYSly0zJXQyfcw+8TA2RR
koB6bw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org