Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/7d6253056af01693040f3803261ed95aa28aefeb.roa
File:                     7d6253056af01693040f3803261ed95aa28aefeb.roa (raw, json)
Hash identifier:          rKNKcbhEVjrnZ0Kg5XtQAYOvUI4H08gt1E764Nw9DrY=
Subject key identifier:   BE:F8:24:59:60:7F:5A:C2:C6:89:43:92:6A:23:E8:3E:0D:B4:04:92
Certificate issuer:       /CN=9d25be9947afcb39fce110f05b5d8afd69a92382
Certificate serial:       237B03
Authority key identifier: A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/7d6253056af01693040f3803261ed95aa28aefeb.roa
Signing time:             Thu 07 Sep 2023 02:12:23 +0000
ROA not before:           Wed 06 Sep 2023 02:12:23 +0000
ROA not after:            Sun 07 Sep 2025 02:12:23 +0000
asID:                     265838
IP address blocks:        45.224.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325251 (0x237b03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d25be9947afcb39fce110f05b5d8afd69a92382
        Validity
            Not Before: Sep  6 02:12:23 2023 GMT
            Not After : Sep  7 02:12:23 2025 GMT
        Subject: CN=7d6253056af01693040f3803261ed95aa28aefeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:59:00:88:96:e9:2b:e2:29:bd:88:7f:50:
                    e9:9d:2b:9e:07:8c:8d:cd:fd:cb:85:3e:d0:7b:d5:
                    6b:4f:86:ef:ff:4c:50:dc:e6:3a:51:bc:ad:88:e9:
                    3c:a1:c1:01:a2:ff:0b:89:eb:ac:75:43:9e:66:53:
                    50:6d:a9:bb:65:cc:fa:6b:e6:f1:d1:fa:e9:fe:f7:
                    43:99:9b:34:1b:94:76:45:2e:94:2c:ca:89:15:32:
                    5e:fe:54:35:bc:06:9f:b3:e3:fb:4c:55:97:3c:17:
                    d4:68:98:59:6d:9a:53:2b:ec:af:41:18:ec:48:57:
                    e1:f3:a6:60:24:47:77:11:45:00:24:c1:0a:70:41:
                    a3:06:32:00:d2:02:98:a5:85:41:d8:78:05:09:69:
                    4f:f7:9b:4e:b2:83:a7:3d:90:14:b8:f1:66:8a:2e:
                    e9:bc:5c:64:30:ee:f6:55:65:60:56:34:09:95:b7:
                    e7:2c:27:6d:05:53:ab:4f:cb:ec:47:77:97:55:b2:
                    3d:12:a9:e1:35:ca:74:d9:d9:3f:69:60:74:75:f4:
                    8c:15:bb:f7:ca:a4:20:2f:04:e9:db:b2:a2:2b:b5:
                    85:df:d8:36:9f:15:51:a5:17:1e:b1:4e:79:60:11:
                    b8:92:0f:17:ca:e7:f1:98:06:47:5d:9a:bc:fe:69:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:24:59:60:7F:5A:C2:C6:89:43:92:6A:23:E8:3E:0D:B4:04:92
            X509v3 Authority Key Identifier:
                keyid:A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/7d6253056af01693040f3803261ed95aa28aefeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:aa:6b:65:84:cd:65:c4:b3:eb:ad:dc:83:b6:9f:d4:52:
         32:e7:5b:72:db:14:bb:50:12:51:2b:be:5d:3c:a4:95:b2:62:
         b5:28:84:93:28:7a:37:ee:67:6e:d1:a6:23:81:f1:27:ae:84:
         47:1c:9a:2f:4c:f2:0c:5b:5f:8e:c0:94:29:aa:d6:af:f7:d6:
         48:cf:69:5c:74:7b:e6:e2:da:dd:36:86:fd:b1:d3:6f:67:db:
         3d:0e:76:7c:3c:d6:d6:a0:9b:50:20:9a:cf:2b:cc:aa:fa:a5:
         1c:18:f4:e9:36:87:1a:39:f5:cb:c4:84:d0:3e:18:f1:73:03:
         1b:df:b2:bf:6b:1a:6f:10:f6:00:c6:e4:89:37:af:23:d2:d0:
         0e:4b:f7:08:bd:ad:d5:ae:34:62:9b:8d:c5:f4:4f:99:c0:1b:
         31:a8:47:1e:65:00:1d:62:d9:34:d7:24:88:83:37:9c:17:3c:
         f8:8c:3e:76:9c:89:42:09:fa:09:f6:81:44:35:58:be:01:a6:
         24:e6:be:80:43:d0:b9:72:43:a7:17:0b:52:87:be:6a:25:59:
         5d:d8:b5:c0:6a:a6:47:a0:23:3b:a5:d4:9d:80:1a:bf:11:52:
         04:93:4d:24:12:4d:06:65:33:a2:76:0b:e6:36:d3:d6:16:30:
         e8:c4:85:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI3sDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
MjViZTk5NDdhZmNiMzlmY2UxMTBmMDViNWQ4YWZkNjlhOTIzODIwHhcNMjMwOTA2
MDIxMjIzWhcNMjUwOTA3MDIxMjIzWjAzMTEwLwYDVQQDEyg3ZDYyNTMwNTZhZjAx
NjkzMDQwZjM4MDMyNjFlZDk1YWEyOGFlZmViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmMdZAIiW6SviKb2If1DpnSueB4yNzf3LhT7Qe9VrT4bv/0xQ
3OY6UbytiOk8ocEBov8LieusdUOeZlNQbam7Zcz6a+bx0frp/vdDmZs0G5R2RS6U
LMqJFTJe/lQ1vAafs+P7TFWXPBfUaJhZbZpTK+yvQRjsSFfh86ZgJEd3EUUAJMEK
cEGjBjIA0gKYpYVB2HgFCWlP95tOsoOnPZAUuPFmii7pvFxkMO72VWVgVjQJlbfn
LCdtBVOrT8vsR3eXVbI9EqnhNcp02dk/aWB0dfSMFbv3yqQgLwTp27KiK7WF39g2
nxVRpRcesU55YBG4kg8XyufxmAZHXZq8/mmd7wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL74JFlgf1rCxolDkmoj6D4NtASSMB8GA1UdIwQYMBaAFKKMY6QjeDde8l9n
jdQ+cgl2qh/6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQyNWJl
OTk0N2FmY2IzOWZjZTExMGYwNWI1ZDhhZmQ2OWE5MjM4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWMwY2VhYzItMDViNi00ZDAzLThlZmEtYmJkOGQ1
OTEwZDhlLzdkNjI1MzA1NmFmMDE2OTMwNDBmMzgwMzI2MWVkOTVhYTI4YWVmZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYzBjZWFjMi0wNWI2LTRkMDMtOGVmYS1iYmQ4
ZDU5MTBkOGUvOWQyNWJlOTk0N2FmY2IzOWZjZTExMGYwNWI1ZDhhZmQ2OWE5MjM4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3gdzANBgkqhkiG9w0BAQsFAAOCAQEAiqyqa2WEzWXEs+ut
3IO2n9RSMudbctsUu1ASUSu+XTyklbJitSiEkyh6N+5nbtGmI4HxJ66ERxyaL0zy
DFtfjsCUKarWr/fWSM9pXHR75uLa3TaG/bHTb2fbPQ52fDzW1qCbUCCazyvMqvql
HBj06TaHGjn1y8SE0D4Y8XMDG9+yv2sabxD2AMbkiTevI9LQDkv3CL2t1a40YpuN
xfRPmcAbMahHHmUAHWLZNNckiIM3nBc8+Iw+dpyJQgn6CfaBRDVYvgGmJOa+gEPQ
uXJDpxcLUoe+aiVZXdi1wGqmR6AjO6XUnYAavxFSBJNNJBJNBmUzonYL5jbT1hYw
6MSFAw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org