Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/510b9205e165453bba19dc2316925627286575c2.roa
File:                     510b9205e165453bba19dc2316925627286575c2.roa (raw, json)
Hash identifier:          sYAGuEC4XPaSVWtnFRZs/Kddv6vxh2irmvJgTcJ7bMc=
Subject key identifier:   65:4A:14:AA:90:A2:81:1B:92:5F:E6:95:DC:C4:92:81:CD:8B:C6:6A
Certificate issuer:       /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial:       29052F
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/510b9205e165453bba19dc2316925627286575c2.roa
Signing time:             Thu 04 Apr 2024 17:24:34 +0000
ROA not before:           Thu 04 Apr 2024 17:24:34 +0000
ROA not after:            Sat 04 Apr 2026 17:24:34 +0000
asID:                     266698
IP address blocks:        45.229.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2688303 (0x29052f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
        Validity
            Not Before: Apr  4 17:24:34 2024 GMT
            Not After : Apr  4 17:24:34 2026 GMT
        Subject: CN=510b9205e165453bba19dc2316925627286575c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:f9:e7:ea:d7:48:c8:0b:47:3e:d6:59:69:
                    ab:ac:a3:87:71:2f:01:0f:d9:bb:6a:65:88:05:c5:
                    14:ce:f0:de:25:c0:05:ac:a4:0f:74:43:d4:87:ca:
                    65:6f:8e:3c:fb:97:60:5c:1b:06:88:fe:ed:a0:c5:
                    44:12:ab:41:81:78:cc:ec:70:3f:7d:86:9e:ac:f9:
                    e1:42:8f:72:88:fd:29:82:b8:ae:2c:72:db:2c:e0:
                    e6:1b:c3:a4:b9:b7:ee:b3:0f:f9:2e:ea:ac:93:6e:
                    25:ab:13:b2:16:43:ed:de:50:30:3c:57:29:85:ee:
                    c3:7e:39:73:86:b0:8f:40:da:63:d7:a1:e2:11:1e:
                    6b:a9:8b:19:fa:33:3d:07:b1:c9:a8:d6:b6:30:55:
                    71:37:36:b2:75:48:1e:31:7b:5f:2d:7f:5b:c7:87:
                    3d:5a:87:ba:d0:2a:de:35:a9:2c:dd:77:6c:c9:62:
                    97:bd:e2:02:7f:f7:ea:cd:2e:f1:79:42:8f:49:e9:
                    51:b7:e0:78:2f:d9:56:af:a9:2d:72:1c:59:a5:38:
                    0b:c7:e2:c7:b5:1e:e2:b9:cb:d2:57:ae:2b:ce:96:
                    aa:aa:24:b8:b0:2c:3b:d1:89:9c:76:e8:e7:bb:5d:
                    0a:d1:32:19:3a:96:00:a9:96:a4:d6:45:3f:52:8b:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4A:14:AA:90:A2:81:1B:92:5F:E6:95:DC:C4:92:81:CD:8B:C6:6A
            X509v3 Authority Key Identifier:
                keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/510b9205e165453bba19dc2316925627286575c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:90:67:ba:2a:ee:bf:e2:ce:c6:d7:84:d5:e4:58:a1:d2:30:
         18:5d:0f:24:77:22:e9:55:af:5e:ac:54:0b:1c:66:7a:ee:07:
         2d:25:f0:15:2b:e9:34:ca:cf:45:46:f7:82:e8:6f:91:22:e9:
         2b:c2:c0:4a:3a:45:e3:b2:96:4d:40:62:16:65:6d:69:f1:4f:
         31:1e:f0:bb:01:4c:59:b9:8b:fc:8b:3b:bd:0b:38:99:d3:72:
         7e:f0:f6:24:38:2b:ca:8e:1e:35:54:ce:40:5d:c5:c0:e3:4f:
         0a:b6:b4:9a:55:99:de:64:2e:23:55:a1:d1:81:e4:bd:17:de:
         29:96:d7:cd:c1:29:d1:03:4d:53:72:4d:30:f6:ed:03:d6:2b:
         0d:10:ca:55:2c:5b:43:d8:a6:01:db:8f:2d:29:61:93:13:a6:
         1d:c2:1c:9b:41:af:69:1e:de:64:53:8a:4d:b0:49:3c:aa:ca:
         33:e6:26:ea:94:36:be:85:79:14:7c:fc:52:da:fe:5e:6c:8e:
         19:b5:eb:2f:dc:96:e9:15:de:f7:2f:b5:af:e2:ae:6e:8e:09:
         85:b9:0e:21:dc:76:08:aa:7c:16:d7:1f:6e:83:2c:e8:68:02:
         ff:b6:e0:41:79:ba:24:56:57:91:eb:86:e2:84:04:25:ee:1c:
         d7:bd:4c:88
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKQUvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
MGM2Y2E1NjdhNjIxYWMzNjMwYzcxZDg5YTMyNjA3MWNlNzI0YzgwHhcNMjQwNDA0
MTcyNDM0WhcNMjYwNDA0MTcyNDM0WjAzMTEwLwYDVQQDEyg1MTBiOTIwNWUxNjU0
NTNiYmExOWRjMjMxNjkyNTYyNzI4NjU3NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjyj55+rXSMgLRz7WWWmrrKOHcS8BD9m7amWIBcUUzvDeJcAF
rKQPdEPUh8plb448+5dgXBsGiP7toMVEEqtBgXjM7HA/fYaerPnhQo9yiP0pgriu
LHLbLODmG8Okubfusw/5Luqsk24lqxOyFkPt3lAwPFcphe7DfjlzhrCPQNpj16Hi
ER5rqYsZ+jM9B7HJqNa2MFVxNzaydUgeMXtfLX9bx4c9Woe60CreNaks3XdsyWKX
veICf/fqzS7xeUKPSelRt+B4L9lWr6ktchxZpTgLx+LHtR7iucvSV64rzpaqqiS4
sCw70Ymcdujnu10K0TIZOpYAqZak1kU/Uov+DQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGVKFKqQooEbkl/mldzEkoHNi8ZqMB8GA1UdIwQYMBaAFPK9FC47nNrXEMWC
hQw5ygV9jfC7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2YwYzZj
YTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTc4YmMzYTItZmVhNy00ZDlhLWI0ZjgtNTc2ODI0
MjU2MWEyLzUxMGI5MjA1ZTE2NTQ1M2JiYTE5ZGMyMzE2OTI1NjI3Mjg2NTc1YzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzhiYzNhMi1mZWE3LTRkOWEtYjRmOC01NzY4
MjQyNTYxYTIvN2YwYzZjYTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3lSDANBgkqhkiG9w0BAQsFAAOCAQEAYZBnuiruv+LOxteE
1eRYodIwGF0PJHci6VWvXqxUCxxmeu4HLSXwFSvpNMrPRUb3guhvkSLpK8LASjpF
47KWTUBiFmVtafFPMR7wuwFMWbmL/Is7vQs4mdNyfvD2JDgryo4eNVTOQF3FwONP
Cra0mlWZ3mQuI1Wh0YHkvRfeKZbXzcEp0QNNU3JNMPbtA9YrDRDKVSxbQ9imAduP
LSlhkxOmHcIcm0GvaR7eZFOKTbBJPKrKM+Ym6pQ2voV5FHz8Utr+XmyOGbXrL9yW
6RXe9y+1r+Kubo4JhbkOIdx2CKp8FtcfboMs6GgC/7bgQXm6JFZXkeuG4oQEJe4c
171MiA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org