Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/efd833255e9e50a212997bc0112f09e1bfde8896.roa
File:                     efd833255e9e50a212997bc0112f09e1bfde8896.roa (raw, json)
Hash identifier:          lBNqJGiitNiV9aLyCVcLV1lbU9CWNH/3bmiT2gtBzUM=
Subject key identifier:   3D:7B:AB:77:8C:17:47:98:84:DD:A6:F4:CF:C3:BD:49:40:73:9B:7D
Certificate issuer:       /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial:       14E26D
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/efd833255e9e50a212997bc0112f09e1bfde8896.roa
Signing time:             Tue 25 Jan 2022 17:42:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266698
IP address blocks:        45.230.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368685 (0x14e26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=efd833255e9e50a212997bc0112f09e1bfde8896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:f9:54:ac:b4:21:22:e3:c9:8a:44:3f:2e:
                    4f:60:7a:1c:6a:33:19:20:b4:59:a7:98:c0:ef:de:
                    e2:d1:bf:71:32:4c:9b:68:b0:32:ac:11:34:d1:79:
                    50:67:f1:cc:f4:57:47:5f:ae:0d:7f:0a:5e:b4:82:
                    8b:bd:48:cd:7e:ff:d4:be:f9:b9:ce:a8:a1:52:50:
                    f7:78:f4:c5:8d:17:15:f6:17:76:db:fa:89:84:80:
                    10:37:dc:1d:aa:3f:84:f3:4e:1b:d0:e8:02:66:b7:
                    6a:ba:da:bc:99:12:be:eb:27:a8:48:8a:41:79:3d:
                    2f:15:06:ee:d7:c3:4e:16:d3:e3:47:5c:c1:e8:17:
                    ea:5f:d6:84:48:7b:0a:28:2f:a1:88:29:76:dc:e8:
                    53:51:48:3d:85:36:7c:cc:d4:81:e4:82:e6:11:1c:
                    21:ac:58:3f:27:be:4b:46:94:42:36:69:b2:bc:9b:
                    5d:86:43:64:d8:cb:03:f9:ca:a4:64:3a:5b:72:49:
                    6c:5d:1d:7d:23:eb:ac:80:8e:f1:9a:f0:c6:ee:bc:
                    72:de:0c:42:77:76:e3:00:b4:6c:ec:7a:ae:9e:82:
                    f0:c7:87:7d:a7:14:3a:44:68:ad:45:7d:3c:ea:7a:
                    46:3f:e9:9b:7c:f0:e1:a2:33:db:f7:ed:77:c9:81:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:AB:77:8C:17:47:98:84:DD:A6:F4:CF:C3:BD:49:40:73:9B:7D
            X509v3 Authority Key Identifier:
                keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/efd833255e9e50a212997bc0112f09e1bfde8896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:9f:97:85:92:e3:b5:7d:20:01:c0:1a:b3:56:00:b8:49:
         0e:e7:ee:04:9e:9c:5f:7b:ca:d2:18:a6:9a:cf:74:61:f2:e9:
         fd:2b:48:88:df:f7:51:ea:be:15:f5:da:83:c0:77:8c:53:96:
         5f:4d:f4:98:c4:08:8b:73:32:86:55:ae:89:5c:3a:73:cf:5b:
         e5:4a:fd:6e:c5:e8:53:75:47:83:03:22:d8:ef:14:b5:c7:c1:
         11:a4:c8:63:f5:79:23:bf:79:0a:9f:94:93:0e:ef:a5:f4:a9:
         82:39:4e:bb:20:5b:78:b4:87:00:8d:aa:85:20:b8:8b:24:02:
         28:d3:d0:ff:86:ec:a3:bf:e0:ad:7f:e4:2e:9a:8b:c4:18:8d:
         ca:7a:dd:cf:2f:66:fa:b4:3c:22:0f:7c:66:13:93:fc:3a:8c:
         96:36:8f:20:10:b7:ea:3a:23:d3:98:1f:a4:f1:f8:b6:0f:61:
         78:60:48:80:36:f3:6e:25:39:b2:34:e0:ab:62:1e:58:8b:67:
         44:46:f2:b8:2d:39:99:18:f1:c1:2b:3d:4d:db:03:06:80:f6:
         9d:79:04:bd:19:d7:a2:68:8c:36:c0:ed:0e:3f:24:9d:c3:76:
         25:a7:f9:a5:8f:5a:51:7c:91:01:e0:cd:2d:69:88:36:1d:34:
         0e:4d:77:14
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFOJtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
MGM2Y2E1NjdhNjIxYWMzNjMwYzcxZDg5YTMyNjA3MWNlNzI0YzgwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlZmQ4MzMyNTVlOWU1
MGEyMTI5OTdiYzAxMTJmMDllMWJmZGU4ODk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWn5VKy0ISLjyYpEPy5PYHocajMZILRZp5jA797i0b9xMkyb
aLAyrBE00XlQZ/HM9FdHX64NfwpetIKLvUjNfv/Uvvm5zqihUlD3ePTFjRcV9hd2
2/qJhIAQN9wdqj+E804b0OgCZrdqutq8mRK+6yeoSIpBeT0vFQbu18NOFtPjR1zB
6BfqX9aESHsKKC+hiCl23OhTUUg9hTZ8zNSB5ILmERwhrFg/J75LRpRCNmmyvJtd
hkNk2MsD+cqkZDpbcklsXR19I+usgI7xmvDG7rxy3gxCd3bjALRs7HqunoLwx4d9
pxQ6RGitRX086npGP+mbfPDhojPb9+13yYFXjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD17q3eMF0eYhN2m9M/DvUlAc5t9MB8GA1UdIwQYMBaAFPK9FC47nNrXEMWC
hQw5ygV9jfC7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2YwYzZj
YTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTc4YmMzYTItZmVhNy00ZDlhLWI0ZjgtNTc2ODI0
MjU2MWEyL2VmZDgzMzI1NWU5ZTUwYTIxMjk5N2JjMDExMmYwOWUxYmZkZTg4OTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzhiYzNhMi1mZWE3LTRkOWEtYjRmOC01NzY4
MjQyNTYxYTIvN2YwYzZjYTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3mITANBgkqhkiG9w0BAQsFAAOCAQEAZKOfl4WS47V9IAHA
GrNWALhJDufuBJ6cX3vK0himms90YfLp/StIiN/3Ueq+FfXag8B3jFOWX030mMQI
i3MyhlWuiVw6c89b5Ur9bsXoU3VHgwMi2O8UtcfBEaTIY/V5I795Cp+Ukw7vpfSp
gjlOuyBbeLSHAI2qhSC4iyQCKNPQ/4bso7/grX/kLpqLxBiNynrdzy9m+rQ8Ig98
ZhOT/DqMljaPIBC36joj05gfpPH4tg9heGBIgDbzbiU5sjTgq2IeWItnREbyuC05
mRjxwSs9TdsDBoD2nXkEvRnXomiMNsDtDj8kncN2Jaf5pY9aUXyRAeDNLWmINh00
Dk13FA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org